Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01d79881-93c8-3835-ac90-e45063694699.roa
File:                     01d79881-93c8-3835-ac90-e45063694699.roa (raw, json)
Hash identifier:          o4tNVRWEP9UuW1cP3KwKBQXaepdN7UYk65fF0QQra4Y=
Subject key identifier:   9C:C7:A1:70:D3:0C:4F:E6:62:E2:99:AF:8E:27:E6:AF:61:4E:24:E8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CA38DE980FCBCA9054380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01d79881-93c8-3835-ac90-e45063694699.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397228
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:a3:8d:e9:80:fc:bc:a9:05:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=830da9e3-bbfe-41b2-aea8-32e566a2acff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5f:f6:79:53:83:2f:55:0c:c3:9c:1f:44:3b:
                    d2:a2:64:1d:55:24:07:66:50:d6:b3:f8:2a:08:36:
                    d7:53:0f:4e:b4:c0:27:cb:c3:e4:54:21:17:2f:e8:
                    95:85:75:78:40:a3:af:fe:89:e8:ba:ad:9a:97:36:
                    21:16:7b:3c:75:f5:71:5b:8b:ee:ed:f6:c4:eb:73:
                    9c:fe:b6:bc:4e:f0:bd:3b:51:ef:f8:d9:79:29:25:
                    01:8f:55:16:ff:e5:91:33:dd:a0:1d:34:b2:a4:74:
                    fc:82:48:9c:cc:7c:f8:35:c0:5c:6e:6b:10:24:bc:
                    1b:ed:8b:59:5b:3f:90:71:5c:a5:12:3d:ae:0c:95:
                    dc:c2:4a:42:97:d5:71:42:e4:5e:bc:67:0c:8e:fb:
                    ab:d2:1f:51:46:4d:b1:d3:7f:3d:9a:15:9c:a8:96:
                    55:a1:ce:dd:44:01:13:41:17:3f:0e:2e:13:72:85:
                    b1:4c:40:de:a0:ad:ac:03:18:9d:6d:b9:3e:3d:f6:
                    68:35:66:d7:bb:e7:6c:a1:fe:f2:f7:5e:75:2c:b4:
                    be:9e:65:30:17:73:3c:d1:64:87:14:50:fb:7b:69:
                    a8:29:29:b3:40:0c:c6:35:f6:82:0f:f1:53:00:39:
                    50:e7:28:e0:b3:e0:98:b9:c9:a9:38:7d:73:61:21:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C7:A1:70:D3:0C:4F:E6:62:E2:99:AF:8E:27:E6:AF:61:4E:24:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01d79881-93c8-3835-ac90-e45063694699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:07:bc:d9:92:37:8e:38:67:71:fd:3a:93:24:a9:c6:d4:16:
         69:a6:8c:ad:c7:4f:3b:ef:45:1d:e2:ea:7f:7d:a0:7f:ad:c1:
         0f:25:5e:17:03:52:af:3c:68:20:48:02:ae:40:63:0e:00:ea:
         26:49:4b:ca:9b:db:5c:08:63:3d:d1:1d:6a:3f:0d:ab:a2:31:
         10:fe:1e:48:ab:55:8e:16:d6:d6:61:12:94:c0:ce:b7:05:90:
         5b:0b:df:05:b1:da:24:07:b6:eb:50:72:13:eb:46:78:20:48:
         0d:62:40:11:41:39:af:58:52:17:0d:ff:7d:8e:79:b6:69:40:
         fa:48:ed:cf:ed:f7:c5:cf:a5:07:84:9c:f1:27:86:fb:de:56:
         f9:64:72:51:e4:7b:98:83:74:29:5f:dd:72:54:74:19:39:aa:
         e1:0c:62:a4:68:bd:e9:b0:1d:08:d4:f1:54:c1:3e:8f:a4:d9:
         72:9e:2a:89:d3:d4:af:1d:99:8b:99:87:c8:e3:0f:53:ce:d0:
         6c:f7:10:73:8f:d3:cf:e0:f8:11:39:0b:bd:57:ec:3a:d1:ff:
         ce:54:70:e9:b1:fd:7d:f5:30:99:ca:36:f5:51:b4:90:65:3b:
         99:9e:2d:53:05:f5:2a:5f:6e:00:41:4c:cc:43:db:4a:94:1f:
         00:2e:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:20 2025 by rpki-client