Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad36e6ab-8357-38fa-9b2f-e9d34229b9ff.roa
File:                     ad36e6ab-8357-38fa-9b2f-e9d34229b9ff.roa (raw, json)
Hash identifier:          JEOqQvC3HM9Rr/vyzL0JAv9kriq+1TlPPQBFijQLhOA=
Subject key identifier:   70:0B:E3:0F:A1:CC:D9:DC:71:64:C3:8D:31:DC:DB:A2:6C:7B:21:44
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A9965DDA37B182567F89D280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad36e6ab-8357-38fa-9b2f-e9d34229b9ff.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397217
IP address blocks:        156.154.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:5d:da:37:b1:82:56:7f:89:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=c64c3ef2-e71f-4dd7-b6a3-09ad1b5e791c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:5b:e1:23:c4:9f:30:c5:47:8a:89:a1:fd:
                    c9:cd:f3:a0:10:d7:6b:f0:cd:a7:b6:32:9e:8c:52:
                    b1:33:0e:3a:af:42:d1:d0:60:f5:a5:54:bc:06:e8:
                    c7:4f:c2:9c:5f:36:13:08:95:90:73:90:46:60:d7:
                    4c:08:74:76:ce:90:76:3f:ab:45:8b:45:8d:cc:69:
                    43:74:7a:61:dd:06:0a:40:16:54:4e:71:9a:dc:73:
                    8c:7c:ad:97:27:0b:48:5f:d7:87:dd:2b:0e:b9:70:
                    40:a8:fd:e3:8d:67:9b:cf:03:0a:bb:5d:3d:4a:96:
                    1e:41:2a:2a:ad:2a:7c:df:9e:31:a2:f3:f1:b4:74:
                    e3:45:97:74:92:95:3e:10:8b:04:e2:09:83:1b:80:
                    ac:2b:4e:f4:4e:8c:e2:f1:e6:ce:41:d1:72:8e:40:
                    84:2f:33:24:d3:29:25:e9:ee:f3:05:a5:ec:0d:7a:
                    7c:e4:b7:30:e1:9e:28:75:71:dc:cd:33:5b:99:1b:
                    90:eb:4d:35:d9:9a:6c:93:d0:44:1e:2c:9c:2c:80:
                    46:4a:49:44:fc:12:44:b9:6d:c5:3b:eb:6b:36:b7:
                    3f:a7:44:50:3c:5f:43:0f:4a:75:e9:bc:d4:ed:58:
                    7e:96:d0:72:25:44:59:b8:71:b5:8c:f7:8e:e1:6e:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0B:E3:0F:A1:CC:D9:DC:71:64:C3:8D:31:DC:DB:A2:6C:7B:21:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad36e6ab-8357-38fa-9b2f-e9d34229b9ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:24:1b:8d:99:59:59:f2:6e:38:f8:3d:1b:d4:cd:ba:26:0c:
         aa:99:42:2c:e1:6e:67:d2:72:1e:b2:b3:90:d6:e4:83:95:3e:
         58:68:72:02:ee:b8:e9:09:b4:4b:a0:f3:80:94:b6:57:e9:1f:
         57:92:49:86:e4:c2:e1:e3:0e:ba:a7:59:f6:8b:01:f8:a0:9d:
         63:97:05:a3:30:43:a9:6c:48:ec:be:97:9b:b1:42:01:37:9d:
         b3:26:66:1a:92:2a:50:7b:36:a3:24:8c:f0:68:97:ac:44:c7:
         9d:30:0d:b3:8e:3b:6f:be:5f:67:40:3e:b1:50:35:f5:e8:53:
         47:83:23:f4:e8:65:ad:c2:65:38:ca:2b:d4:77:ed:a4:7d:f9:
         e1:b5:a9:52:a5:3f:64:d3:94:e8:74:a4:ae:be:28:f3:30:98:
         e0:7a:3a:6e:c5:59:df:6c:5f:0e:07:03:1b:45:d5:29:fe:c7:
         96:ce:66:58:cd:a8:1c:4b:ef:ca:13:6e:53:2d:3b:2b:85:5e:
         6f:64:d4:62:fc:a6:1c:41:5f:7d:92:1b:04:01:e3:58:34:85:
         e1:8d:21:d2:c4:ed:38:00:cf:dc:8e:50:1c:b7:f1:55:eb:d4:
         43:9b:34:b1:04:66:91:52:0f:ad:b6:5f:f4:c7:47:da:f7:0e:
         e1:71:28:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipll3aN7GCVn+J0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzY0YzNlZjItZTcxZi00ZGQ3LWI2YTMtMDlhZDFiNWU3OTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/9b4SPEnzDFR4qJof3JzfOgENdr8M2ntjKe
jFKxMw46r0LR0GD1pVS8BujHT8KcXzYTCJWQc5BGYNdMCHR2zpB2P6tFi0WNzGlD
dHph3QYKQBZUTnGa3HOMfK2XJwtIX9eH3SsOuXBAqP3jjWebzwMKu109SpYeQSoq
rSp8354xovPxtHTjRZd0kpU+EIsE4gmDG4CsK070Tozi8ebOQdFyjkCELzMk0ykl
6e7zBaXsDXp85Lcw4Z4odXHczTNbmRuQ60012Zpsk9BEHiycLIBGSklE/BJEuW3F
O+trNrc/p0RQPF9DD0p16bzU7Vh+ltByJURZuHG1jPeO4W4DhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAL4w+hzNnccWTDjTHc26JseyFEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWQzNmU2YWItODM1Ny0z
OGZhLTliMmYtZTlkMzQyMjliOWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0kG42ZWVnybjj4PRvUzbomDKqZQizhbmfSch6ys5DW5IOVPlhocgLu
uOkJtEug84CUtlfpH1eSSYbkwuHjDrqnWfaLAfignWOXBaMwQ6lsSOy+l5uxQgE3
nbMmZhqSKlB7NqMkjPBol6xEx50wDbOOO2++X2dAPrFQNfXoU0eDI/ToZa3CZTjK
K9R37aR9+eG1qVKlP2TTlOh0pK6+KPMwmOB6Om7FWd9sXw4HAxtF1Sn+x5bOZljN
qBxL78oTblMtOyuFXm9k1GL8phxBX32SGwQB41g0heGNIdLE7TgAz9yOUBy38VXr
1EObNLEEZpFSD622X/THR9r3DuFxKMM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:41 2025 by rpki-client