Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01af56d1-748f-360d-bbfc-b94a526c8d14.roa
File:                     01af56d1-748f-360d-bbfc-b94a526c8d14.roa (raw, json)
Hash identifier:          QNNjYNO7Nw80E0BJWxWyqgtOgSEU2HHvX0EEXJliTWI=
Subject key identifier:   A3:D8:9E:F0:21:60:FC:AB:71:53:A8:65:76:C4:0F:3D:8E:BE:DE:EA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BE9695199400FFA4F6080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01af56d1-748f-360d-bbfc-b94a526c8d14.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397237
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e9:69:51:99:40:0f:fa:4f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=84762e72-7d59-4041-8cfe-59afa36d47e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:f1:73:b3:a9:07:1f:e7:23:19:3c:0e:33:
                    9d:aa:cb:17:de:b7:12:4b:61:dc:cc:71:7f:83:41:
                    4d:4e:d6:b0:cd:a4:42:3c:63:78:54:f9:fe:b4:8e:
                    9a:b9:50:9a:e6:9d:59:b7:81:e7:07:2c:f6:f9:b6:
                    55:fa:3f:54:22:95:73:55:99:ac:bb:b4:e5:4b:51:
                    76:db:2a:f1:00:db:fd:1f:a9:73:37:b1:fb:65:dc:
                    7d:26:e8:ab:48:87:a1:ae:c5:be:37:c9:72:7a:d0:
                    e7:e4:a5:c1:a7:b3:73:d3:4b:72:3e:12:a9:30:4e:
                    cc:e5:70:fa:b4:f8:c4:86:75:cc:03:88:49:04:a2:
                    59:59:dd:54:b4:0d:09:ce:6e:b8:b0:14:d0:4c:a5:
                    a4:be:37:d8:8c:7a:b0:f2:d5:91:1e:c9:1e:5e:d1:
                    f2:b1:2e:f4:d3:5a:a6:ef:85:8b:b4:65:95:f0:bb:
                    5f:05:db:0b:8a:b0:2f:9f:e0:86:cf:63:d8:fa:50:
                    6a:cd:33:f8:a5:74:76:11:31:56:ed:8c:a0:93:91:
                    b1:94:3c:35:02:ad:2a:d7:bd:d5:64:fb:9f:53:04:
                    34:66:e1:1d:87:f8:d0:c7:50:25:84:54:df:ae:fd:
                    9f:b1:9d:43:2c:45:90:5a:53:99:4c:f4:0c:47:8f:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D8:9E:F0:21:60:FC:AB:71:53:A8:65:76:C4:0F:3D:8E:BE:DE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01af56d1-748f-360d-bbfc-b94a526c8d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:91:a0:47:1d:b1:f0:a5:4d:64:ff:0b:3d:47:37:78:c8:50:
         01:e7:d9:c1:bb:92:ac:71:24:93:6c:46:81:f8:25:16:d8:dc:
         c3:01:24:7a:c9:fa:2b:a7:a1:de:4b:89:3f:07:9a:b2:a8:52:
         f9:a1:cc:b2:92:47:e4:2a:8b:34:35:cc:2b:20:71:44:5e:74:
         0f:f3:22:0a:e1:a5:ba:aa:8e:da:79:b8:16:e5:ed:fb:bc:3f:
         7c:11:3f:f5:67:56:79:b4:31:b5:d0:fd:14:89:42:3a:b4:29:
         27:72:7f:64:29:00:e8:97:f1:09:f6:38:fb:28:2a:f8:61:07:
         64:88:04:8b:e7:cb:fd:fd:ff:5b:e3:94:15:ce:f3:77:21:04:
         db:6f:54:f9:84:4c:76:c1:aa:9c:a7:c2:f0:73:08:1c:4f:4f:
         6f:e3:37:19:55:e9:00:5f:36:b7:24:41:90:78:54:31:45:63:
         fb:db:40:e7:5a:e7:71:b7:62:cb:21:74:aa:06:55:ef:4c:bb:
         fc:47:0a:63:1a:6b:90:18:70:21:61:97:6b:ad:30:56:69:cf:
         e2:7c:69:8d:41:f5:0e:77:0d:69:a1:74:4b:49:05:a8:d7:4d:
         f1:7a:07:db:d5:2c:b1:6f:e2:7c:53:88:7c:c6:1c:13:ec:ac:
         37:12:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:01 2025 by rpki-client