Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa
File:                     cc50029d-2795-3128-97b2-eadfbd0c65c3.roa (raw, json)
Hash identifier:          YV0B+hKFFigiBXnLrfVsneTMzqXTfkhywuEja38el/4=
Subject key identifier:   61:E3:78:94:07:03:92:54:DD:90:CA:20:05:F7:22:C9:AE:A9:3B:00
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF5A83C1A3460077B416C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397214
IP address blocks:        156.154.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:5a:83:c1:a3:46:00:77:b4:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=b665a82e-aca6-402d-817d-3d3ec9ff1fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:26:06:06:d9:93:8a:57:53:0d:8a:c3:8c:
                    80:a2:6c:da:77:ce:41:58:90:7d:03:a6:d9:2f:f1:
                    4d:b6:fe:a0:1d:28:b8:78:65:f2:d2:45:38:ee:fa:
                    77:08:b3:74:a8:b4:f5:24:30:be:fc:12:82:c6:4b:
                    fe:77:18:3b:46:51:1e:31:9a:73:fd:a0:d4:90:82:
                    0e:f3:e1:87:42:b2:f6:f9:62:6c:e2:66:d3:8c:81:
                    80:af:49:18:2d:43:90:1d:38:4f:69:a2:ae:ad:55:
                    f2:a1:11:15:88:37:43:e5:8a:81:79:1e:82:8f:17:
                    20:5d:7d:b7:90:77:9c:e5:01:d9:ed:b2:f0:65:df:
                    ab:98:d2:62:b5:57:65:97:7a:17:73:49:72:16:7e:
                    98:59:c1:ad:31:65:31:2b:87:21:4a:9f:c4:b0:46:
                    14:78:18:83:e2:64:3a:b8:fa:ed:96:75:84:82:be:
                    8a:7f:1b:1c:9d:ea:68:c0:ec:9b:d4:1c:f7:b9:8e:
                    88:d5:d4:39:01:58:28:01:df:18:a5:f6:c1:52:d6:
                    49:74:8b:89:9f:2c:8e:c5:bb:22:75:2d:37:10:ba:
                    9d:b8:7e:f0:b0:4b:75:84:6a:7b:c2:24:5b:fb:a6:
                    2c:85:6f:df:c7:df:a2:f8:54:9e:51:8e:2e:52:d5:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E3:78:94:07:03:92:54:DD:90:CA:20:05:F7:22:C9:AE:A9:3B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:15:e7:e6:d6:ff:70:dc:bf:4c:8f:de:7f:b7:e7:8e:af:78:
         84:69:c7:e4:6b:6d:d9:22:f5:80:7a:f4:e2:49:44:a4:c7:99:
         37:31:af:86:4c:e9:31:30:94:96:c5:23:30:e3:49:4c:93:b6:
         a7:8f:81:bf:4c:85:aa:dd:6e:a5:62:97:e2:0e:dd:9d:0d:42:
         a2:38:f1:24:0a:e2:0a:e4:2a:8d:5c:7a:f2:f8:23:f5:52:16:
         2c:ab:ad:42:63:75:6d:f3:81:76:73:99:3f:e4:70:54:48:dc:
         3d:2c:4a:3f:4b:0e:10:05:91:99:e6:55:4b:65:88:b2:03:3e:
         3e:d9:d7:77:f8:b5:6e:32:f2:3e:5d:68:5a:a2:ce:80:72:e0:
         93:bc:e0:c1:de:8d:08:10:cd:a1:b5:8c:99:1c:2a:ff:f7:6f:
         47:ad:71:8a:24:80:87:0e:dc:ae:3b:04:0b:ab:25:7a:69:8c:
         f7:d7:36:d5:0e:56:f7:3d:3f:d2:a4:ea:ec:65:2a:23:2a:7e:
         5b:45:e3:e5:a0:70:b7:1e:63:7b:e9:58:70:ad:c9:3f:92:60:
         ab:d5:cd:c5:e6:10:52:01:a0:5d:4c:a1:a9:a2:1e:f7:cd:f5:
         79:c6:ce:18:31:0c:43:ad:8a:15:32:b7:9a:e0:2c:f7:1b:a4:
         a0:33:90:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1qDwaNGAHe0FsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
YjY2NWE4MmUtYWNhNi00MDJkLTgxN2QtM2QzZWM5ZmYxZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5MmBgbZk4pXUw2Kw4yAomzad85BWJB9A6bZ
L/FNtv6gHSi4eGXy0kU47vp3CLN0qLT1JDC+/BKCxkv+dxg7RlEeMZpz/aDUkIIO
8+GHQrL2+WJs4mbTjIGAr0kYLUOQHThPaaKurVXyoREViDdD5YqBeR6CjxcgXX23
kHec5QHZ7bLwZd+rmNJitVdll3oXc0lyFn6YWcGtMWUxK4chSp/EsEYUeBiD4mQ6
uPrtlnWEgr6KfxscnepowOyb1Bz3uY6I1dQ5AVgoAd8YpfbBUtZJdIuJnyyOxbsi
dS03ELqduH7wsEt1hGp7wiRb+6YshW/fx9+i+FSeUY4uUtVa+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHjeJQHA5JU3ZDKIAX3IsmuqTsAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2M1MDAyOWQtMjc5NS0z
MTI4LTk3YjItZWFkZmJkMGM2NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAV5+bW/3Dcv0yP3n+3546veIRpx+Rrbdki9YB69OJJRKTHmTcxr4ZM
6TEwlJbFIzDjSUyTtqePgb9MhardbqVil+IO3Z0NQqI48SQK4grkKo1cevL4I/VS
FiyrrUJjdW3zgXZzmT/kcFRI3D0sSj9LDhAFkZnmVUtliLIDPj7Z13f4tW4y8j5d
aFqizoBy4JO84MHejQgQzaG1jJkcKv/3b0etcYokgIcO3K47BAurJXppjPfXNtUO
Vvc9P9Kk6uxlKiMqfltF4+WgcLceY3vpWHCtyT+SYKvVzcXmEFIBoF1MoamiHvfN
9XnGzhgxDEOtihUyt5rgLPcbpKAzkJQ=
-----END CERTIFICATE-----
Generated at Fri May 9 23:50:01 2025 by rpki-client