Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f485ef5-bf28-3595-bb70-3f538240ab61.roa
File:                     8f485ef5-bf28-3595-bb70-3f538240ab61.roa (raw, json)
Hash identifier:          nuU/V9VHwZaHd2OCIssfPGWjzhUag6oAaDU2HAgWh70=
Subject key identifier:   57:D0:CC:24:33:26:66:07:DA:A5:DE:1F:C0:5F:D2:23:E7:FA:E9:81
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A0F6BFF18DE737C6BE240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f485ef5-bf28-3595-bb70-3f538240ab61.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397213
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:0f:6b:ff:18:de:73:7c:6b:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=059ee1aa-ed1b-4814-83ae-8b703c181760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:68:62:0b:bb:a5:4a:ad:d9:66:bd:3b:93:
                    82:7b:1d:c2:8d:a2:7f:70:8a:f0:98:b5:25:17:b1:
                    ef:8c:de:10:d7:c6:d9:5d:c8:8b:b5:0c:9f:94:b4:
                    5c:3a:8d:ad:46:38:ef:c1:61:9d:e3:23:2e:4c:a9:
                    0a:44:70:33:4e:15:a9:a5:89:3a:80:46:c5:52:a0:
                    56:65:10:95:f3:ba:8c:22:ea:57:e5:f3:97:59:d2:
                    fa:1a:bf:2d:59:1a:c0:e4:ec:20:55:41:0c:62:5d:
                    3e:ac:96:4f:ce:3c:fa:f0:4b:3c:35:d4:5e:f0:01:
                    31:19:6b:6f:21:3a:fb:11:07:26:21:21:7d:2c:9c:
                    98:76:64:92:fb:ff:4e:25:bd:93:db:c8:91:e2:2f:
                    94:1f:22:40:c2:5f:b5:dd:55:6e:f0:28:0e:e1:85:
                    b7:29:41:ac:57:bc:ed:aa:b1:85:8b:d4:5b:d0:0f:
                    b7:60:b6:f8:17:61:70:1e:29:d6:4c:5f:1d:16:83:
                    e2:e1:13:fb:dd:cd:48:f3:40:89:a6:08:8f:bb:3d:
                    ad:08:f4:7c:25:d4:37:bb:9d:a0:53:c6:c3:a3:a2:
                    15:6b:95:95:a5:ef:b3:da:24:48:60:84:75:12:0b:
                    5c:4e:49:5d:78:6d:65:43:ce:9b:23:1c:43:77:d7:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:CC:24:33:26:66:07:DA:A5:DE:1F:C0:5F:D2:23:E7:FA:E9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f485ef5-bf28-3595-bb70-3f538240ab61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:5f:9d:d1:43:b7:b1:50:67:6d:b1:34:cd:41:00:f3:23:
         f2:c1:36:20:0b:e3:1c:aa:e9:68:aa:06:05:6e:ad:c2:82:ec:
         40:57:98:4e:ab:06:d8:47:c3:0d:4c:07:ae:3c:ff:29:18:40:
         67:a7:e2:83:6f:b7:5b:4c:48:6b:d1:bf:1d:bd:54:b9:0f:e8:
         43:e2:44:50:3e:1d:8a:bf:11:90:21:9b:8e:49:c6:26:0e:0d:
         7d:6f:c0:da:c0:1b:d1:c7:05:43:68:3c:6c:53:d6:21:ba:25:
         74:65:50:5d:37:2d:2f:0d:40:7f:c6:6d:75:d4:a1:01:9b:76:
         5c:f5:88:8c:64:50:93:62:d6:99:4b:37:f0:17:38:66:fe:3a:
         2c:3d:2b:55:6b:83:a3:f6:b2:07:d1:17:af:e0:04:56:8c:fc:
         ba:8d:6f:5a:a7:f8:b8:dd:0b:c6:08:e0:c1:9b:df:ed:a2:af:
         8b:34:c5:32:32:58:ab:bf:39:f2:2e:7c:70:9a:24:62:92:b1:
         1d:2c:05:29:b0:16:89:b0:a3:1a:07:70:21:4b:79:17:39:a4:
         70:6a:d3:9b:c1:27:c6:d2:fa:16:26:c9:77:3e:12:07:08:ad:
         d5:cc:a9:c5:b8:b7:1d:46:46:dd:81:f4:2f:c3:db:a7:31:d0:
         bd:61:7c:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWg9r/xjec3xr4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
MDU5ZWUxYWEtZWQxYi00ODE0LTgzYWUtOGI3MDNjMTgxNzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6BoYgu7pUqt2Wa9O5OCex3CjaJ/cIrwmLUl
F7HvjN4Q18bZXciLtQyflLRcOo2tRjjvwWGd4yMuTKkKRHAzThWppYk6gEbFUqBW
ZRCV87qMIupX5fOXWdL6Gr8tWRrA5OwgVUEMYl0+rJZPzjz68Es8NdRe8AExGWtv
ITr7EQcmISF9LJyYdmSS+/9OJb2T28iR4i+UHyJAwl+13VVu8CgO4YW3KUGsV7zt
qrGFi9Rb0A+3YLb4F2FwHinWTF8dFoPi4RP73c1I80CJpgiPuz2tCPR8JdQ3u52g
U8bDo6IVa5WVpe+z2iRIYIR1EgtcTkldeG1lQ86bIxxDd9c3/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfQzCQzJmYH2qXeH8Bf0iPn+umBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGY0ODVlZjUtYmYyOC0z
NTk1LWJiNzAtM2Y1MzgyNDBhYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyHX53RQ7exUGdtsTTNQQDzI/LBNiAL4xyq6WiqBgVurcKC7EBXmE6r
BthHww1MB648/ykYQGen4oNvt1tMSGvRvx29VLkP6EPiRFA+HYq/EZAhm45JxiYO
DX1vwNrAG9HHBUNoPGxT1iG6JXRlUF03LS8NQH/GbXXUoQGbdlz1iIxkUJNi1plL
N/AXOGb+Oiw9K1Vrg6P2sgfRF6/gBFaM/LqNb1qn+LjdC8YI4MGb3+2ir4s0xTIy
WKu/OfIufHCaJGKSsR0sBSmwFomwoxoHcCFLeRc5pHBq05vBJ8bS+hYmyXc+EgcI
rdXMqcW4tx1GRt2B9C/D26cx0L1hfDY=
-----END CERTIFICATE-----
Generated at Sun May 11 01:26:25 2025 by rpki-client