Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01d79881-93c8-3835-ac90-e45063694699.roa
File:                     01d79881-93c8-3835-ac90-e45063694699.roa (raw, json)
Hash identifier:          aR6ZPsNxleOHqidULLuQyKbdDG4cVLPQsVhbhgXpy58=
Subject key identifier:   29:2E:85:CD:D6:08:51:5F:D1:A7:8E:4F:3F:D0:04:F1:E8:53:A9:BE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD210A03991FAAD3F9477480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01d79881-93c8-3835-ac90-e45063694699.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397228
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:21:0a:03:99:1f:aa:d3:f9:47:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=dd5d8301-d37f-403a-92b0-337c58067974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:8b:b1:18:ac:59:17:9c:2a:37:a8:d0:2a:
                    92:5b:76:dd:e3:d5:a3:8e:2b:0a:9a:3f:f8:23:21:
                    23:18:c0:b6:86:4d:fa:a3:d0:0e:97:9f:a4:8e:10:
                    ba:13:00:25:d2:b6:a9:e6:18:ec:7a:2e:c4:36:ef:
                    fa:b2:b2:92:c7:34:ef:ec:47:b0:5a:a7:f1:29:1d:
                    94:20:92:a9:13:19:1e:51:e3:7f:68:8d:dd:8c:a6:
                    dd:3a:70:b7:51:41:cc:b7:66:ef:db:2d:8b:e9:69:
                    e6:93:fd:54:1d:c1:7d:0c:f6:75:e1:12:e4:6b:52:
                    c3:ca:0d:65:e1:f4:10:20:0c:cd:40:92:5c:a7:b7:
                    9f:2a:51:28:e9:81:f6:f7:bb:11:8e:3b:eb:50:fa:
                    db:cd:8e:1e:c8:17:e5:e8:8a:7f:0c:0b:62:49:fd:
                    06:03:25:10:73:85:05:74:5e:c7:51:e8:98:63:b2:
                    3a:ec:e6:98:03:6a:10:b1:30:67:66:e9:dd:4e:d7:
                    61:f8:7a:25:9d:16:7e:64:ee:5a:a5:7b:7a:fc:b0:
                    de:76:19:19:34:c3:5c:be:67:a8:4e:f4:75:e6:ba:
                    57:14:a9:63:39:11:a3:86:cb:45:f6:91:a9:d8:4e:
                    4a:38:a1:47:07:1e:1f:cc:24:86:b2:db:10:54:59:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2E:85:CD:D6:08:51:5F:D1:A7:8E:4F:3F:D0:04:F1:E8:53:A9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01d79881-93c8-3835-ac90-e45063694699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:51:82:16:e7:d0:58:48:c2:a3:a2:3b:ec:4f:a7:4c:c5:
         02:2a:1e:bd:06:ee:81:d5:54:53:25:fd:ae:a8:05:2e:5b:1a:
         88:75:2c:84:4c:e8:72:be:f5:2c:83:b4:4a:26:d4:c8:83:1b:
         49:4b:f2:63:e2:53:3a:b5:23:e7:0c:70:93:43:e9:03:cf:a7:
         75:68:2f:71:22:0e:f6:da:21:3d:af:bd:e2:b4:f6:27:9d:26:
         68:d8:65:3a:4c:1f:3e:63:20:32:2f:73:a0:3e:72:35:99:05:
         de:74:2e:36:92:f9:2a:b2:97:a1:96:5e:a4:a9:16:d0:d7:eb:
         e1:19:90:20:27:e5:08:fb:6a:91:a8:85:c1:c5:19:91:9f:c9:
         a9:17:ac:d7:6f:97:f7:21:70:ff:15:03:1f:0a:7d:7c:2c:50:
         fc:71:f1:c4:a9:84:4e:a4:33:51:58:28:82:5d:b5:a1:5f:e7:
         59:5e:fd:ef:85:de:a7:57:a6:66:90:c4:31:03:e0:61:c1:94:
         d7:9e:11:cf:07:56:5f:83:11:f5:ad:d3:a8:91:ab:4c:34:52:
         5a:07:d0:64:54:ca:35:20:7e:f1:68:9d:be:c7:61:e4:5e:ec:
         29:50:66:b5:66:f9:29:cc:d6:e5:9a:d4:01:45:a6:84:4c:68:
         6b:24:c0:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IQoDmR+q0/lHdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZGQ1ZDgzMDEtZDM3Zi00MDNhLTkyYjAtMzM3YzU4MDY3OTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL6LsRisWRecKjeo0CqSW3bd49WjjisKmj/4
IyEjGMC2hk36o9AOl5+kjhC6EwAl0rap5hjsei7ENu/6srKSxzTv7EewWqfxKR2U
IJKpExkeUeN/aI3djKbdOnC3UUHMt2bv2y2L6Wnmk/1UHcF9DPZ14RLka1LDyg1l
4fQQIAzNQJJcp7efKlEo6YH297sRjjvrUPrbzY4eyBfl6Ip/DAtiSf0GAyUQc4UF
dF7HUeiYY7I67OaYA2oQsTBnZundTtdh+HolnRZ+ZO5apXt6/LDedhkZNMNcvmeo
TvR15rpXFKljORGjhstF9pGp2E5KOKFHBx4fzCSGstsQVFku9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkuhc3WCFFf0aeOTz/QBPHoU6m+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDFkNzk4ODEtOTNjOC0z
ODM1LWFjOTAtZTQ1MDYzNjk0Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERqUYIW59BYSMKjojvsT6dMxQIqHr0G7oHVVFMl/a6oBS5bGoh1LIRM
6HK+9SyDtEom1MiDG0lL8mPiUzq1I+cMcJND6QPPp3VoL3EiDvbaIT2vveK09ied
JmjYZTpMHz5jIDIvc6A+cjWZBd50LjaS+Sqyl6GWXqSpFtDX6+EZkCAn5Qj7apGo
hcHFGZGfyakXrNdvl/chcP8VAx8KfXwsUPxx8cSphE6kM1FYKIJdtaFf51le/e+F
3qdXpmaQxDED4GHBlNeeEc8HVl+DEfWt06iRq0w0UloH0GRUyjUgfvFonb7HYeRe
7ClQZrVm+SnM1uWa1AFFpoRMaGskwIU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:41 2025 by rpki-client