Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa
File:                     2bd20e07-9af0-35ca-a017-e2516bba252a.roa (raw, json)
Hash identifier:          4V4Wv/62mfCk4FQ3Xvaj+MVAz8yJAPs8bwd22vq70bk=
Subject key identifier:   D0:05:D5:06:52:64:C5:9B:1D:37:A9:DA:9B:9F:08:54:3E:61:C2:2B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D27040B1AA91EE2F9000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397230
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d2:70:40:b1:aa:91:ee:2f:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=69f3eb0f-fd7f-4a3c-bd3f-b1a54978d999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:00:5a:20:11:3c:90:35:16:20:0a:95:4c:
                    e7:ca:94:7b:a2:01:62:2b:d8:92:56:16:f4:83:aa:
                    3a:f0:ad:76:90:d2:4a:1a:30:e0:e6:20:65:87:4c:
                    1f:72:0c:97:84:3c:b4:aa:ed:8c:96:b1:81:ef:6d:
                    36:93:f7:bb:c8:79:e5:d6:af:ef:06:c9:a5:e3:07:
                    bd:89:24:a1:1f:be:6f:13:57:00:90:6f:d5:7c:32:
                    83:f6:00:f8:73:63:07:94:9f:17:69:ef:5a:e0:0f:
                    39:70:b9:40:d2:3e:7f:66:57:a1:fe:af:b4:b9:7a:
                    bb:68:12:9b:4c:e5:76:56:d1:d1:c7:6a:2d:49:54:
                    f0:c5:b3:be:55:a1:80:21:e6:ef:b9:57:82:af:29:
                    9f:eb:72:a7:d7:cc:11:e6:80:93:70:63:38:c5:7d:
                    f8:dc:37:eb:7a:c2:fe:8d:d1:ca:01:c3:d8:0e:7f:
                    3e:c3:75:11:db:53:98:54:df:6a:fe:66:cf:b4:55:
                    0c:42:e1:17:43:07:5c:9d:e9:e4:0c:27:05:25:52:
                    e7:fa:44:bd:64:84:f2:30:6d:03:0f:e5:b3:1b:29:
                    29:30:df:55:b3:f8:13:1c:e1:ec:db:20:50:26:e9:
                    4b:51:c5:17:f0:0b:40:69:72:9a:47:0b:a3:93:b0:
                    ec:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:05:D5:06:52:64:C5:9B:1D:37:A9:DA:9B:9F:08:54:3E:61:C2:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:4a:7e:9f:6b:da:88:16:a2:f3:e7:d5:ec:a8:02:75:b1:47:
         61:5b:e5:17:df:9a:58:24:4e:ee:41:9f:d5:65:67:03:2c:64:
         5f:c4:81:ef:47:ae:9e:c3:9c:b5:4b:19:00:e0:d4:4d:d2:08:
         01:71:2e:c3:d1:e4:ad:a5:5a:64:00:e1:64:9f:f3:bd:37:d3:
         45:0c:5c:9a:d7:d2:f2:cf:ba:9d:44:4a:cf:b7:68:9b:0a:a1:
         88:ad:46:d8:f3:3f:57:57:c1:50:ce:83:75:9a:ec:7b:c5:83:
         5f:09:e7:7c:ce:dc:df:29:0d:dc:ce:3a:c7:a7:4e:49:30:37:
         5d:40:fb:70:8b:d1:26:2e:36:70:48:46:86:98:94:11:74:b9:
         40:e2:e2:65:3f:4a:82:65:63:85:44:ca:26:e2:f7:bf:6b:82:
         e6:a5:3c:a0:8a:ee:cd:db:0b:83:f2:c1:b5:2d:b8:a3:d7:ae:
         5d:7c:93:bf:91:68:25:11:02:60:c4:8f:bc:94:45:a6:0d:34:
         89:90:9c:49:c1:cf:c4:4e:37:cc:06:86:42:8d:72:eb:13:bb:
         c9:bf:da:0e:e6:ad:03:df:f6:fe:2e:fd:a6:ab:b4:f1:06:57:
         01:dd:29:47:bd:08:7d:3b:eb:d0:d1:59:48:87:5d:ad:7b:de:
         1c:12:82:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNJwQLGqke4vkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk
NjlmM2ViMGYtZmQ3Zi00YTNjLWJkM2YtYjFhNTQ5NzhkOTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4oAWiARPJA1FiAKlUznypR7ogFiK9iSVhb0
g6o68K12kNJKGjDg5iBlh0wfcgyXhDy0qu2MlrGB7202k/e7yHnl1q/vBsml4we9
iSShH75vE1cAkG/VfDKD9gD4c2MHlJ8Xae9a4A85cLlA0j5/Zleh/q+0uXq7aBKb
TOV2VtHRx2otSVTwxbO+VaGAIebvuVeCrymf63Kn18wR5oCTcGM4xX343DfresL+
jdHKAcPYDn8+w3UR21OYVN9q/mbPtFUMQuEXQwdcnenkDCcFJVLn+kS9ZITyMG0D
D+WzGykpMN9Vs/gTHOHs2yBQJulLUcUX8AtAaXKaRwujk7DsfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAF1QZSZMWbHTep2pufCFQ+YcIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmJkMjBlMDctOWFmMC0z
NWNhLWEwMTctZTI1MTZiYmEyNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBKfp9r2ogWovPn1eyoAnWxR2Fb5RffmlgkTu5Bn9VlZwMsZF/Ege9H
rp7DnLVLGQDg1E3SCAFxLsPR5K2lWmQA4WSf870300UMXJrX0vLPup1ESs+3aJsK
oYitRtjzP1dXwVDOg3Wa7HvFg18J53zO3N8pDdzOOsenTkkwN11A+3CL0SYuNnBI
RoaYlBF0uUDi4mU/SoJlY4VEyibi979rgualPKCK7s3bC4PywbUtuKPXrl18k7+R
aCURAmDEj7yURaYNNImQnEnBz8RON8wGhkKNcusTu8m/2g7mrQPf9v4u/aartPEG
VwHdKUe9CH0769DRWUiHXa173hwSgko=
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:51:43 2025 by rpki-client