Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09030468-dead-3a10-b59b-ab1703e949e2.roa
File:                     09030468-dead-3a10-b59b-ab1703e949e2.roa (raw, json)
Hash identifier:          yJkL8Rooi9L1k6PfwAwy9LCDQuTWx1JterH7C5/Ve1A=
Subject key identifier:   B5:F7:FE:F8:1B:4D:7C:7B:9E:E6:61:A6:35:39:CC:C3:79:FE:1F:6B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849FE2F795A7BA6600D5300F6C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09030468-dead-3a10-b59b-ab1703e949e2.roa
Signing time:             Tue 27 May 2025 14:04:48 +0000
ROA not before:           Tue 27 May 2025 14:04:48 +0000
ROA not after:            Mon 25 Aug 2025 14:04:48 +0000
asID:                     16552
IP address blocks:        156.154.78.0/24 maxlen: 24
                          2610:a1:3030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:2f:79:5a:7b:a6:60:0d:53:00:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 27 14:04:48 2025 GMT
            Not After : Aug 25 14:04:48 2025 GMT
        Subject: CN=ef7240fd-ea9b-4998-8b19-ae9b3c42035e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:1c:b4:05:8a:6c:c7:45:a5:e7:2c:21:46:
                    a8:60:5c:4d:c1:c1:8d:89:dd:8a:45:84:07:ae:78:
                    5a:c3:06:a0:b8:d7:83:5b:36:c6:08:fa:7d:57:38:
                    40:71:03:6a:17:49:61:27:56:bd:70:d9:70:e3:55:
                    18:fa:9e:e6:74:6d:fa:46:21:29:1d:f4:56:7d:d7:
                    65:3c:b7:0e:12:be:8f:a0:e2:4c:53:f3:56:5f:49:
                    45:43:cb:ab:ba:d8:cb:75:57:ed:3c:5b:d5:00:11:
                    cf:70:b2:c7:dc:9f:10:03:03:14:5c:de:90:23:62:
                    a6:0f:f0:30:ce:a8:1a:63:62:20:84:c8:25:65:0e:
                    dc:42:c8:8f:a3:03:df:78:93:ce:f2:24:f6:76:c9:
                    a5:86:c1:a3:d0:1b:ff:81:c3:80:df:d0:a5:f9:96:
                    f8:fc:2c:29:69:4d:33:bd:ca:cb:fb:cb:5a:53:9f:
                    0b:07:92:f8:5b:f8:18:ce:d2:fb:1f:d4:d3:64:42:
                    88:2f:dc:d4:9d:c4:92:2c:90:5d:1f:cc:cb:f2:1a:
                    14:b7:c3:33:34:81:69:90:e9:53:b7:a8:ff:80:41:
                    89:9e:06:21:cf:aa:b2:43:15:23:d8:dd:66:e3:02:
                    cc:23:af:d8:8e:3a:a2:51:4e:b7:a2:2a:11:48:d4:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F7:FE:F8:1B:4D:7C:7B:9E:E6:61:A6:35:39:CC:C3:79:FE:1F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09030468-dead-3a10-b59b-ab1703e949e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.78.0/24
                IPv6:
                  2610:a1:3030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:da:db:1f:c5:a3:f0:ad:fa:cf:64:18:46:46:f0:8c:7b:
         64:99:22:8f:0f:78:bf:e4:63:bf:f4:76:f1:0c:e4:3a:c8:2a:
         1f:95:04:40:58:42:4a:71:ed:3e:b6:12:b7:eb:04:c7:a5:66:
         e6:27:c7:71:18:a6:8c:e0:5f:4b:a5:ac:1d:c8:65:2a:41:20:
         49:5b:f6:19:08:fc:2e:8d:f2:c9:f9:65:9e:ce:d1:65:64:95:
         eb:20:76:57:7f:b5:4f:3f:39:3d:05:68:6d:39:9b:77:32:0d:
         77:4a:01:e3:be:12:2f:22:63:65:0a:50:55:ba:1c:ab:50:50:
         9b:0e:ef:6b:45:2c:86:21:0b:e5:22:f2:5b:b4:98:3d:5f:6f:
         c4:3a:37:98:59:0d:4b:d3:61:de:57:d2:55:fb:6c:92:b1:5e:
         45:b3:b0:61:7f:fc:a2:a7:7a:e8:e5:d9:d2:6e:6e:67:44:50:
         af:c7:52:b9:32:62:b0:b9:0d:6d:c4:33:3c:67:01:1d:e1:21:
         74:b6:54:31:f9:85:3f:68:7d:3c:10:5c:0d:2b:c1:8d:33:01:
         e1:16:01:74:0f:70:66:17:97:c6:cc:97:77:59:80:b1:c7:f2:
         2d:13:16:40:7c:0c:cb:50:b5:c0:96:c7:e9:d2:32:29:94:3c:
         15:e5:19:dd
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEn+L3lae6ZgDVMA9sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyNzE0MDQ0OFoXDTI1MDgyNTE0MDQ0OFowLzEtMCsGA1UEAxMk
ZWY3MjQwZmQtZWE5Yi00OTk4LThiMTktYWU5YjNjNDIwMzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkUctAWKbMdFpecsIUaoYFxNwcGNid2KRYQH
rnhawwaguNeDWzbGCPp9VzhAcQNqF0lhJ1a9cNlw41UY+p7mdG36RiEpHfRWfddl
PLcOEr6PoOJMU/NWX0lFQ8urutjLdVftPFvVABHPcLLH3J8QAwMUXN6QI2KmD/Aw
zqgaY2IghMglZQ7cQsiPowPfeJPO8iT2dsmlhsGj0Bv/gcOA39Cl+Zb4/CwpaU0z
vcrL+8taU58LB5L4W/gYztL7H9TTZEKIL9zUncSSLJBdH8zL8hoUt8MzNIFpkOlT
t6j/gEGJngYhz6qyQxUj2N1m4wLMI6/YjjqiUU63oioRSNQyFQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLX3/vgbTXx7nuZhpjU5zMN5/h9rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDkwMzA0NjgtZGVhZC0z
YTEwLWI1OWItYWIxNzAzZTk0OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnJpOMA8E
AgACMAkDBwAmEAChMDAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOnva2x/Fo/Ct+s9kGEZG8Ix7ZJkijw94
v+Rjv/R28QzkOsgqH5UEQFhCSnHtPrYSt+sEx6Vm5ifHcRimjOBfS6WsHchlKkEg
SVv2GQj8Lo3yyfllns7RZWSV6yB2V3+1Tz85PQVobTmbdzINd0oB474SLyJjZQpQ
Vbocq1BQmw7va0UshiEL5SLyW7SYPV9vxDo3mFkNS9Nh3lfSVftskrFeRbOwYX/8
oqd66OXZ0m5uZ0RQr8dSuTJisLkNbcQzPGcBHeEhdLZUMfmFP2h9PBBcDSvBjTMB
4RYBdA9wZheXxsyXd1mAscfyLRMWQHwMy1C1wJbH6dIyKZQ8FeUZ3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:46 2025 by rpki-client