Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/54dd1f92-d3e8-3beb-a5ed-4686bd53a85d.roa
File:                     54dd1f92-d3e8-3beb-a5ed-4686bd53a85d.roa (raw, json)
Hash identifier:          +pyahMQKf+0YpJ74mkwxCV5mkYTzPF3oEeGmlhl0fGA=
Subject key identifier:   2B:B5:A2:28:85:B2:A9:63:E5:0B:4F:C5:0E:EF:90:4F:D0:01:99:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584890760718F9AC5320DEDD5080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/54dd1f92-d3e8-3beb-a5ed-4686bd53a85d.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     397229
IP address blocks:        156.154.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:76:07:18:f9:ac:53:20:de:dd:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=48c53e6d-3bff-4909-a41c-ea51ae9d021f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:1f:3c:57:fc:f4:dd:a8:13:32:b2:bd:b9:
                    c9:cf:b8:12:13:d6:0e:ad:b3:d5:0f:2c:fb:db:45:
                    84:05:38:c4:cd:19:e5:09:1f:63:41:3a:50:0a:76:
                    4a:b4:77:bc:c7:a2:8e:02:e0:46:a5:fe:d3:c8:3a:
                    29:a2:c2:96:2f:a9:d5:76:1a:31:1f:65:3d:3c:d8:
                    61:b7:a4:cc:c5:e0:59:d2:42:37:f6:6f:35:1c:0b:
                    f1:cb:3f:45:7a:85:82:ff:33:8a:09:a9:8c:6f:13:
                    33:7b:f8:f7:d4:39:f5:7f:77:69:b8:cf:a7:fb:8a:
                    ac:76:a9:fc:a2:ba:63:55:6b:ae:a7:4a:26:82:5e:
                    e4:dc:b0:da:8d:43:7e:03:6e:30:55:77:2a:d8:84:
                    60:ce:35:14:42:f0:46:de:9f:b3:99:28:1f:df:70:
                    a0:6e:ad:29:d0:84:be:56:ea:cf:5b:81:d9:90:26:
                    3e:55:93:6e:bc:9a:ed:1d:a7:bd:d8:0f:85:8f:0d:
                    74:f0:18:91:56:9a:c8:99:0e:c8:01:21:2a:55:19:
                    ad:87:57:ae:12:8b:95:3d:a9:78:47:ad:df:e7:a5:
                    e8:6e:15:f4:f8:97:a9:bf:00:71:c0:ab:54:87:26:
                    7c:fb:ae:68:5e:13:64:89:30:cf:aa:f6:7f:01:3c:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:A2:28:85:B2:A9:63:E5:0B:4F:C5:0E:EF:90:4F:D0:01:99:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/54dd1f92-d3e8-3beb-a5ed-4686bd53a85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4f:1a:60:46:c5:4f:ce:5a:89:74:14:d0:13:fd:b6:3b:e0:
         73:3c:ad:3b:5b:d4:be:0d:c9:40:e4:8c:4d:cb:62:2c:11:ee:
         ad:79:82:6e:c1:47:12:1c:2f:75:b5:fd:17:9b:0d:ef:eb:07:
         11:27:38:19:65:fd:79:d1:71:a2:96:f8:84:13:7c:a3:d6:a5:
         68:a0:8d:cf:cd:99:f0:82:34:f0:b4:d6:95:74:d3:79:ed:c2:
         73:62:ec:fd:59:eb:3f:0c:b8:bf:1a:f8:cc:50:bb:10:3d:92:
         0c:86:39:1e:0a:60:b1:d7:e0:1b:e7:7d:77:dd:d5:ea:ff:44:
         cc:9f:e4:f9:a4:37:51:71:77:9e:2f:ce:d1:50:aa:2a:9b:73:
         e8:ca:52:ad:01:fa:d4:54:50:b3:0a:98:2c:66:18:d7:f6:cf:
         ce:59:6f:94:d8:53:10:1c:83:18:07:22:aa:36:08:9f:37:1f:
         cc:c5:ad:2a:54:5a:ad:c1:b9:37:00:78:7f:64:46:e5:38:2d:
         7f:13:c3:25:d3:cb:3b:41:35:bb:f9:99:04:ba:38:75:1f:d8:
         9d:8c:1c:82:60:e0:d0:25:85:a4:8d:c6:3a:86:e0:d5:60:d3:
         71:cc:bf:31:7d:a1:9c:34:2c:b9:d8:9f:c6:c9:ce:13:f7:9f:
         e7:0c:28:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdgcY+axTIN7dUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
NDhjNTNlNmQtM2JmZi00OTA5LWE0MWMtZWE1MWFlOWQwMjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnMfPFf89N2oEzKyvbnJz7gSE9YOrbPVDyz7
20WEBTjEzRnlCR9jQTpQCnZKtHe8x6KOAuBGpf7TyDoposKWL6nVdhoxH2U9PNhh
t6TMxeBZ0kI39m81HAvxyz9FeoWC/zOKCamMbxMze/j31Dn1f3dpuM+n+4qsdqn8
orpjVWuup0omgl7k3LDajUN+A24wVXcq2IRgzjUUQvBG3p+zmSgf33Cgbq0p0IS+
VurPW4HZkCY+VZNuvJrtHae92A+Fjw108BiRVprImQ7IASEqVRmth1euEouVPal4
R63f56XobhX0+JepvwBxwKtUhyZ8+65oXhNkiTDPqvZ/ATzvaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCu1oiiFsqlj5QtPxQ7vkE/QAZniMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTRkZDFmOTItZDNlOC0z
YmViLWE1ZWQtNDY4NmJkNTNhODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdPGmBGxU/OWol0FNAT/bY74HM8rTtb1L4NyUDkjE3LYiwR7q15gm7B
RxIcL3W1/RebDe/rBxEnOBll/XnRcaKW+IQTfKPWpWigjc/NmfCCNPC01pV003nt
wnNi7P1Z6z8MuL8a+MxQuxA9kgyGOR4KYLHX4BvnfXfd1er/RMyf5PmkN1Fxd54v
ztFQqiqbc+jKUq0B+tRUULMKmCxmGNf2z85Zb5TYUxAcgxgHIqo2CJ83H8zFrSpU
Wq3BuTcAeH9kRuU4LX8TwyXTyztBNbv5mQS6OHUf2J2MHIJg4NAlhaSNxjqG4NVg
03HMvzF9oZw0LLnYn8bJzhP3n+cMKL0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:49 2025 by rpki-client