Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8385ec04-9286-39fd-bd1e-1626ee640444.roa
File:                     8385ec04-9286-39fd-bd1e-1626ee640444.roa (raw, json)
Hash identifier:          sosIVWr0eV8+f/keygBdG4j03CY7GeYYwOgD04xwZu4=
Subject key identifier:   C9:74:EA:01:57:10:47:28:BC:C7:D7:33:EE:65:63:6C:D4:3E:01:C3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246D81DBB5DA9AA237005C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8385ec04-9286-39fd-bd1e-1626ee640444.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397224
IP address blocks:        156.154.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:d8:1d:bb:5d:a9:aa:23:70:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=7aed5115-9c4a-44c8-baf4-7d70f7ff8c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:08:34:88:98:ed:4a:21:17:cc:f7:d7:d8:
                    7f:a5:65:6c:c3:73:ce:05:2a:b3:f2:66:5c:95:bd:
                    1f:11:6b:0c:a9:95:3d:18:c9:76:16:a4:ae:7b:ec:
                    41:ae:6b:2e:91:08:b0:9e:fe:1b:e3:a2:25:e2:c9:
                    aa:9e:d9:7f:77:b6:e3:99:ff:9b:17:ca:07:17:cb:
                    6c:22:43:f8:9b:97:67:4e:b8:fc:e9:50:5e:e6:80:
                    b0:50:73:92:9a:fb:11:96:d0:da:e6:07:e2:5b:ef:
                    a9:40:27:33:e0:54:85:a2:69:78:be:92:60:9a:e3:
                    1a:8f:64:93:61:10:ac:b1:d2:9c:76:09:2c:21:21:
                    6e:31:6d:09:ec:2e:38:e0:df:ba:03:a6:04:35:76:
                    af:c0:b3:7c:81:b4:e8:b2:58:e4:b1:38:f4:43:aa:
                    93:93:25:79:f0:ab:3a:52:2a:c6:a3:9b:cd:ea:a6:
                    6d:e9:8b:31:ef:00:f9:ba:54:f0:a6:db:72:6d:d6:
                    ea:16:a4:c2:01:42:6a:2a:a7:96:a9:ad:55:ce:c3:
                    c0:9d:e0:b5:21:e3:5f:7c:b1:db:21:d9:de:23:9e:
                    8a:4a:13:15:9a:59:84:3d:70:52:7d:65:61:eb:33:
                    28:f8:ba:91:04:e6:ec:e1:b2:7d:96:e2:68:63:5d:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:74:EA:01:57:10:47:28:BC:C7:D7:33:EE:65:63:6C:D4:3E:01:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8385ec04-9286-39fd-bd1e-1626ee640444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:6f:ba:64:98:42:8a:0b:72:e6:31:2a:33:96:a8:6b:c1:
         12:25:ec:eb:d9:c6:f0:ba:3e:99:e5:a5:db:b6:40:0c:62:ba:
         48:99:03:93:ea:6d:5c:fd:c0:86:c5:7e:1f:14:ec:1b:1e:6f:
         ca:63:2e:86:28:82:72:16:7b:32:f4:1b:82:73:29:fe:83:a8:
         b1:bc:02:da:8c:66:fe:1b:aa:ee:7c:98:8c:da:7d:43:bd:4e:
         9a:e5:83:5f:e6:64:64:25:72:eb:9d:de:ae:84:c8:f7:54:f0:
         cf:9e:b6:ad:27:13:59:11:71:00:85:37:27:c6:c6:ea:e8:de:
         7b:c7:d3:5f:30:69:89:8b:9e:82:61:b5:ac:7e:ce:49:84:b5:
         9f:50:1d:a8:71:79:51:a6:bf:f2:c2:12:1f:8b:6c:f9:b5:b7:
         9b:c2:af:99:08:99:84:5a:8c:cc:71:24:c7:82:3b:e2:df:29:
         29:19:4f:a4:14:96:cd:e0:33:06:61:d7:65:e5:14:83:6b:5a:
         06:6c:b7:c2:57:5d:d7:d5:41:d7:f5:c1:46:89:48:83:7c:47:
         16:7b:4b:85:bc:c7:e8:bb:26:05:36:d7:62:9e:74:6b:48:da:
         67:06:76:ee:b5:20:af:5d:3e:35:a8:77:3f:10:e0:3b:3d:de:
         3c:52:d5:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRtgdu12pqiNwBcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
N2FlZDUxMTUtOWM0YS00NGM4LWJhZjQtN2Q3MGY3ZmY4YzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EQINIiY7UohF8z319h/pWVsw3POBSqz8mZc
lb0fEWsMqZU9GMl2FqSue+xBrmsukQiwnv4b46Il4smqntl/d7bjmf+bF8oHF8ts
IkP4m5dnTrj86VBe5oCwUHOSmvsRltDa5gfiW++pQCcz4FSFoml4vpJgmuMaj2ST
YRCssdKcdgksISFuMW0J7C444N+6A6YENXavwLN8gbTosljksTj0Q6qTkyV58Ks6
UirGo5vN6qZt6Ysx7wD5ulTwpttybdbqFqTCAUJqKqeWqa1VzsPAneC1IeNffLHb
IdneI56KShMVmlmEPXBSfWVh6zMo+LqRBObs4bJ9luJoY11ENwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMl06gFXEEcovMfXM+5lY2zUPgHDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODM4NWVjMDQtOTI4Ni0z
OWZkLWJkMWUtMTYyNmVlNjQwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3xb7pkmEKKC3LmMSozlqhrwRIl7OvZxvC6Ppnlpdu2QAxiukiZA5Pq
bVz9wIbFfh8U7Bseb8pjLoYognIWezL0G4JzKf6DqLG8AtqMZv4bqu58mIzafUO9
Tprlg1/mZGQlcuud3q6EyPdU8M+etq0nE1kRcQCFNyfGxuro3nvH018waYmLnoJh
tax+zkmEtZ9QHahxeVGmv/LCEh+LbPm1t5vCr5kImYRajMxxJMeCO+LfKSkZT6QU
ls3gMwZh12XlFINrWgZst8JXXdfVQdf1wUaJSIN8RxZ7S4W8x+i7JgU212KedGtI
2mcGdu61IK9dPjWodz8Q4Ds93jxS1Yg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:01 2025 by rpki-client