Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cf36c9e-49c5-3dc3-b19e-2b5d6b12c5b5.roa
File:                     0cf36c9e-49c5-3dc3-b19e-2b5d6b12c5b5.roa (raw, json)
Hash identifier:          +Kz9CBJkgDGYZPlh9zWgrwCLIxwO2dIKvMC4Te6B4oc=
Subject key identifier:   AB:17:36:94:23:59:F8:4A:8F:A1:13:E7:C5:74:7A:12:72:64:01:62
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C36FA3AC387372AD37EB200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cf36c9e-49c5-3dc3-b19e-2b5d6b12c5b5.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397213
IP address blocks:        156.154.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:fa:3a:c3:87:37:2a:d3:7e:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=b4fdf8ab-473a-4368-8948-560b62d4867f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:ee:ed:cc:98:1e:b7:40:30:2b:38:62:80:
                    e7:46:a9:f9:c9:71:39:e3:20:fc:25:b2:84:19:0d:
                    ad:57:39:2c:12:3d:27:a6:aa:ad:b3:d2:82:14:56:
                    c5:b5:bf:87:dd:d3:07:ab:16:cb:1f:94:7a:69:e8:
                    e1:6e:f1:3c:7f:6a:df:16:42:51:a7:01:21:92:67:
                    7c:91:2a:6e:7b:66:07:4e:76:d2:c8:9c:ab:f5:cc:
                    36:06:da:5b:e3:64:c2:70:ba:8e:a2:a5:5a:f2:5b:
                    a1:ea:d6:81:86:b7:1f:2c:24:ca:e9:76:2a:3d:5b:
                    38:30:d7:2e:68:a3:60:89:04:67:b0:91:dc:de:d0:
                    2b:5a:1e:b8:6f:78:4c:61:91:78:8e:d3:0d:e9:e5:
                    8b:bd:30:97:17:8d:58:66:4f:46:22:46:9c:6b:c0:
                    7a:00:bc:bd:91:bd:87:c8:11:ff:68:66:3c:fb:10:
                    b7:0a:c4:06:50:83:6f:3c:6c:b8:f9:a4:a1:0d:50:
                    68:aa:91:e9:94:58:0a:e4:f3:7b:96:89:8b:e6:a1:
                    59:02:77:96:71:4f:28:91:9f:01:fd:51:66:c8:ff:
                    48:43:70:32:d3:da:cc:e1:e5:e2:2f:4a:29:30:36:
                    ad:e9:51:74:b4:95:f3:64:88:8d:77:2b:1b:95:69:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:36:94:23:59:F8:4A:8F:A1:13:E7:C5:74:7A:12:72:64:01:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0cf36c9e-49c5-3dc3-b19e-2b5d6b12c5b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:81:2a:29:d7:8a:ea:99:23:b5:4f:17:2b:3d:42:02:1d:89:
         ed:32:0f:5a:c3:f8:6d:8e:a0:15:b1:b3:3a:9d:9a:fb:68:4a:
         28:aa:89:41:6d:a0:82:29:9d:f6:4d:99:b3:76:b1:43:ae:3d:
         40:c9:74:73:57:29:33:25:b7:e0:f9:4f:46:bb:13:ac:34:3e:
         88:5f:c7:2b:63:3f:a5:da:ee:f3:88:a0:16:0e:90:c9:7b:b4:
         bf:b3:ce:f1:3f:92:c1:34:06:b6:10:ed:40:f0:48:ab:84:c2:
         f7:5c:10:f8:a0:9f:76:55:42:d1:29:c6:6d:72:3d:1d:2c:3b:
         eb:84:15:61:50:9b:e8:92:aa:0a:af:12:72:b7:e5:fa:b3:1e:
         63:a9:8c:3c:6a:35:77:1d:ed:24:85:ce:68:19:7d:95:ca:d1:
         1b:33:f6:53:bf:4e:98:2b:2f:02:cd:5a:67:a8:75:83:57:20:
         07:40:6d:ba:cf:c4:d2:5f:c4:fe:14:44:93:fa:b2:1b:05:d7:
         36:ad:2a:c2:7c:7c:80:fd:a2:11:49:53:f4:d7:a4:c3:e0:e3:
         ba:d2:3d:e5:59:fa:5f:0a:7f:0a:ac:e2:c8:65:a9:0e:3e:1e:
         81:d7:cb:d8:01:cd:92:d7:bb:2c:9a:8c:4f:0b:6d:f6:f7:05:
         db:d4:2a:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNvo6w4c3KtN+sgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
YjRmZGY4YWItNDczYS00MzY4LTg5NDgtNTYwYjYyZDQ4NjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLru7cyYHrdAMCs4YoDnRqn5yXE54yD8JbKE
GQ2tVzksEj0npqqts9KCFFbFtb+H3dMHqxbLH5R6aejhbvE8f2rfFkJRpwEhkmd8
kSpue2YHTnbSyJyr9cw2Btpb42TCcLqOoqVa8luh6taBhrcfLCTK6XYqPVs4MNcu
aKNgiQRnsJHc3tArWh64b3hMYZF4jtMN6eWLvTCXF41YZk9GIkaca8B6ALy9kb2H
yBH/aGY8+xC3CsQGUINvPGy4+aShDVBoqpHplFgK5PN7lomL5qFZAneWcU8okZ8B
/VFmyP9IQ3Ay09rM4eXiL0opMDat6VF0tJXzZIiNdysblWnJPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsXNpQjWfhKj6ET58V0ehJyZAFiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGNmMzZjOWUtNDljNS0z
ZGMzLWIxOWUtMmI1ZDZiMTJjNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGBKinXiuqZI7VPFys9QgIdie0yD1rD+G2OoBWxszqdmvtoSiiqiUFt
oIIpnfZNmbN2sUOuPUDJdHNXKTMlt+D5T0a7E6w0PohfxytjP6Xa7vOIoBYOkMl7
tL+zzvE/ksE0BrYQ7UDwSKuEwvdcEPign3ZVQtEpxm1yPR0sO+uEFWFQm+iSqgqv
EnK35fqzHmOpjDxqNXcd7SSFzmgZfZXK0Rsz9lO/TpgrLwLNWmeodYNXIAdAbbrP
xNJfxP4URJP6shsF1zatKsJ8fID9ohFJU/TXpMPg47rSPeVZ+l8Kfwqs4shlqQ4+
HoHXy9gBzZLXuyyajE8Lbfb3BdvUKtA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:32 2025 by rpki-client