Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/740cac85-c418-39da-9fd2-41e77ee91e2c.roa
File:                     740cac85-c418-39da-9fd2-41e77ee91e2c.roa (raw, json)
Hash identifier:          wA/W3vgQNcAWnC1GThE7611FtYzMlA+fU9oczNHIkr4=
Subject key identifier:   5D:D5:49:48:E7:12:B1:9A:F6:CA:E5:BD:01:EC:62:B5:74:8E:8E:68
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A3B7B32368E44DAA2FC6D7880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/740cac85-c418-39da-9fd2-41e77ee91e2c.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     397224
IP address blocks:        156.154.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:32:36:8e:44:da:a2:fc:6d:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=75ad659b-56fc-4713-944b-133fbdb47594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:26:db:2b:56:b9:45:fb:cc:fc:f1:5a:d3:04:
                    18:20:fd:b6:fa:dd:ad:02:26:94:0a:b5:e3:1d:bc:
                    4c:b2:4f:54:35:6e:4e:3b:66:9c:e3:46:ae:5a:02:
                    fc:32:41:26:e1:68:c2:e8:b2:4d:84:a0:8f:48:18:
                    af:58:16:d8:35:ab:33:90:4d:1e:55:1c:fc:76:f8:
                    f6:a8:11:15:d8:cc:a0:55:e7:6d:71:68:30:bf:bd:
                    73:21:3a:e2:40:fa:15:23:4b:68:a7:7a:ea:1f:cb:
                    76:5f:ce:28:28:db:d4:61:44:5d:41:fb:ce:dc:6d:
                    02:ff:58:92:42:14:52:e1:5d:5d:b6:99:10:17:10:
                    3a:82:6a:04:02:72:0b:6f:69:fb:c7:da:83:22:90:
                    9c:73:9c:39:04:02:f0:d9:9e:14:e0:37:bb:d5:9d:
                    0e:a3:29:2f:81:0e:4f:80:cf:3a:2b:81:77:46:41:
                    7a:88:3b:f0:86:fb:22:d5:0a:00:e7:0c:48:e1:b1:
                    34:0e:9f:5e:d5:9c:e8:6e:cd:13:98:91:3c:0f:6f:
                    6d:04:d1:73:bc:68:5b:27:34:61:10:28:bd:3a:8b:
                    3d:de:b4:77:5e:52:f5:0c:d5:ed:ba:5c:cf:e1:cd:
                    85:7c:83:c3:18:27:f5:c9:ff:d9:60:d4:a0:14:3e:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D5:49:48:E7:12:B1:9A:F6:CA:E5:BD:01:EC:62:B5:74:8E:8E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/740cac85-c418-39da-9fd2-41e77ee91e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ee:70:88:0c:30:86:4c:0b:13:f9:19:a2:92:19:d0:57:f2:
         10:9f:9d:f2:b9:09:54:aa:7a:87:11:c4:89:36:74:40:ef:5b:
         39:ae:e9:46:2f:5d:78:83:db:58:04:57:a9:49:dc:99:28:52:
         45:04:e2:20:d4:c7:1b:32:df:8b:74:9e:20:e7:6a:ba:ae:eb:
         e0:1f:23:62:f4:13:bd:ec:db:42:41:d3:fc:df:71:43:4a:87:
         8a:f7:8d:70:6a:94:bd:52:8f:65:a4:ab:e8:52:91:cd:31:60:
         e6:c2:01:6f:9f:79:3d:41:e1:5c:9f:e0:8b:66:29:73:3b:61:
         f4:ad:79:0f:ab:e0:6f:d4:94:8a:68:0a:62:94:30:2a:2e:03:
         46:8e:0f:5e:7c:e2:3e:3b:32:ea:eb:53:64:72:cd:89:2e:3c:
         bd:ab:fa:02:f6:ff:6e:26:03:8b:c9:ca:84:8a:a5:5c:2d:7d:
         49:64:c7:ff:2e:58:41:14:8c:54:07:9f:92:63:aa:6e:c1:a2:
         30:fc:8b:23:a8:1f:b5:17:cb:f7:09:b9:4b:ef:5f:09:ac:6e:
         f9:b0:41:14:4d:72:1d:6d:15:25:9b:be:ab:5c:9d:a7:13:40:
         af:d5:e1:1a:4a:9b:e1:22:10:a4:d3:a6:77:8c:57:de:2b:70:
         7d:38:52:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ezI2jkTaovxteIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
NzVhZDY1OWItNTZmYy00NzEzLTk0NGItMTMzZmJkYjQ3NTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgibbK1a5RfvM/PFa0wQYIP22+t2tAiaUCrXj
HbxMsk9UNW5OO2ac40auWgL8MkEm4WjC6LJNhKCPSBivWBbYNaszkE0eVRz8dvj2
qBEV2MygVedtcWgwv71zITriQPoVI0top3rqH8t2X84oKNvUYURdQfvO3G0C/1iS
QhRS4V1dtpkQFxA6gmoEAnILb2n7x9qDIpCcc5w5BALw2Z4U4De71Z0OoykvgQ5P
gM86K4F3RkF6iDvwhvsi1QoA5wxI4bE0Dp9e1Zzobs0TmJE8D29tBNFzvGhbJzRh
ECi9Oos93rR3XlL1DNXtulzP4c2FfIPDGCf1yf/ZYNSgFD4MfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3VSUjnErGa9srlvQHsYrV0jo5oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzQwY2FjODUtYzQxOC0z
OWRhLTlmZDItNDFlNzdlZTkxZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXucIgMMIZMCxP5GaKSGdBX8hCfnfK5CVSqeocRxIk2dEDvWzmu6UYv
XXiD21gEV6lJ3JkoUkUE4iDUxxsy34t0niDnarqu6+AfI2L0E73s20JB0/zfcUNK
h4r3jXBqlL1Sj2Wkq+hSkc0xYObCAW+feT1B4Vyf4ItmKXM7YfSteQ+r4G/UlIpo
CmKUMCouA0aOD1584j47MurrU2RyzYkuPL2r+gL2/24mA4vJyoSKpVwtfUlkx/8u
WEEUjFQHn5Jjqm7BojD8iyOoH7UXy/cJuUvvXwmsbvmwQRRNch1tFSWbvqtcnacT
QK/V4RpKm+EiEKTTpneMV94rcH04UmM=
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:04:43 2025 by rpki-client