Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3859c2b9-9ebd-3c86-88b7-3cb3ed03dba0.roa
File:                     3859c2b9-9ebd-3c86-88b7-3cb3ed03dba0.roa (raw, json)
Hash identifier:          sSLEUBY/sbEllcW5Z7ETCS5NvdHmexVD3iHccAb19bY=
Subject key identifier:   6A:D5:AF:3C:14:ED:B5:6E:D6:A4:24:BD:42:0B:DF:0E:9E:59:A2:0A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CA999957F9EAB83608C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3859c2b9-9ebd-3c86-88b7-3cb3ed03dba0.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397215
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:a9:99:95:7f:9e:ab:83:60:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=723c3fcd-4903-4b79-b78a-b40e128183d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:7a:2a:72:6d:7a:3f:87:4a:fc:aa:1f:8b:
                    21:b0:e2:9d:9e:df:5b:34:43:37:d4:c6:36:8d:d5:
                    c9:fd:64:c5:5c:b8:b4:b0:a2:80:8c:e0:ee:1c:11:
                    c4:5f:72:aa:a9:df:9a:b1:4a:ea:52:59:95:c2:5f:
                    cf:3e:fb:fd:62:54:7c:11:c5:47:4f:c4:85:41:e1:
                    e4:05:ec:5f:25:1f:14:b0:d4:f3:98:75:80:a2:52:
                    aa:5b:f9:cb:64:7f:4a:4c:44:47:ee:55:32:32:74:
                    df:e4:a2:01:76:a0:b5:29:c0:39:0f:58:67:ff:fe:
                    65:ae:7c:a4:82:92:01:ab:38:0f:9c:cb:42:01:41:
                    34:44:95:7a:6f:70:8d:83:08:48:df:ba:0e:7a:d0:
                    35:c6:1d:de:eb:cc:41:f1:75:7c:1f:75:bf:93:87:
                    45:50:d9:b4:13:b0:8c:ba:c8:22:51:37:49:74:c7:
                    5c:2d:62:f1:4c:1a:37:8f:ac:65:d4:46:81:28:81:
                    76:ad:02:1f:01:64:ab:80:a5:41:27:d8:65:d6:7b:
                    cc:e2:14:14:b8:c6:c7:85:38:7d:55:00:ae:20:fe:
                    61:99:85:e8:7d:71:7d:d5:53:0f:54:00:c7:26:68:
                    2b:cc:3b:ed:9a:22:c1:6f:aa:e8:2f:61:32:a5:14:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D5:AF:3C:14:ED:B5:6E:D6:A4:24:BD:42:0B:DF:0E:9E:59:A2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3859c2b9-9ebd-3c86-88b7-3cb3ed03dba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4b:29:fa:37:0c:bc:2f:29:e5:69:0f:8f:87:ff:90:31:a7:
         d9:47:2f:ff:37:d3:16:c1:fb:e0:83:5e:08:35:00:39:f6:e1:
         cc:99:7d:2e:9a:ef:60:12:ce:77:02:6b:86:63:17:ae:c0:6e:
         c9:f1:23:9b:d4:91:4d:de:09:5b:ac:7b:7b:de:b4:c2:fe:29:
         63:4e:6b:9d:09:51:19:ce:90:25:5c:e1:9b:33:05:05:6b:d7:
         21:12:df:22:29:3d:a7:65:1b:e6:dd:7e:1b:b2:3a:91:24:f9:
         8f:61:53:e4:7d:6c:54:e8:c9:31:a1:38:5d:db:a6:27:b6:d1:
         aa:04:42:b9:12:3b:98:d8:f8:cc:25:4b:de:8c:76:26:0c:ad:
         7d:be:a2:05:f1:4a:14:fa:f7:84:e0:d5:56:2a:bc:37:e6:50:
         d5:a3:b5:22:30:be:4d:9e:19:90:0a:4a:7a:9d:7c:5c:37:a1:
         ad:9a:6f:37:b5:3a:e7:55:22:83:21:0a:b3:c9:98:a9:4c:f2:
         49:83:07:db:91:cc:56:79:80:a7:94:33:4a:4a:60:15:1a:13:
         7c:8e:ef:c4:b1:ad:b5:63:41:3f:c8:ab:f6:61:df:5e:d0:d1:
         05:1c:5d:99:54:b0:e4:a9:b5:af:f4:75:b4:51:a6:a3:bd:46:
         dd:07:f2:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKmZlX+eq4NgjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
NzIzYzNmY2QtNDkwMy00Yjc5LWI3OGEtYjQwZTEyODE4M2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDp6KnJtej+HSvyqH4shsOKdnt9bNEM31MY2
jdXJ/WTFXLi0sKKAjODuHBHEX3Kqqd+asUrqUlmVwl/PPvv9YlR8EcVHT8SFQeHk
BexfJR8UsNTzmHWAolKqW/nLZH9KTERH7lUyMnTf5KIBdqC1KcA5D1hn//5lrnyk
gpIBqzgPnMtCAUE0RJV6b3CNgwhI37oOetA1xh3e68xB8XV8H3W/k4dFUNm0E7CM
usgiUTdJdMdcLWLxTBo3j6xl1EaBKIF2rQIfAWSrgKVBJ9hl1nvM4hQUuMbHhTh9
VQCuIP5hmYXofXF91VMPVADHJmgrzDvtmiLBb6roL2EypRScmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrVrzwU7bVu1qQkvUIL3w6eWaIKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzg1OWMyYjktOWViZC0z
Yzg2LTg4YjctM2NiM2VkMDNkYmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdLKfo3DLwvKeVpD4+H/5Axp9lHL/830xbB++CDXgg1ADn24cyZfS6a
72ASzncCa4ZjF67AbsnxI5vUkU3eCVuse3vetML+KWNOa50JURnOkCVc4ZszBQVr
1yES3yIpPadlG+bdfhuyOpEk+Y9hU+R9bFToyTGhOF3bpie20aoEQrkSO5jY+Mwl
S96MdiYMrX2+ogXxShT694Tg1VYqvDfmUNWjtSIwvk2eGZAKSnqdfFw3oa2abze1
OudVIoMhCrPJmKlM8kmDB9uRzFZ5gKeUM0pKYBUaE3yO78SxrbVjQT/Iq/Zh317Q
0QUcXZlUsOSpta/0dbRRpqO9Rt0H8s4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:26 2025 by rpki-client