Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5e66d52-b297-34d1-b0c9-9155f8ecc03b.roa
File:                     c5e66d52-b297-34d1-b0c9-9155f8ecc03b.roa (raw, json)
Hash identifier:          0srIo8HWbG6v1G/FZkB27KK3CMMUF/QDsm0Hb2Av/UY=
Subject key identifier:   57:2B:17:79:C7:41:9C:74:93:29:9E:AE:73:B9:9C:0C:5E:89:9C:3A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF5A42766B683E1126C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5e66d52-b297-34d1-b0c9-9155f8ecc03b.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397229
IP address blocks:        156.154.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f5:a4:27:66:b6:83:e1:12:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=6211f525-8629-447f-8419-7bf2dd9b5b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:19:4a:58:ae:60:79:e1:94:4a:9f:ef:12:
                    7d:96:51:b6:92:c7:4f:ea:be:69:f5:b5:4c:33:2e:
                    a3:24:bb:8b:dd:da:a1:40:ad:04:b7:4f:61:23:90:
                    b1:f7:d0:39:31:c8:c4:b3:72:63:a8:45:c5:56:ea:
                    ae:88:e3:3f:eb:2d:fb:7b:79:ae:26:c1:cd:1f:b4:
                    4e:a1:2b:2d:a5:01:79:01:29:69:95:58:bb:b4:3a:
                    eb:93:56:89:fb:4d:c2:ea:50:d1:10:ae:65:0c:43:
                    b2:87:45:d0:fe:0e:90:6b:a8:48:92:d8:91:6e:5f:
                    c6:78:86:be:f8:a0:3f:42:49:3a:ce:50:65:e3:cf:
                    00:bf:94:f8:c9:77:0b:de:40:f2:6f:84:67:20:fb:
                    19:11:04:41:6e:f0:a8:a2:6f:dc:13:a6:7a:fe:96:
                    75:97:10:e3:c9:63:1b:1d:3b:06:2e:03:67:00:32:
                    5f:d9:48:6a:02:36:5b:1f:31:ee:18:9a:53:bc:56:
                    09:eb:89:a0:ac:78:6b:58:df:42:4d:68:93:c8:c3:
                    11:ac:c6:ac:a4:90:8e:33:f3:98:c9:4c:30:a4:a1:
                    c5:7a:68:5b:4d:11:e1:72:d8:b5:b3:8e:49:f5:38:
                    64:25:3a:c9:9f:e3:12:6d:e0:bf:fb:be:15:48:66:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2B:17:79:C7:41:9C:74:93:29:9E:AE:73:B9:9C:0C:5E:89:9C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5e66d52-b297-34d1-b0c9-9155f8ecc03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:11:8d:de:95:f6:bd:ae:7d:18:57:16:a7:e0:9f:a2:bc:
         cb:e6:51:5d:ea:23:c2:20:50:ee:aa:34:ec:8f:ca:d2:af:c8:
         11:d2:d1:85:8a:2a:64:a4:4c:06:54:41:38:9a:78:b2:38:10:
         d0:e7:e2:5c:81:27:5a:3d:dc:b2:40:3c:06:15:1b:cc:9d:a8:
         35:4a:50:d6:dc:10:16:fc:53:5b:bf:17:9d:c4:e1:a2:59:49:
         c6:a7:d0:34:0f:59:c1:19:6b:74:bc:25:71:38:0f:e7:dc:b5:
         e0:dd:69:56:a7:8e:fb:8d:46:82:59:bf:64:0c:f6:7b:3c:da:
         e6:2b:53:93:c3:be:99:4b:3e:06:c6:d2:72:1b:fc:ed:d7:3d:
         34:86:27:4a:9e:93:26:15:bd:6a:8f:1b:fb:c5:ca:03:4d:bc:
         2e:f9:57:36:22:19:72:4c:6d:24:77:4a:04:d8:d5:ed:03:a7:
         a3:83:65:96:bf:68:d9:0a:23:6e:d3:0c:e3:2f:31:49:4e:5a:
         64:7c:93:a7:8b:cf:f5:dc:cf:96:dc:88:ac:37:fd:05:af:81:
         37:2c:78:32:8e:26:14:5d:5c:82:6d:61:07:85:b9:7a:7c:11:
         eb:7a:13:2a:3c:e4:97:d4:a5:2c:13:3f:db:6f:20:af:d0:3b:
         12:0e:a5:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf/WkJ2a2g+ESbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NjIxMWY1MjUtODYyOS00NDdmLTg0MTktN2JmMmRkOWI1Yjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL0ZSliuYHnhlEqf7xJ9llG2ksdP6r5p9bVM
My6jJLuL3dqhQK0Et09hI5Cx99A5McjEs3JjqEXFVuquiOM/6y37e3muJsHNH7RO
oSstpQF5ASlplVi7tDrrk1aJ+03C6lDREK5lDEOyh0XQ/g6Qa6hIktiRbl/GeIa+
+KA/Qkk6zlBl488Av5T4yXcL3kDyb4RnIPsZEQRBbvCoom/cE6Z6/pZ1lxDjyWMb
HTsGLgNnADJf2UhqAjZbHzHuGJpTvFYJ64mgrHhrWN9CTWiTyMMRrMaspJCOM/OY
yUwwpKHFemhbTRHhcti1s45J9ThkJTrJn+MSbeC/+74VSGZTVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcrF3nHQZx0kymernO5nAxeiZw6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzVlNjZkNTItYjI5Ny0z
NGQxLWIwYzktOTE1NWY4ZWNjMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqyEY3elfa9rn0YVxan4J+ivMvmUV3qI8IgUO6qNOyPytKvyBHS0YWK
KmSkTAZUQTiaeLI4ENDn4lyBJ1o93LJAPAYVG8ydqDVKUNbcEBb8U1u/F53E4aJZ
Scan0DQPWcEZa3S8JXE4D+fcteDdaVanjvuNRoJZv2QM9ns82uYrU5PDvplLPgbG
0nIb/O3XPTSGJ0qekyYVvWqPG/vFygNNvC75VzYiGXJMbSR3SgTY1e0Dp6ODZZa/
aNkKI27TDOMvMUlOWmR8k6eLz/Xcz5bciKw3/QWvgTcseDKOJhRdXIJtYQeFuXp8
Eet6Eyo85JfUpSwTP9tvIK/QOxIOpfQ=
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:17:56 2025 by rpki-client