Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8ec97c6-9b2e-3f2c-a5c8-b5fa561323cf.roa
File:                     f8ec97c6-9b2e-3f2c-a5c8-b5fa561323cf.roa (raw, json)
Hash identifier:          o4Q6oL1MEN1YMXX/Hca9IG1NO/9skVd6Nav+yYgWG5c=
Subject key identifier:   42:48:EB:4F:33:EE:F9:C5:43:92:F9:58:6C:FA:62:9D:95:C2:C9:90
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246E52209CA1CF5C316CA00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8ec97c6-9b2e-3f2c-a5c8-b5fa561323cf.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397231
IP address blocks:        156.154.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:e5:22:09:ca:1c:f5:c3:16:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=c492c67e-46ae-4673-94a3-0b17200d2454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:9e:de:30:ea:f1:b1:9b:3d:af:88:7d:fc:
                    4e:9a:d4:ce:1c:a0:a5:e7:33:c5:85:c8:1c:5e:ac:
                    f7:54:03:da:c7:d0:0e:82:c1:f4:e1:f5:fe:3d:f7:
                    0a:b3:17:fc:7c:83:30:6c:78:19:e9:60:13:fc:b4:
                    46:4f:5e:12:bd:3f:09:d8:93:81:c7:d2:5a:65:35:
                    a6:21:97:7d:56:33:e8:9b:d2:74:65:30:09:a6:9a:
                    0b:03:f8:e5:4a:21:fb:b6:3e:f8:b7:0e:95:9e:81:
                    bb:a0:8e:84:21:19:79:4b:f9:4f:6f:7c:89:12:b1:
                    3f:a3:06:c9:ef:3b:4f:bf:55:b3:04:cf:8f:41:c2:
                    d4:34:b0:00:28:57:5c:94:0d:4b:b5:6a:d4:bd:de:
                    5d:83:71:69:c5:f8:3e:3b:c6:fd:95:65:60:2a:ce:
                    b5:7e:aa:f7:3b:df:1c:dc:75:29:60:12:3f:18:18:
                    d9:ae:ba:16:16:ed:72:31:df:97:50:58:fc:2d:4e:
                    3d:ef:96:3e:6b:87:03:99:32:a6:38:78:60:86:07:
                    69:bb:61:06:9c:7b:cb:b2:a3:14:5b:03:21:15:53:
                    db:39:2f:87:50:b8:86:4c:29:4a:93:30:ed:48:f5:
                    c2:ea:a6:17:a6:6d:c1:12:ba:7d:8c:db:28:0a:f8:
                    05:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:48:EB:4F:33:EE:F9:C5:43:92:F9:58:6C:FA:62:9D:95:C2:C9:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8ec97c6-9b2e-3f2c-a5c8-b5fa561323cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:99:d2:b5:4c:df:19:12:38:63:28:97:53:73:d6:f3:45:
         53:50:a5:4b:d1:42:8e:2b:51:76:94:cc:21:62:ec:fd:de:66:
         33:cd:7d:d8:3a:42:d8:ef:7f:d4:95:50:fa:30:b3:e8:96:4a:
         e0:fc:93:1b:5f:77:74:91:96:c4:c2:8a:60:a7:17:58:bd:7e:
         15:a6:f8:2b:e9:a8:6d:29:d0:06:1e:d3:ed:02:27:40:80:c6:
         73:17:96:a9:ba:ba:83:88:db:fb:31:e3:a4:28:c7:3f:9b:5a:
         cc:10:12:fb:de:f6:b5:8a:c1:e1:d7:ff:83:f0:d1:6a:b3:26:
         0c:13:cf:7e:9e:57:60:d5:54:08:eb:35:24:bc:e8:01:97:f5:
         6b:b6:54:c0:30:93:2b:08:9c:f1:69:69:0e:62:9f:be:d1:95:
         c7:93:f7:d2:c8:df:6e:44:cb:b9:9c:f0:af:3c:59:64:b2:e6:
         e7:e7:e4:28:e4:5d:21:5e:87:03:ae:74:48:00:d2:81:a1:28:
         56:77:b0:10:c5:f4:9a:8a:35:ce:b0:3a:6a:e7:e6:18:72:ed:
         b0:03:b6:60:0a:77:08:f2:4b:96:f9:6d:3d:28:23:f5:fe:f0:
         d7:e6:ae:a4:62:e2:03:57:cd:c0:71:9e:73:93:c7:9d:e5:08:
         db:1d:29:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRuUiCcoc9cMWygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
YzQ5MmM2N2UtNDZhZS00NjczLTk0YTMtMGIxNzIwMGQyNDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHWe3jDq8bGbPa+IffxOmtTOHKCl5zPFhcgc
Xqz3VAPax9AOgsH04fX+PfcKsxf8fIMwbHgZ6WAT/LRGT14SvT8J2JOBx9JaZTWm
IZd9VjPom9J0ZTAJppoLA/jlSiH7tj74tw6VnoG7oI6EIRl5S/lPb3yJErE/owbJ
7ztPv1WzBM+PQcLUNLAAKFdclA1LtWrUvd5dg3Fpxfg+O8b9lWVgKs61fqr3O98c
3HUpYBI/GBjZrroWFu1yMd+XUFj8LU4975Y+a4cDmTKmOHhghgdpu2EGnHvLsqMU
WwMhFVPbOS+HULiGTClKkzDtSPXC6qYXpm3BErp9jNsoCvgFEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJI608z7vnFQ5L5WGz6Yp2VwsmQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjhlYzk3YzYtOWIyZS0z
ZjJjLWE1YzgtYjVmYTU2MTMyM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACu4mdK1TN8ZEjhjKJdTc9bzRVNQpUvRQo4rUXaUzCFi7P3eZjPNfdg6
Qtjvf9SVUPows+iWSuD8kxtfd3SRlsTCimCnF1i9fhWm+CvpqG0p0AYe0+0CJ0CA
xnMXlqm6uoOI2/sx46Qoxz+bWswQEvve9rWKweHX/4Pw0WqzJgwTz36eV2DVVAjr
NSS86AGX9Wu2VMAwkysInPFpaQ5in77RlceT99LI325Ey7mc8K88WWSy5ufn5Cjk
XSFehwOudEgA0oGhKFZ3sBDF9JqKNc6wOmrn5hhy7bADtmAKdwjyS5b5bT0oI/X+
8NfmrqRi4gNXzcBxnnOTx53lCNsdKS4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:01:03 2025 by rpki-client