Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/038574ba-ba24-3be2-b5f2-6f1557e83fef.roa
File:                     038574ba-ba24-3be2-b5f2-6f1557e83fef.roa (raw, json)
Hash identifier:          On9ecnL/ylxqrDbMRgTcIujESJokqpJwPjCQJqkvHwo=
Subject key identifier:   36:F6:01:31:DF:82:4E:E1:7A:49:8A:39:21:14:5C:E8:39:DD:97:F5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832F006E7CA5E99A04A007440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/038574ba-ba24-3be2-b5f2-6f1557e83fef.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397236
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:06:e7:ca:5e:99:a0:4a:00:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=f40a1b26-e83b-462d-8fec-b59c41909c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:5b:33:29:2e:3d:d4:33:25:57:63:0c:5c:
                    3f:ea:1d:cc:be:c8:bf:65:86:ee:6f:e1:3a:b8:ef:
                    2b:8b:5e:00:76:e0:13:59:4d:80:65:66:26:3e:ee:
                    10:d1:72:b9:6a:6b:c0:2a:21:f2:f0:3b:5e:4e:5e:
                    af:7e:ef:5c:b7:2f:07:31:64:27:eb:04:c3:07:69:
                    e9:82:f5:fa:75:fe:1c:2a:c3:22:36:63:65:f4:70:
                    75:6a:ce:6e:e7:12:d0:c1:82:a9:d4:61:32:3d:75:
                    8f:4c:b5:28:fb:92:48:f0:ac:ed:68:e6:66:91:9b:
                    8e:93:ac:52:1f:b9:8b:e2:b4:9f:33:d5:90:b5:67:
                    7d:a8:b4:25:cb:90:2b:b4:22:e6:d6:48:65:e3:67:
                    48:76:50:5c:60:eb:c8:3d:d5:7c:61:6b:14:58:a9:
                    5d:46:0c:fc:cb:3c:5e:16:c4:78:4c:22:19:df:8b:
                    6a:ff:02:55:4b:a8:6d:9d:00:6b:7c:94:81:7e:06:
                    e5:4a:5e:c3:50:1d:ec:bb:71:45:74:a7:55:7f:9e:
                    a9:dd:82:19:d5:89:03:f3:eb:06:a3:b1:a8:a0:18:
                    4f:26:11:19:60:2f:9e:71:3c:3a:69:5f:b7:fc:fa:
                    63:4d:d6:77:02:52:95:5f:03:40:bf:0d:08:41:02:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:01:31:DF:82:4E:E1:7A:49:8A:39:21:14:5C:E8:39:DD:97:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/038574ba-ba24-3be2-b5f2-6f1557e83fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:be:19:ed:e9:d3:8e:5f:41:8b:9b:27:cb:77:80:e8:99:
         7d:cf:d9:3a:b0:be:89:b4:d8:57:ca:b0:97:e7:fe:21:6f:0f:
         b1:8c:8d:6c:e9:7c:3a:1f:b3:76:3e:4d:18:96:b0:78:64:1b:
         9e:02:f0:f9:e2:30:e7:c5:26:03:65:0d:29:33:94:e9:95:36:
         fa:1d:1e:0e:0d:93:c1:49:6f:43:30:43:ab:2e:3f:b3:1e:f3:
         50:a8:80:65:e5:25:12:4f:33:e6:41:fd:b4:b3:20:21:67:a3:
         e5:d9:05:48:16:41:70:af:08:d9:06:0a:73:d9:f5:c8:88:1b:
         4e:99:23:26:52:a6:f4:26:66:06:b5:a0:b5:fd:13:3b:44:ed:
         45:2d:69:3b:ac:97:33:1a:f5:ce:7e:b3:99:6c:ba:db:c9:9d:
         dc:0a:98:02:b8:d3:60:c4:27:7f:02:a0:04:3e:14:a2:43:d8:
         1c:ff:33:a8:e0:c4:7e:43:f1:1a:38:aa:e5:1f:dd:c0:81:82:
         e6:76:03:50:6a:fe:d7:ef:bd:7f:3b:8d:6e:09:cf:de:4f:56:
         7f:9a:5b:09:07:21:d1:91:1d:28:39:9e:70:6f:89:43:90:b6:
         42:81:14:14:fd:06:eb:09:60:41:66:fa:39:30:c0:ee:60:7a:
         9f:56:64:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8Abnyl6ZoEoAdEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjQwYTFiMjYtZTgzYi00NjJkLThmZWMtYjU5YzQxOTA5YzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBFbMykuPdQzJVdjDFw/6h3Mvsi/ZYbub+E6
uO8ri14AduATWU2AZWYmPu4Q0XK5amvAKiHy8DteTl6vfu9cty8HMWQn6wTDB2np
gvX6df4cKsMiNmNl9HB1as5u5xLQwYKp1GEyPXWPTLUo+5JI8KztaOZmkZuOk6xS
H7mL4rSfM9WQtWd9qLQly5ArtCLm1khl42dIdlBcYOvIPdV8YWsUWKldRgz8yzxe
FsR4TCIZ34tq/wJVS6htnQBrfJSBfgblSl7DUB3su3FFdKdVf56p3YIZ1YkD8+sG
o7GooBhPJhEZYC+ecTw6aV+3/PpjTdZ3AlKVXwNAvw0IQQLQBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDb2ATHfgk7hekmKOSEUXOg53Zf1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDM4NTc0YmEtYmEyNC0z
YmUyLWI1ZjItNmYxNTU3ZTgzZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsVvhnt6dOOX0GLmyfLd4DomX3P2Tqwvom02FfKsJfn/iFvD7GMjWzp
fDofs3Y+TRiWsHhkG54C8PniMOfFJgNlDSkzlOmVNvodHg4Nk8FJb0MwQ6suP7Me
81CogGXlJRJPM+ZB/bSzICFno+XZBUgWQXCvCNkGCnPZ9ciIG06ZIyZSpvQmZga1
oLX9EztE7UUtaTuslzMa9c5+s5lsutvJndwKmAK402DEJ38CoAQ+FKJD2Bz/M6jg
xH5D8Ro4quUf3cCBguZ2A1Bq/tfvvX87jW4Jz95PVn+aWwkHIdGRHSg5nnBviUOQ
tkKBFBT9BusJYEFm+jkwwO5gep9WZD4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:17 2025 by rpki-client