Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d058b605-b9b5-3284-abd9-3d71cb3a7135.roa
File:                     d058b605-b9b5-3284-abd9-3d71cb3a7135.roa (raw, json)
Hash identifier:          wL4BzQz/urVaqX4yLhLij/vqNT6kq2QuThjSD8b01Cw=
Subject key identifier:   46:71:F0:2A:E4:D8:D7:FB:2C:D6:EA:20:03:8B:0B:D3:52:37:1E:42
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A2ABAF2D63E4C8937585A4A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d058b605-b9b5-3284-abd9-3d71cb3a7135.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     397217
IP address blocks:        156.154.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:f2:d6:3e:4c:89:37:58:5a:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=49a6fe98-cfdf-48bf-833a-c4d53ae97de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:fd:18:00:86:c6:35:89:e2:d8:12:c4:9d:
                    df:70:47:43:8d:29:d1:5f:7a:f2:58:5a:08:59:2c:
                    92:01:0c:52:09:04:53:74:9c:d0:04:c9:04:cc:bb:
                    49:6f:11:30:75:cf:08:a0:12:ba:80:51:60:77:55:
                    34:69:95:bc:ff:79:13:b2:fd:6f:c8:52:a9:df:c2:
                    16:5b:44:5c:4d:84:89:f7:f5:a4:10:30:a4:a5:c4:
                    e8:45:e1:a1:32:4f:db:6f:f4:7b:a1:ba:dc:a7:b7:
                    9d:17:db:01:3a:f8:89:5c:46:bb:94:cf:ac:1d:33:
                    f3:bd:08:24:96:d2:dd:81:30:2b:f9:b9:c9:05:05:
                    2a:94:ad:af:bc:a1:eb:51:96:d1:55:30:da:cf:ac:
                    fc:9b:c5:b0:66:8b:45:5d:7d:7e:2a:e4:7b:a6:5a:
                    22:83:98:97:a0:af:af:1c:b6:43:d7:e1:d9:47:c8:
                    99:67:75:90:1f:e2:2a:ea:ba:d1:be:74:57:34:a5:
                    7a:80:5f:bb:d0:98:f7:c7:91:4f:9a:de:da:db:97:
                    d5:62:f2:cc:bf:a3:5c:77:6d:5c:f0:35:a0:45:94:
                    da:52:4c:6a:bd:17:9c:d6:e0:6f:5f:cb:70:d4:10:
                    e0:75:b6:f4:73:9b:eb:a4:91:2e:5f:cb:5b:1b:1c:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:F0:2A:E4:D8:D7:FB:2C:D6:EA:20:03:8B:0B:D3:52:37:1E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d058b605-b9b5-3284-abd9-3d71cb3a7135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8c:4d:d9:f2:39:89:da:c5:70:f0:a3:ed:a4:4d:6e:9f:10:
         f8:f7:af:49:67:f8:06:9f:cc:43:fa:c2:58:12:40:90:8d:5e:
         0c:81:73:4c:96:a2:71:46:22:e3:3d:32:70:bb:af:5e:5e:ad:
         90:74:67:99:46:c6:1d:c8:a6:66:dd:38:da:06:59:7a:61:3d:
         8c:0a:9d:92:cf:a4:4c:c5:bf:62:bc:6d:14:df:eb:15:75:da:
         eb:46:b5:20:ba:83:8d:6a:ff:07:5f:9d:a2:f0:ed:5e:3e:67:
         47:87:c9:09:3a:96:c5:d5:59:1d:88:4d:de:74:c8:5a:80:a4:
         dd:1f:7f:7c:02:af:2d:e8:60:5b:63:1e:ec:a1:4b:1f:8d:72:
         cc:cd:01:5a:6d:38:a9:73:7f:2f:06:fa:a9:e6:db:f2:ca:20:
         51:23:e4:f8:1b:8b:2e:d4:41:bd:6a:24:1d:86:7b:b3:e2:d9:
         61:ed:94:0b:99:db:22:18:ab:01:65:d5:17:5f:17:42:61:89:
         6c:c2:af:df:54:78:01:84:10:e2:ca:d4:47:bb:72:c5:a4:bc:
         2c:af:c6:70:8f:40:69:00:fc:96:01:bf:03:42:b9:f6:30:b0:
         ba:de:82:f9:9f:1b:e1:9e:58:75:3b:87:65:c3:2b:57:3d:ca:
         33:d7:bc:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvLWPkyJN1haSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
NDlhNmZlOTgtY2ZkZi00OGJmLTgzM2EtYzRkNTNhZTk3ZGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNr9GACGxjWJ4tgSxJ3fcEdDjSnRX3ryWFoI
WSySAQxSCQRTdJzQBMkEzLtJbxEwdc8IoBK6gFFgd1U0aZW8/3kTsv1vyFKp38IW
W0RcTYSJ9/WkEDCkpcToReGhMk/bb/R7obrcp7edF9sBOviJXEa7lM+sHTPzvQgk
ltLdgTAr+bnJBQUqlK2vvKHrUZbRVTDaz6z8m8WwZotFXX1+KuR7ploig5iXoK+v
HLZD1+HZR8iZZ3WQH+Iq6rrRvnRXNKV6gF+70Jj3x5FPmt7a25fVYvLMv6Ncd21c
8DWgRZTaUkxqvRec1uBvX8tw1BDgdbb0c5vrpJEuX8tbGxzFUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZx8Crk2Nf7LNbqIAOLC9NSNx5CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDA1OGI2MDUtYjliNS0z
Mjg0LWFiZDktM2Q3MWNiM2E3MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGMTdnyOYnaxXDwo+2kTW6fEPj3r0ln+AafzEP6wlgSQJCNXgyBc0yW
onFGIuM9MnC7r15erZB0Z5lGxh3IpmbdONoGWXphPYwKnZLPpEzFv2K8bRTf6xV1
2utGtSC6g41q/wdfnaLw7V4+Z0eHyQk6lsXVWR2ITd50yFqApN0ff3wCry3oYFtj
HuyhSx+NcszNAVptOKlzfy8G+qnm2/LKIFEj5Pgbiy7UQb1qJB2Ge7Pi2WHtlAuZ
2yIYqwFl1RdfF0JhiWzCr99UeAGEEOLK1Ee7csWkvCyvxnCPQGkA/JYBvwNCufYw
sLregvmfG+GeWHU7h2XDK1c9yjPXvLc=
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:22:36 2025 by rpki-client