Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23cca91f-ee9a-30ad-b1aa-2d9d5600b5eb.roa
File:                     23cca91f-ee9a-30ad-b1aa-2d9d5600b5eb.roa (raw, json)
Hash identifier:          E0dSlzZ3VqnE42h6yoIWlblSU6Md6zsjB08NQjfU9Cw=
Subject key identifier:   A8:57:E1:E5:29:57:A5:A6:CE:B0:06:7D:63:5D:67:29:7B:62:06:E5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C83E46869D5FD998DD900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23cca91f-ee9a-30ad-b1aa-2d9d5600b5eb.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397220
IP address blocks:        156.154.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:83:e4:68:69:d5:fd:99:8d:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=6c323d58-63cd-4c48-b6c9-3b49ebd861c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a9:86:b3:5a:10:71:80:1f:e8:4a:a7:61:7d:
                    bc:16:11:dc:e6:4e:db:2e:68:dc:bb:f2:47:e5:b5:
                    aa:35:80:b8:36:30:17:96:f0:49:27:12:5a:2e:44:
                    ad:e1:e8:57:f7:03:a0:5a:bc:b3:70:b5:a0:7a:d0:
                    bd:92:fe:3e:05:7e:e2:72:89:37:9e:5d:a7:10:09:
                    d1:47:2d:ba:3b:c8:10:9e:c6:95:63:15:aa:f6:7e:
                    22:a6:41:7a:eb:eb:4f:07:34:38:ef:aa:a8:47:69:
                    65:64:5b:7d:e9:64:31:6b:67:53:83:ac:43:b2:ba:
                    26:8a:70:17:21:a2:ce:88:e6:91:8c:89:30:a8:3f:
                    52:be:02:20:45:15:6a:ee:ad:1b:1c:d7:ce:45:cf:
                    a4:a6:2e:4d:f1:ac:0a:49:9e:72:b0:76:00:64:a5:
                    37:a6:7e:7a:c1:ed:58:a6:13:c3:02:8f:6f:fd:76:
                    44:f6:34:8b:58:15:d7:d8:6f:94:b7:f2:20:32:a3:
                    c4:f8:0b:81:3c:ba:50:d1:ca:ce:84:72:59:1d:d6:
                    40:ae:d2:4d:78:24:f0:f7:0b:b4:31:78:36:a9:03:
                    1d:76:3a:b8:11:c3:5b:b8:f6:b3:af:63:93:91:92:
                    71:eb:be:d8:7d:f4:71:1b:d6:e8:09:3f:d6:74:02:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:57:E1:E5:29:57:A5:A6:CE:B0:06:7D:63:5D:67:29:7B:62:06:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23cca91f-ee9a-30ad-b1aa-2d9d5600b5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:cf:41:06:8d:ff:ef:d4:75:ec:ce:7c:8c:d7:e2:4e:e6:
         3e:7b:4d:ca:dc:74:1f:49:e6:75:a0:34:bc:0f:a4:47:a8:87:
         24:7d:ba:85:58:31:52:7b:30:a0:1a:82:6f:30:14:ef:75:04:
         68:06:6b:5f:f2:08:70:82:5f:41:94:e3:91:1b:9e:7e:72:4e:
         24:1f:b7:6b:5c:29:8c:8f:c9:d0:c1:39:44:33:ca:40:f2:e6:
         1f:ba:5a:8f:8b:30:36:d4:43:ed:23:4d:8a:fd:c7:3f:b6:74:
         94:21:02:2e:d0:91:6e:12:18:fd:a0:af:29:aa:ad:c2:22:d6:
         ef:0c:d1:89:8b:23:15:7e:62:61:41:db:32:20:61:f1:b6:2b:
         64:50:a2:eb:fe:a5:9a:6a:4e:8e:89:fa:e9:94:78:9c:1b:e5:
         46:73:92:a5:70:b4:d5:26:7f:57:f0:51:4b:02:e5:d6:9b:23:
         8a:df:98:ef:d8:a8:17:b4:9e:2a:02:1b:ab:6c:1f:eb:af:06:
         6e:c3:33:41:03:a1:ec:81:08:de:2b:12:1b:55:7c:38:fd:2a:
         a1:07:60:59:da:19:f4:9b:6f:a5:e4:42:53:5e:92:93:a8:c5:
         bf:dc:ab:61:b9:ee:e0:67:fd:5d:34:f2:a7:a5:9c:2b:ba:a5:
         be:26:ec:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIPkaGnV/ZmN2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
NmMzMjNkNTgtNjNjZC00YzQ4LWI2YzktM2I0OWViZDg2MWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqmGs1oQcYAf6EqnYX28FhHc5k7bLmjcu/JH
5bWqNYC4NjAXlvBJJxJaLkSt4ehX9wOgWryzcLWgetC9kv4+BX7icok3nl2nEAnR
Ry26O8gQnsaVYxWq9n4ipkF66+tPBzQ476qoR2llZFt96WQxa2dTg6xDsrominAX
IaLOiOaRjIkwqD9SvgIgRRVq7q0bHNfORc+kpi5N8awKSZ5ysHYAZKU3pn56we1Y
phPDAo9v/XZE9jSLWBXX2G+Ut/IgMqPE+AuBPLpQ0crOhHJZHdZArtJNeCTw9wu0
MXg2qQMddjq4EcNbuPazr2OTkZJx677YffRxG9boCT/WdAKKXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhX4eUpV6WmzrAGfWNdZyl7YgblMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjNjY2E5MWYtZWU5YS0z
MGFkLWIxYWEtMmQ5ZDU2MDBiNWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGfz0EGjf/v1HXsznyM1+JO5j57TcrcdB9J5nWgNLwPpEeohyR9uoVY
MVJ7MKAagm8wFO91BGgGa1/yCHCCX0GU45Ebnn5yTiQft2tcKYyPydDBOUQzykDy
5h+6Wo+LMDbUQ+0jTYr9xz+2dJQhAi7QkW4SGP2grymqrcIi1u8M0YmLIxV+YmFB
2zIgYfG2K2RQouv+pZpqTo6J+umUeJwb5UZzkqVwtNUmf1fwUUsC5dabI4rfmO/Y
qBe0nioCG6tsH+uvBm7DM0EDoeyBCN4rEhtVfDj9KqEHYFnaGfSbb6XkQlNekpOo
xb/cq2G57uBn/V008qelnCu6pb4m7Aw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:21 2025 by rpki-client