Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd12218-5d8d-3d21-a703-8278903b4dd8.roa
File:                     2bd12218-5d8d-3d21-a703-8278903b4dd8.roa (raw, json)
Hash identifier:          tkxN3VzBHylV0oro1JiCoP/cdunMiL0u893f91Xt0bE=
Subject key identifier:   09:FD:1A:E2:A3:99:4B:27:1A:A4:9D:CA:19:0D:D9:72:A2:E7:67:AF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68262691B103F0BFA59B7B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd12218-5d8d-3d21-a703-8278903b4dd8.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397226
IP address blocks:        156.154.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:26:91:b1:03:f0:bf:a5:9b:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=89df2f38-3f0b-4db3-b7c7-af4a9a0d56aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:9d:d9:43:ec:7e:01:f9:a1:bf:e9:77:ce:
                    db:8f:f5:df:f0:62:48:15:49:93:4c:4f:0d:8a:ee:
                    62:45:41:dd:af:5b:17:63:ee:09:b6:85:d5:d9:51:
                    29:f1:80:8a:4b:29:f7:8d:4e:e2:70:31:56:eb:93:
                    36:d9:e9:29:b0:a4:e3:83:96:6f:47:52:56:16:8a:
                    89:c8:9d:23:d0:fe:30:de:87:2e:cf:de:8a:7b:47:
                    15:2b:4d:51:c3:d5:d6:94:15:c6:15:5c:98:27:6f:
                    4a:05:4f:32:42:d9:12:b8:b5:69:9a:ab:d1:ed:2b:
                    b8:d6:87:43:41:6c:2c:94:44:10:0d:a1:63:a4:0a:
                    d7:dd:be:7c:fc:e8:bf:c1:a3:5e:89:82:f4:58:6c:
                    a9:8d:11:86:07:41:56:9c:41:b6:db:2d:46:15:39:
                    17:db:60:39:1b:46:59:9b:fe:98:2e:48:d6:ff:5b:
                    68:12:7d:90:5e:7c:f4:f0:59:13:4c:a8:0d:a1:17:
                    28:93:7a:c7:0d:b9:dc:c3:5b:2b:32:f8:ee:9d:64:
                    fc:d4:2b:59:5c:21:87:58:3e:9b:68:08:b0:1a:25:
                    c2:ec:1b:6a:c6:f2:6f:1e:dc:90:42:4c:eb:6d:41:
                    63:ac:db:7e:99:0c:bb:69:9a:29:bf:fb:c8:23:74:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FD:1A:E2:A3:99:4B:27:1A:A4:9D:CA:19:0D:D9:72:A2:E7:67:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd12218-5d8d-3d21-a703-8278903b4dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:7f:bc:cb:f8:42:e9:79:c5:fb:9d:48:94:7c:c7:91:b4:
         36:a1:7b:3c:38:5b:61:12:51:ad:77:03:fa:1b:1b:d9:5a:96:
         4a:29:84:7b:fc:2d:71:ad:a6:c1:b9:f8:3e:12:4d:02:98:32:
         27:b5:b6:80:43:d9:58:f3:65:08:95:d5:90:d3:a0:17:4d:36:
         e6:6a:e8:87:c4:43:a7:36:35:6c:c0:c0:e6:b2:f7:4a:c9:49:
         d5:64:2a:07:64:e8:24:5d:30:58:08:53:60:09:49:b0:67:aa:
         8d:58:3d:6f:4b:0d:03:3a:74:b3:0f:e1:9a:18:92:38:09:bc:
         cf:de:82:67:89:65:6a:9a:92:8e:8d:84:c2:b4:27:b7:a6:2d:
         11:7b:04:eb:f6:0a:0e:27:51:74:a9:4f:80:89:c3:3b:5a:ec:
         9b:c9:6a:4b:74:4c:f9:99:97:dd:cf:b2:ec:19:0a:3d:00:dd:
         1b:37:ca:ac:ea:f3:81:a6:bd:48:ce:45:ea:55:03:6f:16:73:
         45:62:26:47:98:25:70:69:9a:d2:45:69:ca:00:ef:b6:3b:e4:
         72:0c:11:9f:7f:67:13:6c:72:66:3b:ed:84:bd:58:41:da:e5:
         30:50:e5:88:27:36:a4:70:ec:85:6a:40:b0:43:3c:77:8a:02:
         e7:c8:d6:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJiaRsQPwv6Wbe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ODlkZjJmMzgtM2YwYi00ZGIzLWI3YzctYWY0YTlhMGQ1NmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorGd2UPsfgH5ob/pd87bj/Xf8GJIFUmTTE8N
iu5iRUHdr1sXY+4JtoXV2VEp8YCKSyn3jU7icDFW65M22ekpsKTjg5ZvR1JWFoqJ
yJ0j0P4w3ocuz96Ke0cVK01Rw9XWlBXGFVyYJ29KBU8yQtkSuLVpmqvR7Su41odD
QWwslEQQDaFjpArX3b58/Oi/waNeiYL0WGypjRGGB0FWnEG22y1GFTkX22A5G0ZZ
m/6YLkjW/1toEn2QXnz08FkTTKgNoRcok3rHDbncw1srMvjunWT81CtZXCGHWD6b
aAiwGiXC7BtqxvJvHtyQQkzrbUFjrNt+mQy7aZopv/vII3RimQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAn9GuKjmUsnGqSdyhkN2XKi52evMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmJkMTIyMTgtNWQ4ZC0z
ZDIxLWE3MDMtODI3ODkwM2I0ZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPpf7zL+ELpecX7nUiUfMeRtDahezw4W2ESUa13A/obG9lalkophHv8
LXGtpsG5+D4STQKYMie1toBD2VjzZQiV1ZDToBdNNuZq6IfEQ6c2NWzAwOay90rJ
SdVkKgdk6CRdMFgIU2AJSbBnqo1YPW9LDQM6dLMP4ZoYkjgJvM/egmeJZWqako6N
hMK0J7emLRF7BOv2Cg4nUXSpT4CJwzta7JvJakt0TPmZl93PsuwZCj0A3Rs3yqzq
84GmvUjORepVA28Wc0ViJkeYJXBpmtJFacoA77Y75HIMEZ9/ZxNscmY77YS9WEHa
5TBQ5YgnNqRw7IVqQLBDPHeKAufI1uU=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:11:36 2025 by rpki-client