Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa
File:                     4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa (raw, json)
Hash identifier:          PP+zSXJKXxjfxqwudIPydcq11MIxSJvHh3wD3//e8jE=
Subject key identifier:   92:B9:CB:65:9F:DF:30:7A:FA:F4:83:F1:2C:6F:B0:68:E6:EF:32:72
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849B6DF470463BC61802D48AB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     12008
IP address blocks:        156.154.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:47:04:63:bc:61:80:2d:48:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=ef1f041e-7c4f-4527-aa93-7c9f82d0b9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:54:f6:ca:da:15:7e:61:04:af:09:d6:21:
                    d7:a2:3d:fc:be:c0:b8:a9:a5:28:03:95:c9:be:ea:
                    6c:cb:dc:79:18:5d:74:63:ba:82:f7:b4:f7:77:29:
                    f5:ba:5a:d0:85:84:d3:e2:a1:22:a6:fc:3c:a3:1b:
                    f2:07:a3:0a:8f:50:07:b3:72:22:93:fe:b5:9e:f4:
                    a9:47:93:5b:71:45:e3:1f:d1:dc:9a:6f:63:ba:85:
                    6e:70:19:17:83:bb:de:a9:a8:ab:44:ee:e7:f1:a6:
                    f0:3f:68:c7:5c:f8:2d:c8:5b:17:b1:75:cf:5f:7d:
                    34:22:c2:e8:aa:81:3f:78:60:7b:2d:38:ac:52:19:
                    ce:71:45:43:91:01:c5:a0:ca:47:83:8b:9d:0a:ee:
                    c4:59:cf:f4:3b:7a:e8:89:c6:2e:ea:1d:8d:cc:1b:
                    b0:f5:53:99:af:20:53:3d:a7:cb:df:80:a5:05:f6:
                    d6:82:74:61:f7:d3:0e:a5:45:e1:b4:fc:a8:0c:04:
                    e3:47:8c:14:58:1b:21:74:12:7b:ab:9c:c9:81:fb:
                    0d:0c:a4:0f:77:a3:9d:8d:95:c9:b2:c6:16:9c:9a:
                    50:d4:26:ca:28:97:f8:30:02:d7:c7:53:26:0c:12:
                    6a:71:7e:f2:ca:4a:ab:cc:30:8a:d7:ed:6c:b4:68:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B9:CB:65:9F:DF:30:7A:FA:F4:83:F1:2C:6F:B0:68:E6:EF:32:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f2c2920-5a27-35af-9e04-181d4dcc7a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9b:68:31:15:f8:b7:4e:de:d9:95:f9:78:3f:10:f4:44:2d:
         97:de:1a:af:1c:1b:0c:25:0c:62:1a:7f:0a:1f:02:a0:73:95:
         c9:58:bf:0d:00:35:39:f4:a3:08:9c:fb:43:fb:21:4e:4e:2d:
         72:77:93:0b:c9:d9:58:38:a7:94:34:13:81:5c:3e:91:3e:f8:
         3c:a8:45:b2:9d:f7:74:9c:19:23:4d:07:07:58:65:f5:22:88:
         a3:a8:e3:8e:1c:68:a0:a2:5b:44:28:bc:eb:14:0b:43:56:91:
         63:ff:1c:13:54:70:01:f9:5e:04:af:2a:12:a6:03:2b:45:fa:
         12:c0:f5:59:50:3d:6b:9b:1a:8a:c1:aa:8e:ff:0a:9a:73:73:
         d2:5d:8d:00:cb:2a:95:31:b2:e8:9a:4a:f8:90:4e:8c:57:fb:
         2e:c8:60:21:b1:ce:63:fc:53:6a:66:02:ca:3e:30:4e:9e:55:
         c7:cd:e2:e6:1b:89:30:b1:27:c2:b7:1b:13:2b:ab:78:f0:fc:
         8e:69:1e:7f:d4:1c:5a:ef:77:a3:a5:ad:b5:ba:1c:34:0e:11:
         1d:b9:da:3d:6f:dd:f7:c2:e9:e2:58:5d:e4:1f:df:78:dd:20:
         ba:de:9d:9a:ac:8a:4b:26:61:1c:86:59:ee:ef:5d:5b:d7:07:
         33:0b:2f:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230cEY7xhgC1IqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZWYxZjA0MWUtN2M0Zi00NTI3LWFhOTMtN2M5ZjgyZDBiOWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nVU9sraFX5hBK8J1iHXoj38vsC4qaUoA5XJ
vupsy9x5GF10Y7qC97T3dyn1ulrQhYTT4qEipvw8oxvyB6MKj1AHs3Iik/61nvSp
R5NbcUXjH9Hcmm9juoVucBkXg7veqairRO7n8abwP2jHXPgtyFsXsXXPX300IsLo
qoE/eGB7LTisUhnOcUVDkQHFoMpHg4udCu7EWc/0O3roicYu6h2NzBuw9VOZryBT
PafL34ClBfbWgnRh99MOpUXhtPyoDATjR4wUWBshdBJ7q5zJgfsNDKQPd6OdjZXJ
ssYWnJpQ1CbKKJf4MALXx1MmDBJqcX7yykqrzDCK1+1stGixCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJK5y2Wf3zB6+vSD8SxvsGjm7zJyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGYyYzI5MjAtNWEyNy0z
NWFmLTllMDQtMTgxZDRkY2M3YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJolMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+baDEV+LdO3tmV+Xg/EPRELZfeGq8cGwwlDGIafwofAqBzlclYvw0A
NTn0owic+0P7IU5OLXJ3kwvJ2Vg4p5Q0E4FcPpE++DyoRbKd93ScGSNNBwdYZfUi
iKOo444caKCiW0QovOsUC0NWkWP/HBNUcAH5XgSvKhKmAytF+hLA9VlQPWubGorB
qo7/Cppzc9JdjQDLKpUxsuiaSviQToxX+y7IYCGxzmP8U2pmAso+ME6eVcfN4uYb
iTCxJ8K3GxMrq3jw/I5pHn/UHFrvd6OlrbW6HDQOER252j1v3ffC6eJYXeQf33jd
ILrenZqsiksmYRyGWe7vXVvXBzMLL38=
-----END CERTIFICATE-----
Generated at Fri May 9 07:12:15 2025 by rpki-client