Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eaebc6d9-e5b8-3ae2-a3c0-9b70a9f6f81d.roa
File:                     eaebc6d9-e5b8-3ae2-a3c0-9b70a9f6f81d.roa (raw, json)
Hash identifier:          dc2m1Poirc3n4N8BOvzRIqdpDiwkqzfCdqT45aEc5u0=
Subject key identifier:   B3:8A:CA:33:CD:A0:19:34:81:F1:5A:A9:5B:96:78:8C:FE:CA:DB:AC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BFD9783360A3078D60EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eaebc6d9-e5b8-3ae2-a3c0-9b70a9f6f81d.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397233
IP address blocks:        156.154.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:fd:97:83:36:0a:30:78:d6:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=cb44e5c1-58bd-4ba7-a4c0-26118bbebd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:d5:12:89:b3:f3:36:80:95:cb:e1:17:0c:
                    69:3a:6a:3b:b6:d9:7d:cf:14:7d:0d:9c:85:94:e3:
                    a3:04:df:8d:12:d8:54:60:91:cb:6f:58:b6:dc:65:
                    be:32:4b:95:81:2f:e1:36:0f:a4:f6:ed:64:ec:12:
                    d0:d0:4b:29:77:06:1b:2d:a0:a1:52:e3:35:f8:61:
                    ca:73:60:c0:00:8a:96:5d:9f:ea:c6:ac:30:a0:02:
                    5e:a2:7f:3d:a8:3c:d3:e3:a6:65:81:b0:58:a1:72:
                    29:dc:eb:42:0c:43:c5:2e:ad:50:66:71:fe:19:cc:
                    b7:9f:e4:5e:37:e9:23:cf:61:e9:c6:ed:ea:6a:d6:
                    ac:a5:b5:d8:aa:0c:f2:fd:7c:9d:96:e8:24:c7:3c:
                    ab:e5:23:72:b3:ce:d5:90:8a:eb:ae:84:8e:61:90:
                    0f:7a:2e:70:eb:b8:48:62:9a:2e:83:a6:c2:08:24:
                    84:fb:8f:88:17:09:79:ab:83:63:df:f5:a6:23:38:
                    d8:18:ee:47:43:db:ef:cf:5b:68:63:14:c3:af:09:
                    81:ac:63:db:d9:e1:12:9a:62:5e:49:02:01:7d:b9:
                    f3:a1:17:e4:a1:02:2e:70:24:a2:01:c5:77:70:c5:
                    2b:56:0b:27:f5:dd:e0:ca:62:f4:8a:da:74:96:58:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8A:CA:33:CD:A0:19:34:81:F1:5A:A9:5B:96:78:8C:FE:CA:DB:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eaebc6d9-e5b8-3ae2-a3c0-9b70a9f6f81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:17:6b:ae:0e:56:c2:21:6d:ec:ba:fc:6b:5e:b4:bd:91:
         7f:7e:b0:34:ab:29:eb:5f:ee:f8:8f:31:ff:bf:05:d7:e1:75:
         1e:53:63:08:b8:cb:4d:db:d5:23:9b:cf:83:38:8a:6f:4c:c9:
         4c:fa:46:d3:39:fd:c9:8e:43:70:6d:4d:10:02:f1:2a:3b:1d:
         b7:9c:1f:69:61:ea:19:be:2a:ef:a2:fe:22:71:64:fb:3d:6c:
         20:ec:37:c8:1e:62:a4:ba:cf:43:d8:db:00:49:91:87:2e:aa:
         12:41:81:71:50:92:d6:4d:15:bb:61:14:f4:2a:ef:83:6c:56:
         67:c8:31:d8:98:bd:c8:e7:4e:98:c2:5d:fa:23:a1:ee:38:7a:
         a0:c7:ee:6a:b0:10:89:82:de:d8:35:99:f5:79:66:35:5f:b1:
         7e:c2:fd:2b:89:63:2c:f9:d9:f6:07:a1:25:4f:9a:78:15:46:
         bc:9f:1e:2f:4c:bc:62:ec:8b:17:ce:f3:cb:ee:33:0c:ce:50:
         60:70:9c:00:b2:70:49:9e:d2:e8:33:94:d2:ae:74:62:f1:4c:
         7c:fd:c9:70:7a:6c:db:3e:76:5b:77:5c:ec:8d:61:e5:d3:6d:
         11:b1:13:d1:b1:10:0c:1c:79:88:d1:ca:d6:89:3b:d6:dc:47:
         a1:10:a6:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/2XgzYKMHjWDsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
Y2I0NGU1YzEtNThiZC00YmE3LWE0YzAtMjYxMThiYmViZDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP/VEomz8zaAlcvhFwxpOmo7ttl9zxR9DZyF
lOOjBN+NEthUYJHLb1i23GW+MkuVgS/hNg+k9u1k7BLQ0EspdwYbLaChUuM1+GHK
c2DAAIqWXZ/qxqwwoAJeon89qDzT46ZlgbBYoXIp3OtCDEPFLq1QZnH+Gcy3n+Re
N+kjz2Hpxu3qataspbXYqgzy/Xydlugkxzyr5SNys87VkIrrroSOYZAPei5w67hI
Ypoug6bCCCSE+4+IFwl5q4Nj3/WmIzjYGO5HQ9vvz1toYxTDrwmBrGPb2eESmmJe
SQIBfbnzoRfkoQIucCSiAcV3cMUrVgsn9d3gymL0itp0llizXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOKyjPNoBk0gfFaqVuWeIz+ytusMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWFlYmM2ZDktZTViOC0z
YWUyLWEzYzAtOWI3MGE5ZjZmODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHuF2uuDlbCIW3suvxrXrS9kX9+sDSrKetf7viPMf+/BdfhdR5TYwi4
y03b1SObz4M4im9MyUz6RtM5/cmOQ3BtTRAC8So7HbecH2lh6hm+Ku+i/iJxZPs9
bCDsN8geYqS6z0PY2wBJkYcuqhJBgXFQktZNFbthFPQq74NsVmfIMdiYvcjnTpjC
Xfojoe44eqDH7mqwEImC3tg1mfV5ZjVfsX7C/SuJYyz52fYHoSVPmngVRryfHi9M
vGLsixfO88vuMwzOUGBwnACycEme0ugzlNKudGLxTHz9yXB6bNs+dlt3XOyNYeXT
bRGxE9GxEAwceYjRytaJO9bcR6EQpjc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:40:31 2025 by rpki-client