Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08edbb7c-d826-3149-8104-c0d5dcd29ddd.roa
File:                     08edbb7c-d826-3149-8104-c0d5dcd29ddd.roa (raw, json)
Hash identifier:          pbiIQSum7b6Qkrp0I2JSiTvolJ2pRAGFFlFW6pg2X7g=
Subject key identifier:   DD:87:45:EB:F1:60:F0:FF:BA:0B:09:D9:89:BF:19:29:4F:9D:1E:94
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858494B64285F6D18EBBE353780E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08edbb7c-d826-3149-8104-c0d5dcd29ddd.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     397237
IP address blocks:        156.154.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:28:5f:6d:18:eb:be:35:37:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=6270a3db-8448-4d33-9be0-0d12e324625f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:78:28:14:7c:79:81:7c:64:82:45:a3:05:
                    1e:52:6c:e7:be:8d:9a:1a:5e:0d:cf:2b:fa:f7:60:
                    1b:20:e4:63:9b:e0:01:a4:a1:a0:f5:c9:2b:ec:10:
                    38:77:a0:9d:31:5e:46:6f:65:d4:1f:06:1c:43:9c:
                    2c:d5:1d:64:ef:ef:0d:12:6e:bd:b4:be:08:6e:e6:
                    d1:a3:23:51:07:04:9a:ca:a7:7b:5f:fc:b0:3c:5e:
                    3b:5f:d5:dd:2f:92:41:99:fd:ff:0c:95:d6:0e:ed:
                    27:ff:3b:25:01:04:3b:84:04:e5:47:26:da:71:d1:
                    52:49:11:bc:09:02:78:52:09:5c:2c:d1:6e:ca:b0:
                    d5:be:24:08:b8:3c:86:2a:93:b5:21:44:a9:2f:94:
                    fb:b9:52:35:52:76:03:ad:fb:30:16:80:25:d7:a7:
                    db:6c:ba:c5:15:d4:b0:3e:2f:06:90:de:47:55:31:
                    ab:d8:ce:39:29:7b:f6:68:c9:47:57:8b:de:9f:df:
                    3b:3a:37:24:2b:e1:bc:c6:ac:1c:e0:16:7d:c9:75:
                    bc:dc:a0:7f:5a:78:9c:fa:64:90:51:ad:2b:93:12:
                    e9:5d:3f:b1:4d:15:92:9c:ea:7a:51:a3:9c:0c:ab:
                    69:be:13:7d:14:d5:db:83:87:ed:2f:b0:0c:2e:cd:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:87:45:EB:F1:60:F0:FF:BA:0B:09:D9:89:BF:19:29:4F:9D:1E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08edbb7c-d826-3149-8104-c0d5dcd29ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6b:2b:b9:5d:c8:8b:b1:cf:88:f2:4c:f7:04:7d:18:3b:0f:
         ad:64:6d:d7:e4:71:37:e0:d9:19:17:c4:b2:e1:fc:5f:2f:f2:
         51:72:6d:e8:e3:80:1d:f6:55:81:fe:da:be:cf:8a:12:2c:29:
         aa:d8:29:b6:f4:f2:6c:76:1a:57:57:38:3e:54:85:bd:14:88:
         a4:7f:75:82:3a:f4:47:bb:d7:d4:65:5b:4d:cd:be:36:f1:2e:
         59:73:00:aa:bf:d4:f0:36:ee:a1:2c:aa:a8:68:31:6b:9c:57:
         86:0a:fc:42:ba:0d:93:29:fe:2e:4b:c9:23:50:b9:1d:39:cd:
         60:ac:b9:76:d7:1d:e6:29:97:12:1b:3a:95:58:7a:c7:f2:37:
         ce:1d:6a:6f:db:ee:7c:59:eb:0a:8e:7c:25:1d:a8:c6:c6:96:
         dc:45:79:bf:8a:26:bf:46:ec:0d:e4:6d:07:7e:25:9d:f4:00:
         dd:29:d3:cd:e0:bb:4e:8b:bd:62:d4:00:90:94:e9:01:a7:76:
         5b:27:ce:88:f9:a6:8b:52:ff:94:fd:8e:12:e6:c9:58:b5:4d:
         16:21:3c:99:02:b0:de:31:75:e9:1d:07:63:3a:f2:56:64:c5:
         17:71:ef:9e:48:49:47:9c:46:9c:53:4c:4e:8c:99:fc:50:78:
         1f:f7:4b:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZChfbRjrvjU3gOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
NjI3MGEzZGItODQ0OC00ZDMzLTliZTAtMGQxMmUzMjQ2MjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6V4KBR8eYF8ZIJFowUeUmznvo2aGl4Nzyv6
92AbIORjm+ABpKGg9ckr7BA4d6CdMV5Gb2XUHwYcQ5ws1R1k7+8NEm69tL4IbubR
oyNRBwSayqd7X/ywPF47X9XdL5JBmf3/DJXWDu0n/zslAQQ7hATlRybacdFSSRG8
CQJ4UglcLNFuyrDVviQIuDyGKpO1IUSpL5T7uVI1UnYDrfswFoAl16fbbLrFFdSw
Pi8GkN5HVTGr2M45KXv2aMlHV4ven987OjckK+G8xqwc4BZ9yXW83KB/Wnic+mSQ
Ua0rkxLpXT+xTRWSnOp6UaOcDKtpvhN9FNXbg4ftL7AMLs1oKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2HRevxYPD/ugsJ2Ym/GSlPnR6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDhlZGJiN2MtZDgyNi0z
MTQ5LTgxMDQtYzBkNWRjZDI5ZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVrK7ldyIuxz4jyTPcEfRg7D61kbdfkcTfg2RkXxLLh/F8v8lFybejj
gB32VYH+2r7PihIsKarYKbb08mx2GldXOD5Uhb0UiKR/dYI69Ee719RlW03Nvjbx
LllzAKq/1PA27qEsqqhoMWucV4YK/EK6DZMp/i5LySNQuR05zWCsuXbXHeYplxIb
OpVYesfyN84dam/b7nxZ6wqOfCUdqMbGltxFeb+KJr9G7A3kbQd+JZ30AN0p083g
u06LvWLUAJCU6QGndlsnzoj5potS/5T9jhLmyVi1TRYhPJkCsN4xdekdB2M68lZk
xRdx755ISUecRpxTTE6MmfxQeB/3S9Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:24:01 2025 by rpki-client