Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa
File:                     2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa (raw, json)
Hash identifier:          pgLQ6zev6oODNl2rxRz7HeozmOjsi6vMvlkhcmtS8rM=
Subject key identifier:   32:57:47:9C:ED:6F:16:B1:11:69:2E:20:17:2B:63:09:49:96:34:B0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A9965891197A1405781C0098
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397240
IP address blocks:        156.154.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:58:91:19:7a:14:05:78:1c:00:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=133f2937-d930-476a-98f9-4ae2cb08d98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cc:ee:9f:e3:cd:ef:3f:34:26:55:c3:0a:ec:
                    fb:4b:bf:bb:cd:02:e5:33:2e:db:c5:bb:a9:8b:3d:
                    70:30:aa:81:41:65:80:8e:9f:3b:70:01:47:d9:58:
                    22:5d:c5:af:d9:34:88:a4:42:08:1e:1d:fa:3b:97:
                    ae:6c:93:22:9e:10:1a:60:05:52:71:9d:3f:fb:a7:
                    2c:03:82:12:bf:79:18:16:0a:c8:83:f5:a8:f2:f0:
                    17:ea:f7:16:99:9c:a7:6d:43:61:80:b3:a5:45:47:
                    93:e6:2a:64:ae:31:92:ac:fb:3e:eb:99:7b:0f:11:
                    8a:4e:6a:c6:e2:38:e2:62:46:b5:28:21:8e:6e:ea:
                    d6:2c:bf:26:74:da:9d:b4:75:e9:5c:a8:5c:29:df:
                    80:fd:fd:fd:10:ec:71:55:7e:2c:d7:8c:44:02:c8:
                    59:ba:04:71:48:35:32:51:01:6e:cd:03:52:74:63:
                    ef:ea:91:23:b9:45:3d:0e:c6:5e:d0:6c:92:f4:86:
                    93:28:7a:9d:07:09:8e:8c:17:c0:41:9f:31:0f:42:
                    5b:fa:9c:4a:6a:ac:54:10:e1:07:0a:f0:61:60:3f:
                    39:30:c8:82:33:53:e4:b8:f2:93:d1:da:56:fe:b8:
                    1f:eb:9c:4a:79:16:de:02:74:41:47:d0:43:62:39:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:57:47:9C:ED:6F:16:B1:11:69:2E:20:17:2B:63:09:49:96:34:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc182b9-1f1e-3e08-9118-b8389bf63c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:bf:ed:21:a5:d2:77:1c:72:3e:db:c6:42:52:5f:74:c8:
         dd:57:33:1d:0d:8e:97:e2:24:c9:6d:47:ef:bd:5c:d9:be:45:
         92:b4:87:bc:1e:94:0c:19:65:f0:8a:bd:00:d6:ab:b2:07:ac:
         91:b8:7e:23:91:34:e1:1f:a6:3a:4b:b3:98:6b:8c:e7:b5:eb:
         c7:b8:ac:18:d3:8c:40:3e:83:35:c5:2a:5e:3e:35:d5:cd:31:
         f9:90:17:09:ab:fc:14:ea:57:62:f4:3d:a0:cc:fe:3a:fa:f2:
         99:a7:f5:d4:0b:e0:4c:ac:c4:94:2f:fe:bb:c0:96:91:6d:6f:
         7a:95:8f:db:5b:80:71:04:08:09:b6:da:b6:47:cc:75:93:20:
         54:17:e1:4f:40:8b:a9:4a:ee:cb:a6:ad:c3:ea:0e:be:36:00:
         a3:e0:08:65:bb:73:25:64:22:a6:d6:c7:3d:6f:eb:5c:8a:a6:
         ac:64:9d:f5:29:60:a2:ff:26:ac:74:08:f1:0d:98:50:8b:03:
         7d:9e:3f:6e:f6:6b:31:c4:67:68:96:43:89:0a:4c:92:50:d4:
         e7:4c:b3:e4:7c:e5:c0:a4:4e:9d:54:40:9a:8b:37:89:a4:36:
         2b:a2:aa:53:21:7e:05:18:27:97:18:f6:8c:0f:07:81:d6:11:
         c8:33:30:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplliRGXoUBXgcAJgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTMzZjI5MzctZDkzMC00NzZhLTk4ZjktNGFlMmNiMDhkOThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhczun+PN7z80JlXDCuz7S7+7zQLlMy7bxbup
iz1wMKqBQWWAjp87cAFH2VgiXcWv2TSIpEIIHh36O5eubJMinhAaYAVScZ0/+6cs
A4ISv3kYFgrIg/Wo8vAX6vcWmZynbUNhgLOlRUeT5ipkrjGSrPs+65l7DxGKTmrG
4jjiYka1KCGOburWLL8mdNqdtHXpXKhcKd+A/f39EOxxVX4s14xEAshZugRxSDUy
UQFuzQNSdGPv6pEjuUU9DsZe0GyS9IaTKHqdBwmOjBfAQZ8xD0Jb+pxKaqxUEOEH
CvBhYD85MMiCM1PkuPKT0dpW/rgf65xKeRbeAnRBR9BDYjlLcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJXR5ztbxaxEWkuIBcrYwlJljSwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmZjMTgyYjktMWYxZS0z
ZTA4LTkxMTgtYjgzODliZjYzYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxtv+0hpdJ3HHI+28ZCUl90yN1XMx0NjpfiJMltR++9XNm+RZK0h7we
lAwZZfCKvQDWq7IHrJG4fiORNOEfpjpLs5hrjOe168e4rBjTjEA+gzXFKl4+NdXN
MfmQFwmr/BTqV2L0PaDM/jr68pmn9dQL4EysxJQv/rvAlpFtb3qVj9tbgHEECAm2
2rZHzHWTIFQX4U9Ai6lK7sumrcPqDr42AKPgCGW7cyVkIqbWxz1v61yKpqxknfUp
YKL/Jqx0CPENmFCLA32eP272azHEZ2iWQ4kKTJJQ1OdMs+R85cCkTp1UQJqLN4mk
NiuiqlMhfgUYJ5cY9owPB4HWEcgzMGw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:30 2025 by rpki-client