Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe84c893-9f78-3be7-a108-1de405957045.roa
File:                     fe84c893-9f78-3be7-a108-1de405957045.roa (raw, json)
Hash identifier:          TWKtDGc8M/g62eR1XvmWmeld7ZnycuMXiREvV+xsoxY=
Subject key identifier:   04:70:95:5B:65:58:F1:48:83:9C:B5:23:10:E9:44:A4:09:46:45:67
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858496FAF1D2C420BF4EF9C401E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe84c893-9f78-3be7-a108-1de405957045.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     19905
IP address blocks:        156.154.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:1d:2c:42:0b:f4:ef:9c:40:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=238842be-8b03-48fd-999c-36fbcc8fc58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:ec:8e:6b:64:68:c8:69:32:c6:d7:38:17:
                    72:73:67:72:b2:6d:9a:68:70:fa:29:98:c2:d7:62:
                    69:a7:29:36:c7:7c:e4:d8:46:29:73:04:7c:38:d1:
                    fa:59:81:a0:8c:ae:9b:82:89:77:39:5f:c4:56:55:
                    5c:e6:2c:25:97:f6:77:aa:c8:ea:5f:1c:73:1f:de:
                    38:67:51:4a:41:3f:b0:e7:be:17:b3:ac:f3:be:08:
                    0b:3d:22:63:04:d7:9e:56:e0:35:58:03:e5:d5:ea:
                    d9:3e:61:b9:e6:3a:0a:89:dc:f9:5f:12:d6:59:0f:
                    9d:d9:a8:51:2e:b8:16:ad:92:d9:d3:e8:a3:d9:04:
                    66:88:39:b1:43:6b:4b:5a:9c:bc:ad:b0:ca:20:81:
                    8a:7a:c6:d0:fb:e3:dc:5c:10:45:c2:80:62:0b:a5:
                    d2:4c:45:2f:b2:32:f9:31:f8:63:8d:c0:5f:95:9f:
                    7a:c3:e5:22:24:ef:d1:a8:18:54:47:00:ca:4b:cd:
                    27:c8:53:59:0a:bb:83:9a:49:eb:cd:a0:e4:25:04:
                    30:f8:91:49:59:84:91:4a:e1:d1:be:df:b7:d9:e1:
                    f7:23:ab:49:06:69:c1:fb:93:3a:10:d5:e2:da:ca:
                    cb:b5:6a:59:b0:fe:7f:12:22:b2:f0:dc:65:f4:99:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:70:95:5B:65:58:F1:48:83:9C:B5:23:10:E9:44:A4:09:46:45:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe84c893-9f78-3be7-a108-1de405957045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:1e:73:f1:9e:9f:71:54:67:d2:6f:79:03:7d:b3:fa:a2:
         7b:b4:42:c3:3e:69:7d:31:17:ce:02:5e:49:2f:43:6e:68:0f:
         b8:5e:d0:cd:a0:dd:d2:23:b1:50:a9:12:63:01:5d:b4:3f:85:
         96:39:e3:21:0a:c4:12:20:94:8b:95:b0:c9:eb:a0:c3:6c:e2:
         74:1a:70:53:5d:21:c0:24:7a:50:7f:8d:44:cc:1e:fb:8f:37:
         d1:5c:3a:f0:c0:e5:99:7b:b4:70:55:70:03:64:44:c2:54:5d:
         b7:21:7d:b9:7b:04:b9:40:36:42:e9:50:1d:69:77:2c:c2:34:
         17:6d:5c:a5:8e:24:52:ed:b2:92:49:4d:60:b2:34:90:9f:d6:
         d3:1b:03:59:54:89:2b:3c:2d:6e:5c:25:0f:f0:1f:d4:28:b5:
         7b:ec:5e:22:7f:d3:52:eb:0c:fe:db:11:69:3e:43:30:e6:7b:
         a9:b5:83:42:74:f6:0a:26:83:d9:1d:e1:3d:05:30:c3:32:9a:
         d7:47:0a:d8:1d:75:ec:84:9f:33:84:ab:4d:75:9b:b9:c1:d4:
         4d:b7:48:86:c3:a3:d4:dc:b9:78:a1:c1:f3:55:ae:9e:a0:5f:
         1b:8b:f8:51:dd:33:a2:16:a6:55:69:0d:54:ec:d2:06:33:46:
         35:05:f9:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrx0sQgv075xAHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
MjM4ODQyYmUtOGIwMy00OGZkLTk5OWMtMzZmYmNjOGZjNThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPzsjmtkaMhpMsbXOBdyc2dysm2aaHD6KZjC
12Jppyk2x3zk2EYpcwR8ONH6WYGgjK6bgol3OV/EVlVc5iwll/Z3qsjqXxxzH944
Z1FKQT+w574Xs6zzvggLPSJjBNeeVuA1WAPl1erZPmG55joKidz5XxLWWQ+d2ahR
LrgWrZLZ0+ij2QRmiDmxQ2tLWpy8rbDKIIGKesbQ++PcXBBFwoBiC6XSTEUvsjL5
MfhjjcBflZ96w+UiJO/RqBhURwDKS80nyFNZCruDmknrzaDkJQQw+JFJWYSRSuHR
vt+32eH3I6tJBmnB+5M6ENXi2srLtWpZsP5/EiKy8Nxl9JkPtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARwlVtlWPFIg5y1IxDpRKQJRkVnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmU4NGM4OTMtOWY3OC0z
YmU3LWExMDgtMWRlNDA1OTU3MDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGi6HnPxnp9xVGfSb3kDfbP6onu0QsM+aX0xF84CXkkvQ25oD7he0M2g
3dIjsVCpEmMBXbQ/hZY54yEKxBIglIuVsMnroMNs4nQacFNdIcAkelB/jUTMHvuP
N9FcOvDA5Zl7tHBVcANkRMJUXbchfbl7BLlANkLpUB1pdyzCNBdtXKWOJFLtspJJ
TWCyNJCf1tMbA1lUiSs8LW5cJQ/wH9QotXvsXiJ/01LrDP7bEWk+QzDme6m1g0J0
9gomg9kd4T0FMMMymtdHCtgddeyEnzOEq011m7nB1E23SIbDo9TcuXihwfNVrp6g
XxuL+FHdM6IWplVpDVTs0gYzRjUF+Uo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:46 2025 by rpki-client