Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7329459b-4faf-39c2-8c3b-3a608a53b5e9.roa
File:                     7329459b-4faf-39c2-8c3b-3a608a53b5e9.roa (raw, json)
Hash identifier:          bX9RbVJbqTb4FRE9xkFPaRG26ZkNg3HJl1epqLzGtyM=
Subject key identifier:   D5:24:91:ED:C8:A8:2B:3F:2C:3E:77:94:47:4C:8D:8F:25:9A:77:1B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C0425568E914737D48480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7329459b-4faf-39c2-8c3b-3a608a53b5e9.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397229
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:04:25:56:8e:91:47:37:d4:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=bc0092dd-bc92-40d8-8b83-d2a8d0f52dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:25:8b:83:10:9d:34:1c:dc:3e:53:60:53:
                    75:69:9e:5f:36:64:af:77:2e:d4:db:56:68:44:f9:
                    fd:50:1e:7f:3b:1e:81:c5:64:50:2d:de:1e:85:d4:
                    4c:ff:72:5d:4e:79:1a:32:1c:19:87:88:b8:63:1b:
                    2b:5d:41:d2:87:1e:68:52:4e:94:e2:61:cf:7a:e5:
                    7b:69:22:81:9e:22:62:a0:d7:59:9e:69:fa:18:bc:
                    16:49:b4:52:70:bd:24:a7:38:52:0c:62:65:52:cd:
                    9c:df:f1:c7:95:d0:77:3e:00:3b:4b:e6:75:d8:c8:
                    33:fa:a8:47:fd:3d:57:07:e5:09:68:bc:58:8e:16:
                    87:57:29:10:81:3c:be:93:46:30:db:8a:56:aa:5a:
                    6b:f5:44:29:ce:ae:15:58:40:a6:4e:9e:1e:8b:13:
                    c2:16:6c:78:f2:0b:88:e3:83:15:ed:0e:69:46:ab:
                    a6:c8:6b:c4:72:97:e1:1b:f8:34:45:3d:8a:84:8c:
                    65:e1:f0:c1:0d:7f:1b:0f:10:f3:28:ff:7f:b2:e7:
                    4d:46:3d:05:9b:37:ad:47:33:1e:ef:0c:98:be:91:
                    9e:92:35:6b:0f:2c:39:b6:7d:e6:1b:71:dc:ba:fb:
                    6e:00:7f:37:b2:23:a3:64:c6:5c:ea:06:80:5b:67:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:24:91:ED:C8:A8:2B:3F:2C:3E:77:94:47:4C:8D:8F:25:9A:77:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7329459b-4faf-39c2-8c3b-3a608a53b5e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:54:5b:44:1b:21:a4:86:f4:81:8c:16:d3:6c:18:ab:0a:
         5f:29:79:8f:db:66:83:bd:ed:fa:a9:b2:56:75:c9:80:94:0a:
         df:0e:b5:d5:4f:98:21:bc:fd:47:fa:e9:17:77:42:ec:90:3b:
         8a:4c:7e:a6:68:5b:af:e1:48:d6:bc:15:5d:2a:36:42:bc:cb:
         99:64:3d:aa:18:92:0f:94:0d:37:69:75:60:b2:29:60:51:96:
         3f:e4:8c:32:2b:8b:3c:71:b2:88:b9:cc:2f:d7:f1:b0:80:47:
         41:ed:56:cb:47:02:61:b3:f6:65:27:fe:27:27:e5:d5:0f:c0:
         af:fe:ce:f7:6f:cf:c4:fd:8a:e4:e0:3e:2a:2c:30:3d:2d:72:
         29:61:eb:1a:b7:ce:ed:bc:16:64:20:2f:37:73:1d:9d:c1:96:
         2e:f9:86:30:98:78:df:77:0a:e3:51:e4:7e:7f:f7:40:54:b0:
         ad:b0:e8:0b:87:e7:11:53:62:2e:80:8c:8d:ba:d9:57:48:90:
         3a:d9:95:af:b4:1e:dd:54:2b:d1:02:e3:9e:7e:1c:54:df:84:
         58:c0:00:c6:bf:8c:9c:f9:9e:3c:54:fa:41:35:2f:ea:d2:4b:
         e4:16:9e:11:4c:fc:97:0a:96:d5:45:eb:f6:67:9f:f5:0b:0d:
         f3:49:32:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAQlVo6RRzfUhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
YmMwMDkyZGQtYmM5Mi00MGQ4LThiODMtZDJhOGQwZjUyZGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDAli4MQnTQc3D5TYFN1aZ5fNmSvdy7U21Zo
RPn9UB5/Ox6BxWRQLd4ehdRM/3JdTnkaMhwZh4i4YxsrXUHShx5oUk6U4mHPeuV7
aSKBniJioNdZnmn6GLwWSbRScL0kpzhSDGJlUs2c3/HHldB3PgA7S+Z12Mgz+qhH
/T1XB+UJaLxYjhaHVykQgTy+k0Yw24pWqlpr9UQpzq4VWECmTp4eixPCFmx48guI
44MV7Q5pRqumyGvEcpfhG/g0RT2KhIxl4fDBDX8bDxDzKP9/sudNRj0FmzetRzMe
7wyYvpGekjVrDyw5tn3mG3HcuvtuAH83siOjZMZc6gaAW2dLHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNUkke3IqCs/LD53lEdMjY8lmncbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzMyOTQ1OWItNGZhZi0z
OWMyLThjM2ItM2E2MDhhNTNiNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqDVFtEGyGkhvSBjBbTbBirCl8peY/bZoO97fqpslZ1yYCUCt8OtdVP
mCG8/Uf66Rd3QuyQO4pMfqZoW6/hSNa8FV0qNkK8y5lkPaoYkg+UDTdpdWCyKWBR
lj/kjDIrizxxsoi5zC/X8bCAR0HtVstHAmGz9mUn/icn5dUPwK/+zvdvz8T9iuTg
PiosMD0tcilh6xq3zu28FmQgLzdzHZ3Bli75hjCYeN93CuNR5H5/90BUsK2w6AuH
5xFTYi6AjI262VdIkDrZla+0Ht1UK9EC455+HFTfhFjAAMa/jJz5njxU+kE1L+rS
S+QWnhFM/JcKltVF6/Znn/ULDfNJMnE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:52 2025 by rpki-client