Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029ab985-b920-3da9-9694-32c80ea4af18.roa
File:                     029ab985-b920-3da9-9694-32c80ea4af18.roa (raw, json)
Hash identifier:          +dgdj1P+PSb+INHLSC8XfT9a+QKuojzvqbkzlibJcOA=
Subject key identifier:   46:3C:A1:B7:44:AE:E3:0E:02:61:57:07:FE:2C:D3:67:65:DA:61:CB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C36FB5D5B2C45D36C273080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029ab985-b920-3da9-9694-32c80ea4af18.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397231
IP address blocks:        156.154.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:fb:5d:5b:2c:45:d3:6c:27:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=461833fd-1fbf-412b-a988-4061bd825c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:04:d7:1a:1c:70:be:45:6d:2c:07:d4:21:10:
                    12:8d:fc:0b:81:d3:7f:3f:9c:2d:5c:c5:fb:75:81:
                    2c:f1:c2:90:ec:60:ad:35:93:57:08:be:ff:64:2d:
                    33:b5:8b:76:46:6a:9d:21:40:1e:b5:60:cd:08:a7:
                    f9:7b:90:fe:b5:5a:ab:49:23:de:13:17:dc:e7:68:
                    f1:b4:4d:46:58:67:3f:37:ff:c9:e5:2f:db:f0:5f:
                    a3:94:03:b8:d2:c3:b8:ae:19:10:e5:84:c5:3d:45:
                    be:02:db:19:b4:28:7a:f4:3e:92:55:a1:3f:b9:88:
                    5b:1c:f0:e3:09:29:bb:f1:d3:38:f9:f8:3f:32:c2:
                    b2:13:08:b4:77:4c:b2:28:13:bb:78:96:ce:69:8f:
                    48:64:70:6b:1f:d2:8f:bb:c7:18:35:7c:a0:21:94:
                    7a:07:3c:43:6f:86:73:25:10:0b:92:ee:1f:e9:a5:
                    c7:29:e2:25:61:18:3b:70:4b:0f:83:a3:b6:e4:8c:
                    85:ad:92:4b:8e:45:2f:80:57:1c:85:82:ee:63:88:
                    86:13:75:66:6e:70:11:43:2b:91:ab:84:35:88:39:
                    33:dd:b0:d6:e5:6b:79:ce:14:86:8b:03:90:d6:17:
                    8c:0b:f2:10:d0:40:15:bb:13:e5:5c:88:ac:05:bc:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3C:A1:B7:44:AE:E3:0E:02:61:57:07:FE:2C:D3:67:65:DA:61:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029ab985-b920-3da9-9694-32c80ea4af18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:f6:35:ca:7f:7f:d3:29:0f:b0:3e:cf:1d:1d:22:90:09:
         f0:c4:b0:15:04:32:71:d3:44:8e:b2:de:d6:ac:20:7f:13:d6:
         db:83:67:f5:0e:ee:27:df:d1:7f:a2:9a:bd:65:89:b1:8c:b0:
         35:df:cd:88:c7:97:ff:cc:3c:7f:e5:5d:a6:2d:83:51:71:27:
         1b:b0:64:31:23:b7:2e:ca:a9:b7:53:3f:0a:fb:73:41:5f:cf:
         31:f1:8d:7a:6a:14:7d:70:53:f1:39:b2:c0:c4:17:10:98:46:
         a9:a2:ac:19:3c:d6:36:d6:a3:95:7c:7b:53:58:4d:bb:39:c2:
         af:ee:59:5f:99:5d:b1:5a:a7:d1:0f:0b:df:20:c6:d4:41:d2:
         90:9d:f7:57:6f:af:5d:c0:b7:d3:d5:bd:11:26:34:2d:4d:f1:
         c5:20:33:2c:aa:7c:79:a1:24:d2:53:3e:30:79:d1:6a:50:1b:
         56:24:fd:74:f7:b3:a9:17:68:94:d5:4e:45:9a:72:40:12:28:
         31:cd:94:94:fe:dc:56:2e:5d:aa:b9:40:91:9c:ad:47:22:3e:
         de:9b:d9:7b:d1:1e:2b:77:74:a0:ae:0a:e8:da:9d:e7:d0:2f:
         21:31:09:ae:45:57:f3:c9:1b:81:d1:e6:b7:0b:14:df:60:55:
         29:fc:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:40 2025 by rpki-client