Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa
File:                     2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa (raw, json)
Hash identifier:          249UxYjp/w4r14EhfTdcWrE7ht8bA2aPqX+LpEYk00s=
Subject key identifier:   24:97:66:57:C2:7B:71:4A:74:1B:5E:A5:71:15:18:EB:08:77:29:D0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1F5E28F272B611023ED00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397240
IP address blocks:        156.154.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:f5:e2:8f:27:2b:61:10:23:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=a170b50b-b232-4ec0-af41-634172f19ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:b3:ac:3b:57:d9:de:21:69:4e:b0:0f:ee:
                    f1:f0:76:3a:1f:33:80:59:40:05:d4:36:b7:79:e4:
                    0e:d5:15:fd:d4:db:22:87:c2:24:79:60:89:97:77:
                    37:32:47:47:64:79:42:14:ad:52:eb:1d:13:73:24:
                    86:d6:b7:c8:74:dd:5d:4e:e9:82:3d:bb:42:3c:c7:
                    ae:c5:bb:c2:03:fa:1e:6b:84:fd:a7:36:6a:a3:c7:
                    51:0c:a6:7e:55:7d:3b:16:9d:1c:85:81:24:51:b3:
                    51:38:7c:4c:f1:e9:38:a5:e9:66:dd:65:9a:22:9d:
                    94:38:68:bd:7d:1f:ef:5a:1f:82:f9:ee:e3:56:e3:
                    2c:76:b0:bd:bf:eb:4a:f0:66:51:00:b4:2b:26:79:
                    69:d1:e6:9c:a5:fc:43:52:8f:40:ea:10:14:e5:c9:
                    39:a4:e6:c5:e2:42:9e:b0:47:f7:59:68:e2:a9:1f:
                    fa:27:9b:dd:ee:d9:32:c3:61:a7:20:a6:f9:54:54:
                    b1:98:40:f8:f1:8f:c9:fd:3d:94:7f:8e:f9:6a:a7:
                    a5:f6:37:f2:db:67:f4:43:7b:43:fc:c2:b4:f5:89:
                    54:b6:0f:f9:0d:42:43:ad:46:8a:55:24:ba:3e:cd:
                    7f:f4:60:88:cf:26:c6:7a:c4:79:49:45:9c:89:f6:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:97:66:57:C2:7B:71:4A:74:1B:5E:A5:71:15:18:EB:08:77:29:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6f:8a:77:d1:0c:89:a2:7a:4b:94:0f:58:06:5c:a4:53:54:
         6c:57:7f:3e:a2:7b:00:05:9e:dc:7e:4b:50:3b:a1:22:4a:66:
         67:dc:d8:41:00:7b:ad:5a:c4:37:a8:78:bc:22:9e:43:ee:ba:
         92:22:24:f4:4f:51:2f:70:3f:5e:60:37:df:88:0f:36:65:08:
         e9:eb:5e:b8:db:30:22:0c:e4:db:cd:cb:b7:d2:4f:4d:a2:33:
         f6:c3:2a:79:6f:6e:50:48:86:28:c5:99:2c:82:8f:74:83:2c:
         86:09:f7:ac:da:bc:7d:b3:be:6e:ce:15:b4:bc:8a:2c:59:80:
         fa:94:f9:59:06:e9:5b:bc:2f:d4:17:14:4a:83:b8:53:2e:e4:
         7c:20:5d:62:58:e5:62:4f:c2:84:8b:88:33:01:d0:64:83:86:
         1a:38:18:9d:78:ed:cb:3d:aa:93:be:06:9f:5b:ef:34:92:f4:
         44:8a:c5:d0:ec:a1:7c:39:e0:f2:d9:a8:92:35:cf:b5:c5:1b:
         aa:b4:68:33:58:02:45:92:3c:d9:a0:72:d5:d5:d9:fb:83:08:
         09:9e:69:8f:60:9a:35:6c:d0:3a:ba:8d:7d:02:ae:1e:ea:07:
         c1:ee:76:0b:37:cd:c7:e2:d6:59:9d:57:53:db:fb:03:01:d7:
         cc:93:2c:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fXijycrYRAj7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
YTE3MGI1MGItYjIzMi00ZWMwLWFmNDEtNjM0MTcyZjE5Y2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2KzrDtX2d4haU6wD+7x8HY6HzOAWUAF1Da3
eeQO1RX91Nsih8IkeWCJl3c3MkdHZHlCFK1S6x0TcySG1rfIdN1dTumCPbtCPMeu
xbvCA/oea4T9pzZqo8dRDKZ+VX07Fp0chYEkUbNROHxM8ek4pelm3WWaIp2UOGi9
fR/vWh+C+e7jVuMsdrC9v+tK8GZRALQrJnlp0eacpfxDUo9A6hAU5ck5pObF4kKe
sEf3WWjiqR/6J5vd7tkyw2GnIKb5VFSxmED48Y/J/T2Uf475aqel9jfy22f0Q3tD
/MK09YlUtg/5DUJDrUaKVSS6Ps1/9GCIzybGesR5SUWcifZz5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSXZlfCe3FKdBtepXEVGOsIdynQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmZjMTgyYjktMWYxZS0z
ZTA4LTkxMTgtYjgzODliZjYzYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9vinfRDImiekuUD1gGXKRTVGxXfz6iewAFntx+S1A7oSJKZmfc2EEA
e61axDeoeLwinkPuupIiJPRPUS9wP15gN9+IDzZlCOnrXrjbMCIM5NvNy7fST02i
M/bDKnlvblBIhijFmSyCj3SDLIYJ96zavH2zvm7OFbS8iixZgPqU+VkG6Vu8L9QX
FEqDuFMu5HwgXWJY5WJPwoSLiDMB0GSDhho4GJ147cs9qpO+Bp9b7zSS9ESKxdDs
oXw54PLZqJI1z7XFG6q0aDNYAkWSPNmgctXV2fuDCAmeaY9gmjVs0Dq6jX0Crh7q
B8Hudgs3zcfi1lmdV1Pb+wMB18yTLKY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:36:48 2025 by rpki-client