Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35bd6a65-fa95-386d-8fef-7f8cb0981fc7.roa
File:                     35bd6a65-fa95-386d-8fef-7f8cb0981fc7.roa (raw, json)
Hash identifier:          b4B8fxB0i214JTDIYbt9bMoBzF0Yw260yOpL+uufaOo=
Subject key identifier:   75:1B:99:E2:61:7A:A3:20:85:C4:1C:E2:DF:1B:E3:D7:EB:80:AE:82
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C998C704447A813BD0A8A
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35bd6a65-fa95-386d-8fef-7f8cb0981fc7.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397218
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:99:8c:70:44:47:a8:13:bd:0a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=8605acea-10ad-4fc7-97ac-6c3d37631883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:84:b5:eb:3b:52:2e:2f:ff:ff:7c:39:91:
                    79:85:10:4c:75:bd:90:cd:3f:00:f1:ad:90:79:57:
                    69:23:99:29:8c:1f:42:9e:81:28:57:d2:5c:14:e2:
                    f4:e2:58:f8:73:0d:bc:aa:b8:09:a6:36:ab:6d:df:
                    55:f8:da:b8:de:1a:26:cd:8a:b7:43:db:88:2b:4e:
                    e3:fc:7a:3a:16:f2:9f:b8:e3:e6:41:24:5a:4b:f3:
                    96:51:0b:02:ce:b7:62:9c:c0:bc:db:4c:08:56:30:
                    d5:7e:78:bd:58:b0:af:0b:a0:90:a7:ec:d8:1f:42:
                    bc:a8:ab:62:4b:1e:47:7f:c4:ab:64:93:0c:b0:d6:
                    6d:c2:6b:66:54:73:62:ab:b3:1a:6f:83:d3:ca:d2:
                    83:ee:38:7a:9e:ca:fd:dd:4f:21:7c:b9:19:74:a5:
                    c0:8b:55:59:24:c1:ab:52:57:9a:98:1c:50:47:f4:
                    ce:b3:78:db:09:0a:d9:80:3d:0e:1a:2d:22:bc:a6:
                    7a:f2:7e:b5:aa:95:ba:4d:78:bf:00:0a:0a:30:31:
                    6b:b9:e1:7e:f5:40:28:a5:62:c5:a4:4a:9b:05:a2:
                    e0:e5:e8:e9:66:cb:a4:3e:85:d7:f2:ec:e9:b4:a4:
                    d8:dc:5d:db:a6:90:1d:02:c6:30:5c:14:a3:d0:7d:
                    5d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1B:99:E2:61:7A:A3:20:85:C4:1C:E2:DF:1B:E3:D7:EB:80:AE:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/35bd6a65-fa95-386d-8fef-7f8cb0981fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:0b:82:98:3d:49:32:be:29:5c:74:ed:ef:b5:f6:f0:c1:
         8a:46:1d:6b:d9:a5:d3:50:84:b4:f1:2e:ad:12:66:ce:27:f8:
         95:3c:06:d0:63:0a:07:93:b1:e4:18:69:71:fa:a6:90:7c:38:
         a3:8f:a1:45:d3:fd:fe:89:e4:6b:a5:de:85:62:4b:4c:8e:93:
         2d:a5:16:a7:61:3b:06:2c:9f:32:a1:29:71:46:11:f8:89:b7:
         83:fc:4f:18:1a:23:50:f0:09:02:63:55:41:c4:85:2d:62:c4:
         d2:fc:02:38:ed:98:59:e3:63:e0:e0:a6:96:d1:0e:16:60:f8:
         0f:d1:f0:ed:b0:c2:c1:1d:fa:d4:ed:cb:f0:80:16:e4:ed:22:
         3f:87:1f:06:84:da:fd:43:e5:ef:ac:a2:b4:0c:4b:76:b7:1e:
         41:c7:78:d3:44:9d:75:7e:d3:f8:42:ef:c2:86:14:ca:35:47:
         59:40:ee:3d:ff:dd:a9:52:8a:81:aa:3b:73:22:c6:1b:f6:db:
         ff:88:0a:59:d6:ba:84:fb:0d:89:7b:3c:63:8c:81:9c:d9:4c:
         cc:3f:f1:a5:ab:7d:30:db:e9:37:86:65:91:0c:5e:93:db:07:
         ea:cb:9a:5f:25:77:4a:4f:37:a0:91:c6:8d:c2:c9:c4:a0:52:
         02:16:28:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJmMcERHqBO9CoowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
ODYwNWFjZWEtMTBhZC00ZmM3LTk3YWMtNmMzZDM3NjMxODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHSEtes7Ui4v//98OZF5hRBMdb2QzT8A8a2Q
eVdpI5kpjB9CnoEoV9JcFOL04lj4cw28qrgJpjarbd9V+Nq43homzYq3Q9uIK07j
/Ho6FvKfuOPmQSRaS/OWUQsCzrdinMC820wIVjDVfni9WLCvC6CQp+zYH0K8qKti
Sx5Hf8SrZJMMsNZtwmtmVHNiq7Mab4PTytKD7jh6nsr93U8hfLkZdKXAi1VZJMGr
UleamBxQR/TOs3jbCQrZgD0OGi0ivKZ68n61qpW6TXi/AAoKMDFrueF+9UAopWLF
pEqbBaLg5ejpZsukPoXX8uzptKTY3F3bppAdAsYwXBSj0H1deQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUbmeJheqMghcQc4t8b49frgK6CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzViZDZhNjUtZmE5NS0z
ODZkLThmZWYtN2Y4Y2IwOTgxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8eC4KYPUkyvilcdO3vtfbwwYpGHWvZpdNQhLTxLq0SZs4n+JU8BtBj
CgeTseQYaXH6ppB8OKOPoUXT/f6J5Gul3oViS0yOky2lFqdhOwYsnzKhKXFGEfiJ
t4P8TxgaI1DwCQJjVUHEhS1ixNL8AjjtmFnjY+DgppbRDhZg+A/R8O2wwsEd+tTt
y/CAFuTtIj+HHwaE2v1D5e+sorQMS3a3HkHHeNNEnXV+0/hC78KGFMo1R1lA7j3/
3alSioGqO3Mixhv22/+IClnWuoT7DYl7PGOMgZzZTMw/8aWrfTDb6TeGZZEMXpPb
B+rLml8ld0pPN6CRxo3CycSgUgIWKMo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:59 2025 by rpki-client