Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa
File:                     7c8c7fde-4524-3c14-85af-3a61f46e100e.roa (raw, json)
Hash identifier:          tgeFUikYDhmS2N8h/0itUmwF3JRl7LmORSy11W1SgNs=
Subject key identifier:   58:7A:16:39:8C:3B:39:28:CF:D3:ED:5A:AF:50:22:CC:F0:4F:1F:5D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A3B7B2307AC14899BF64A3F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     397230
IP address blocks:        156.154.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:23:07:ac:14:89:9b:f6:4a:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=b96abb91-2440-48ef-9eba-5b45c0992262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:1d:8f:6c:fe:86:cc:b7:86:de:fc:de:b4:
                    f1:22:d8:7b:12:45:fb:a7:26:7c:bf:d7:a4:97:54:
                    cf:64:2f:2d:8e:87:cb:db:ad:51:d3:4f:e3:27:5e:
                    5e:89:a9:a5:20:80:9f:0f:1d:f7:37:1c:d7:d7:4a:
                    95:4e:96:0e:41:4b:d5:77:6a:1c:80:5c:0b:32:99:
                    96:0f:fe:dc:1d:4c:a1:70:75:e6:cc:e4:77:46:af:
                    ce:69:49:63:15:25:0c:7a:47:4e:4b:71:50:78:27:
                    16:85:18:37:28:bd:16:10:6a:c5:9f:32:6d:06:83:
                    7e:99:7d:b9:dd:80:f1:5e:7d:f8:1a:dd:5c:ea:f4:
                    29:af:89:ab:a7:14:d6:71:24:9a:dd:37:3d:b7:d3:
                    6a:57:a5:0b:cf:20:1c:c2:db:40:be:c3:a4:4f:fd:
                    e6:38:73:31:7e:db:d3:f8:9a:17:3a:0a:5e:1f:d4:
                    0a:13:10:aa:98:1a:d1:df:b6:4d:70:bc:64:d3:1a:
                    c4:19:c2:79:81:72:00:d0:d3:14:80:d9:ed:97:b1:
                    1a:6f:b5:6d:7b:da:8e:c5:11:ce:d6:08:a6:0d:d0:
                    87:38:c9:d3:d3:df:7f:c7:3b:75:82:f8:58:f8:05:
                    81:ce:6b:e2:9f:99:da:19:0d:b0:12:2e:ed:ed:4e:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7A:16:39:8C:3B:39:28:CF:D3:ED:5A:AF:50:22:CC:F0:4F:1F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cd:46:d4:7d:29:4f:2d:5a:c6:aa:12:b1:82:d6:9a:3f:d9:
         d6:c3:65:09:f9:ba:aa:9a:9e:10:da:fa:2c:15:ee:b2:88:1e:
         ac:89:6c:db:79:52:85:54:67:87:c8:7c:3d:e7:e9:f5:52:0d:
         7c:00:ac:c9:09:24:cb:bc:ba:57:4d:6d:4d:a0:af:53:91:4e:
         31:6c:42:3f:6d:dc:10:1e:76:40:8c:19:84:a3:2a:e4:c5:86:
         63:af:71:26:52:a3:86:77:5b:a6:e9:6f:21:c9:68:57:08:4c:
         b8:c2:e3:9a:37:30:85:d3:e2:41:04:62:8b:61:95:d3:58:0b:
         ee:a6:4d:89:3c:bf:33:a3:df:66:6a:e8:26:ca:62:72:b0:23:
         6b:d0:13:bd:56:78:a9:39:56:ea:81:c5:b8:d5:50:87:79:8b:
         91:67:76:c8:01:a6:2f:88:33:33:cc:3f:35:c4:56:e7:b8:5b:
         6b:75:4b:e9:1b:3b:dd:68:e6:10:dc:b7:10:30:e0:18:7a:db:
         e8:b8:42:d1:ee:45:6a:3d:cb:62:bc:2e:1e:b3:4a:78:85:4d:
         3f:ae:ad:35:76:d9:a5:2c:50:a4:67:f1:99:04:60:db:e8:4a:
         81:7f:82:98:a4:41:79:93:a4:77:d8:9e:7b:4c:18:b3:79:3b:
         5a:2c:77:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eyMHrBSJm/ZKP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
Yjk2YWJiOTEtMjQ0MC00OGVmLTllYmEtNWI0NWMwOTkyMjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7Qdj2z+hsy3ht783rTxIth7EkX7pyZ8v9ek
l1TPZC8tjofL261R00/jJ15eiamlIICfDx33NxzX10qVTpYOQUvVd2ocgFwLMpmW
D/7cHUyhcHXmzOR3Rq/OaUljFSUMekdOS3FQeCcWhRg3KL0WEGrFnzJtBoN+mX25
3YDxXn34Gt1c6vQpr4mrpxTWcSSa3Tc9t9NqV6ULzyAcwttAvsOkT/3mOHMxftvT
+JoXOgpeH9QKExCqmBrR37ZNcLxk0xrEGcJ5gXIA0NMUgNntl7Eab7Vte9qOxRHO
1gimDdCHOMnT099/xzt1gvhY+AWBzmvin5naGQ2wEi7t7U4yMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFh6FjmMOzkoz9PtWq9QIszwTx9dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2M4YzdmZGUtNDUyNC0z
YzE0LTg1YWYtM2E2MWY0NmUxMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnNRtR9KU8tWsaqErGC1po/2dbDZQn5uqqanhDa+iwV7rKIHqyJbNt5
UoVUZ4fIfD3n6fVSDXwArMkJJMu8uldNbU2gr1ORTjFsQj9t3BAedkCMGYSjKuTF
hmOvcSZSo4Z3W6bpbyHJaFcITLjC45o3MIXT4kEEYothldNYC+6mTYk8vzOj32Zq
6CbKYnKwI2vQE71WeKk5VuqBxbjVUId5i5FndsgBpi+IMzPMPzXEVue4W2t1S+kb
O91o5hDctxAw4Bh62+i4QtHuRWo9y2K8Lh6zSniFTT+urTV22aUsUKRn8ZkEYNvo
SoF/gpikQXmTpHfYnntMGLN5O1osd/k=
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:35:13 2025 by rpki-client