Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/030ba151-fb4b-3af6-87a0-9716f0d385d3.roa
File:                     030ba151-fb4b-3af6-87a0-9716f0d385d3.roa (raw, json)
Hash identifier:          cIqJo+cspZGljSba9VwdsKfojda5UuGJjgDcTPlEn1g=
Subject key identifier:   E7:77:B8:C2:61:F6:EC:E0:44:3A:CD:B4:40:D2:49:90:17:CC:12:2F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68262DC4D0E05E85D4E58F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/030ba151-fb4b-3af6-87a0-9716f0d385d3.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397234
IP address blocks:        156.154.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:2d:c4:d0:e0:5e:85:d4:e5:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=7fcc8eda-c8df-4cee-8643-32c640dc4d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:76:df:46:1e:41:f6:68:1a:3e:d0:76:56:
                    c0:78:0c:d0:55:24:5a:5f:20:d9:4a:c4:00:f9:0d:
                    c4:4c:80:c0:6c:1d:8c:28:80:04:05:a6:22:4e:56:
                    52:4b:97:f6:ba:56:ad:fa:80:46:46:d6:6a:f2:e9:
                    87:e8:c8:75:ff:3b:65:a3:46:c2:aa:ee:3c:d2:ce:
                    74:c4:9d:a4:9f:b7:2f:0f:49:03:ae:a7:8d:cc:23:
                    1b:41:bd:93:4f:47:7c:3a:be:15:45:d1:60:ca:9a:
                    61:b0:1b:cb:db:88:b2:eb:15:8b:36:41:3c:8a:43:
                    1b:a4:8b:53:4b:75:13:da:3d:7b:2c:8b:96:19:72:
                    ce:59:cf:76:2b:2f:24:72:3c:c8:be:50:e0:a0:22:
                    83:19:3d:b5:d1:23:9c:5d:17:2c:44:f7:a9:4b:b5:
                    90:36:23:f0:cb:07:8f:4b:fe:86:66:0c:6a:2c:3e:
                    a6:48:ac:5e:5e:a3:8d:0f:a4:f1:6e:22:29:e4:20:
                    da:69:da:9d:c6:2e:f7:10:a8:38:83:b9:c0:9b:94:
                    3d:ca:53:bd:ca:b2:f8:d4:3a:97:97:46:1a:c8:54:
                    6c:2e:c3:ea:65:1c:92:9c:d1:c3:7f:7c:9e:de:8f:
                    36:8d:84:9d:ae:74:48:31:34:dd:9e:6d:23:08:76:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:B8:C2:61:F6:EC:E0:44:3A:CD:B4:40:D2:49:90:17:CC:12:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/030ba151-fb4b-3af6-87a0-9716f0d385d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:3c:75:d8:37:4b:ed:b6:ad:a1:10:6a:c9:b2:07:44:cd:1d:
         ff:86:e4:e8:75:9b:80:0c:aa:07:25:20:1c:5a:0a:ce:a3:2f:
         bc:82:38:ac:26:ce:32:08:0d:c7:00:d2:66:a1:2d:ee:0e:ab:
         75:25:f5:fe:82:09:35:75:1a:29:63:bd:ff:83:1c:cc:5a:20:
         9a:0a:57:ec:7d:cb:00:c2:6c:6c:cb:f1:0f:fd:de:35:54:d2:
         2e:42:80:df:f7:38:7d:32:fb:87:79:03:48:1c:9c:4e:7b:35:
         0e:b7:4d:b6:6a:94:39:b1:73:6e:43:e3:95:60:56:dc:a8:15:
         1f:7c:d2:54:25:bc:77:7a:8c:46:b1:76:48:4b:ce:37:e9:4d:
         f0:1d:a2:4e:8f:d2:2f:fa:c5:ff:e2:eb:de:03:8b:3e:9d:53:
         ab:20:e3:fc:00:f6:2e:4c:b1:c7:f3:65:70:70:2f:d8:db:67:
         df:6e:41:8e:a8:e9:ef:de:4f:6e:6d:5c:7c:f1:2b:10:ec:50:
         63:5e:15:6c:b6:ea:1f:d8:a8:fe:c8:cd:8e:0c:05:94:41:c1:
         30:ee:0e:18:39:3a:ed:c4:82:64:68:88:18:cb:38:5e:e2:bc:
         39:a7:8b:0d:b1:9e:ba:19:e1:fd:dc:c0:cd:e5:65:b4:c9:94:
         5f:ea:2b:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJi3E0OBehdTlj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
N2ZjYzhlZGEtYzhkZi00Y2VlLTg2NDMtMzJjNjQwZGM0ZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy31230YeQfZoGj7QdlbAeAzQVSRaXyDZSsQA
+Q3ETIDAbB2MKIAEBaYiTlZSS5f2ulat+oBGRtZq8umH6Mh1/ztlo0bCqu480s50
xJ2kn7cvD0kDrqeNzCMbQb2TT0d8Or4VRdFgypphsBvL24iy6xWLNkE8ikMbpItT
S3UT2j17LIuWGXLOWc92Ky8kcjzIvlDgoCKDGT210SOcXRcsRPepS7WQNiPwyweP
S/6GZgxqLD6mSKxeXqOND6TxbiIp5CDaadqdxi73EKg4g7nAm5Q9ylO9yrL41DqX
l0YayFRsLsPqZRySnNHDf3ye3o82jYSdrnRIMTTdnm0jCHY2RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOd3uMJh9uzgRDrNtEDSSZAXzBIvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDMwYmExNTEtZmI0Yi0z
YWY2LTg3YTAtOTcxNmYwZDM4NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFE8ddg3S+22raEQasmyB0TNHf+G5Oh1m4AMqgclIBxaCs6jL7yCOKwm
zjIIDccA0mahLe4Oq3Ul9f6CCTV1Giljvf+DHMxaIJoKV+x9ywDCbGzL8Q/93jVU
0i5CgN/3OH0y+4d5A0gcnE57NQ63TbZqlDmxc25D45VgVtyoFR980lQlvHd6jEax
dkhLzjfpTfAdok6P0i/6xf/i694Diz6dU6sg4/wA9i5MscfzZXBwL9jbZ99uQY6o
6e/eT25tXHzxKxDsUGNeFWy26h/YqP7IzY4MBZRBwTDuDhg5Ou3EgmRoiBjLOF7i
vDmniw2xnroZ4f3cwM3lZbTJlF/qK+Y=
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:19 2025 by rpki-client