Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2470b0ad-7c6e-39f3-bdb7-18b577f06470.roa
File:                     2470b0ad-7c6e-39f3-bdb7-18b577f06470.roa (raw, json)
Hash identifier:          G6Bsqy3hQfvkpYtvmENw+9ohvRKSxGeLRJFBijYqtGE=
Subject key identifier:   16:FD:41:A7:6C:6F:F6:34:CB:7C:0E:1D:CB:AB:68:3E:EF:1E:F2:41
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A9965AC825C0E3034569BD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2470b0ad-7c6e-39f3-bdb7-18b577f06470.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397218
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:5a:c8:25:c0:e3:03:45:69:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=413223ce-4d32-4f5c-b8de-605b02ae707e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:d6:f4:b2:38:7c:90:62:98:d8:3e:d2:26:
                    cf:f3:ec:5d:a8:3d:e8:81:fe:ba:6f:8f:9f:bb:72:
                    bf:90:99:8d:7e:ff:c7:47:7e:61:0d:62:ea:6d:42:
                    a4:0d:44:9d:c5:1f:2c:85:e1:12:a4:72:67:df:e9:
                    91:16:a3:7d:15:06:ed:48:50:a9:0b:a5:7a:41:05:
                    a3:5d:0f:85:4a:06:7f:66:63:07:df:ec:5b:c6:18:
                    9b:c8:b5:ae:fb:e4:5e:a4:60:ea:3d:a5:ce:0d:7b:
                    d6:3f:12:7d:ee:11:b7:36:14:5b:49:53:06:4a:3c:
                    de:e2:56:11:62:69:bf:fa:15:82:04:1f:4a:62:a7:
                    91:ee:5c:6b:e0:e1:d1:d0:aa:dc:83:cf:3e:64:a7:
                    9d:75:b1:c6:8c:f2:9c:70:a3:57:fb:b0:d7:cc:eb:
                    2d:41:17:6c:47:6a:24:59:fb:60:58:30:ee:b8:c0:
                    1d:d9:36:80:76:32:65:83:87:7a:a4:51:f0:71:7c:
                    40:40:21:2b:dd:b7:e7:e6:4f:cb:7f:bd:42:d1:ba:
                    83:ac:52:e2:7c:6f:67:61:b2:06:1e:f6:ec:24:86:
                    e1:ba:c6:ba:d2:06:b5:61:f7:32:6f:f7:5c:63:3f:
                    0c:54:d5:0b:c9:b1:42:a0:c5:7e:5f:1b:84:40:36:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FD:41:A7:6C:6F:F6:34:CB:7C:0E:1D:CB:AB:68:3E:EF:1E:F2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2470b0ad-7c6e-39f3-bdb7-18b577f06470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:39:47:13:ac:8c:73:47:cb:ca:2e:5d:67:5d:75:8c:8a:92:
         f9:b4:7d:01:ba:bb:e8:ef:11:fb:fe:00:6a:06:e0:da:6e:4c:
         45:44:7b:29:97:36:4d:71:00:06:0c:e7:71:9d:43:51:c6:c7:
         7c:33:4f:db:f6:05:1e:c1:f0:23:d5:12:1e:84:b3:2b:40:8e:
         b6:51:26:38:1b:17:63:d4:6d:25:8f:a0:9e:f2:0c:b5:29:74:
         ee:ea:64:84:0b:68:2b:29:c3:72:f9:a6:a8:e9:c8:93:4d:b3:
         79:9c:a5:41:dd:a6:35:09:db:12:77:61:4c:98:85:d6:9e:35:
         35:15:67:ef:df:74:5e:04:1b:4e:3b:a4:0d:d2:54:5f:0c:e0:
         b6:60:94:69:e6:ba:c3:13:30:ad:ae:cd:26:1b:27:c9:80:e6:
         9f:46:9d:8b:0e:d4:83:cb:86:e7:41:f1:ec:9b:b5:8b:26:13:
         73:c6:e4:97:47:c8:20:0f:c7:ca:af:f4:93:c4:6c:de:f1:ac:
         f4:c1:57:3f:80:0b:96:e2:2e:6f:a6:a2:51:6d:62:4d:15:8a:
         97:42:6c:f6:c2:2d:da:80:28:2c:c9:b3:0b:a0:d4:9f:15:f0:
         06:7c:55:3a:9f:db:06:3b:52:bb:3c:7b:76:0c:77:93:84:80:
         74:8b:b4:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipllrIJcDjA0VpvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDEzMjIzY2UtNGQzMi00ZjVjLWI4ZGUtNjA1YjAyYWU3MDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8XW9LI4fJBimNg+0ibP8+xdqD3ogf66b4+f
u3K/kJmNfv/HR35hDWLqbUKkDUSdxR8sheESpHJn3+mRFqN9FQbtSFCpC6V6QQWj
XQ+FSgZ/ZmMH3+xbxhibyLWu++RepGDqPaXODXvWPxJ97hG3NhRbSVMGSjze4lYR
Ymm/+hWCBB9KYqeR7lxr4OHR0Krcg88+ZKeddbHGjPKccKNX+7DXzOstQRdsR2ok
WftgWDDuuMAd2TaAdjJlg4d6pFHwcXxAQCEr3bfn5k/Lf71C0bqDrFLifG9nYbIG
HvbsJIbhusa60ga1Yfcyb/dcYz8MVNULybFCoMV+XxuEQDYUGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBb9Qadsb/Y0y3wOHcuraD7vHvJBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjQ3MGIwYWQtN2M2ZS0z
OWYzLWJkYjctMThiNTc3ZjA2NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACc5RxOsjHNHy8ouXWdddYyKkvm0fQG6u+jvEfv+AGoG4NpuTEVEeymX
Nk1xAAYM53GdQ1HGx3wzT9v2BR7B8CPVEh6EsytAjrZRJjgbF2PUbSWPoJ7yDLUp
dO7qZIQLaCspw3L5pqjpyJNNs3mcpUHdpjUJ2xJ3YUyYhdaeNTUVZ+/fdF4EG047
pA3SVF8M4LZglGnmusMTMK2uzSYbJ8mA5p9GnYsO1IPLhudB8eybtYsmE3PG5JdH
yCAPx8qv9JPEbN7xrPTBVz+AC5biLm+molFtYk0VipdCbPbCLdqAKCzJswug1J8V
8AZ8VTqf2wY7Urs8e3YMd5OEgHSLtE8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:46 2025 by rpki-client