Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c1367f8-2da8-3d6f-bfbf-74da2bf7321f.roa
File:                     0c1367f8-2da8-3d6f-bfbf-74da2bf7321f.roa (raw, json)
Hash identifier:          /YbCZx9OclFWTKcLsHgVDYfYtCXFkAITbG11UmchNFk=
Subject key identifier:   EC:D1:A3:FA:77:00:80:D9:27:22:91:91:A0:2A:DD:5A:AC:85:73:2C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848BD21133C743C873294202D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c1367f8-2da8-3d6f-bfbf-74da2bf7321f.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     397222
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:21:13:3c:74:3c:87:32:94:20:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=90ea4abf-688a-4f21-9694-d2f810a2185e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:5f:24:3c:03:31:c1:79:c3:84:2a:34:51:
                    5d:6d:24:23:eb:af:c8:22:c1:a1:6c:f5:88:fb:9d:
                    50:e8:ca:bb:b4:1d:ef:98:59:bf:c5:4a:96:b7:f8:
                    71:35:1f:5d:2d:61:3c:cd:0a:a8:f7:fc:78:f8:7d:
                    ab:bf:65:fd:45:23:88:18:c3:81:4f:52:f8:bf:49:
                    57:27:c6:48:fb:d5:51:66:e9:d1:19:71:b4:47:fa:
                    fc:58:04:63:76:d4:28:c3:a5:23:0a:95:16:cf:9a:
                    24:a4:c9:06:e1:1f:59:a9:32:31:ff:36:c8:3f:87:
                    c6:a6:86:f9:57:4a:a1:95:0b:86:6a:c3:f2:5e:3b:
                    98:8c:d0:49:9a:6f:5d:17:76:ba:eb:71:e6:66:83:
                    ea:ca:dd:f2:98:a7:c4:bf:75:e4:5b:13:80:5a:9e:
                    4f:ac:22:fb:4c:05:b2:40:a5:5c:f4:51:4e:6b:65:
                    a0:35:6e:8a:c1:d9:24:69:0a:c9:b0:aa:e5:be:d0:
                    b9:95:8e:9b:1e:0a:15:3d:ac:50:52:8c:4c:f1:e7:
                    40:99:25:a1:43:9c:fe:52:3e:1d:49:84:9e:e8:b0:
                    e4:e1:f5:37:62:c0:6b:c7:67:0a:17:a5:cf:b5:69:
                    24:58:ce:c8:3f:57:6c:0a:4f:40:2e:7c:63:30:35:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D1:A3:FA:77:00:80:D9:27:22:91:91:A0:2A:DD:5A:AC:85:73:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c1367f8-2da8-3d6f-bfbf-74da2bf7321f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:47:bb:38:5f:3b:65:a8:e6:2a:7e:d2:06:49:e8:21:d8:57:
         cd:e1:6c:bf:b2:fe:ff:75:77:de:8f:32:df:bf:54:40:97:7c:
         70:0c:cb:24:c2:1c:1a:aa:a2:db:cc:cc:3f:75:13:f7:18:2b:
         86:e3:f4:00:58:5e:5d:b4:25:92:74:77:64:80:53:7d:27:54:
         19:24:52:66:27:8a:4e:14:08:4f:9a:66:e9:01:73:ca:9a:4e:
         10:bd:e7:72:4b:a6:20:2b:90:59:76:85:a7:9e:50:d1:ce:67:
         ce:1a:03:49:40:23:a3:c6:12:17:6c:58:5f:92:5f:43:c0:92:
         49:4c:c0:53:78:85:49:99:04:71:2c:fe:a6:87:32:8d:a1:66:
         93:43:30:58:08:6f:cd:3e:03:3b:5b:e3:74:35:fb:f1:12:84:
         8d:61:ef:76:39:26:2c:20:f3:0a:4f:ef:dd:e6:8e:f9:eb:b1:
         4d:57:9d:e6:5f:8f:d1:05:8a:e9:d2:35:fc:1f:5c:69:bf:a5:
         e9:f6:95:3b:18:0d:9e:3c:03:07:02:2c:fa:65:6c:ab:fa:89:
         73:cb:5c:dc:03:b0:d5:c6:96:ab:b3:4d:41:5e:d1:6c:fa:98:
         53:aa:63:09:4e:dd:6d:ab:80:4b:92:24:41:e6:14:83:05:32:
         c9:b9:66:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IRM8dDyHMpQgLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
OTBlYTRhYmYtNjg4YS00ZjIxLTk2OTQtZDJmODEwYTIxODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI5fJDwDMcF5w4QqNFFdbSQj66/IIsGhbPWI
+51Q6Mq7tB3vmFm/xUqWt/hxNR9dLWE8zQqo9/x4+H2rv2X9RSOIGMOBT1L4v0lX
J8ZI+9VRZunRGXG0R/r8WARjdtQow6UjCpUWz5okpMkG4R9ZqTIx/zbIP4fGpob5
V0qhlQuGasPyXjuYjNBJmm9dF3a663HmZoPqyt3ymKfEv3XkWxOAWp5PrCL7TAWy
QKVc9FFOa2WgNW6KwdkkaQrJsKrlvtC5lY6bHgoVPaxQUoxM8edAmSWhQ5z+Uj4d
SYSe6LDk4fU3YsBrx2cKF6XPtWkkWM7IP1dsCk9ALnxjMDVrPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzRo/p3AIDZJyKRkaAq3VqshXMsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGMxMzY3ZjgtMmRhOC0z
ZDZmLWJmYmYtNzRkYTJiZjczMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdHuzhfO2Wo5ip+0gZJ6CHYV83hbL+y/v91d96PMt+/VECXfHAMyyTC
HBqqotvMzD91E/cYK4bj9ABYXl20JZJ0d2SAU30nVBkkUmYnik4UCE+aZukBc8qa
ThC953JLpiArkFl2haeeUNHOZ84aA0lAI6PGEhdsWF+SX0PAkklMwFN4hUmZBHEs
/qaHMo2hZpNDMFgIb80+Aztb43Q1+/EShI1h73Y5Jiwg8wpP793mjvnrsU1XneZf
j9EFiunSNfwfXGm/pen2lTsYDZ48AwcCLPplbKv6iXPLXNwDsNXGlquzTUFe0Wz6
mFOqYwlO3W2rgEuSJEHmFIMFMsm5ZsQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:54 2025 by rpki-client