Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43be01e0-085b-3771-bf34-d375c183f7ae.roa
File:                     43be01e0-085b-3771-bf34-d375c183f7ae.roa (raw, json)
Hash identifier:          CQybySGzqMAXtAIw7YKl8UivxQBR5wgicysGvIEXSUE=
Subject key identifier:   0A:E9:33:BD:D2:83:B1:71:24:CD:CA:66:15:3E:6A:D8:58:E6:B0:EF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1E9AAA2F8C4215BD08600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43be01e0-085b-3771-bf34-d375c183f7ae.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397222
IP address blocks:        156.154.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:e9:aa:a2:f8:c4:21:5b:d0:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=cb72a15a-8f89-4312-8ea8-8da19a4158c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:62:04:c9:51:8f:29:63:66:a2:fc:95:85:
                    3f:36:a5:81:a0:91:cf:ad:47:cb:db:0b:9d:5d:0c:
                    f8:67:a8:64:12:06:19:65:99:46:4c:83:ac:e4:3f:
                    3b:62:21:c4:d8:d3:27:fe:ce:a0:15:e4:ed:7e:05:
                    7e:7c:3e:40:77:c8:65:5b:41:f6:c0:e9:dd:3f:05:
                    49:4a:0d:c3:4d:9b:80:d0:9b:23:7e:dc:b4:a2:5b:
                    d4:2a:23:a9:cd:07:9e:0b:87:fe:72:00:71:83:56:
                    5a:55:60:4a:d3:95:18:51:bd:7f:6c:fa:fd:df:e3:
                    51:5d:a2:92:cd:a5:30:9e:8f:f9:2e:8c:4a:a9:bc:
                    bc:2e:76:25:f1:ba:a4:8c:1e:6a:2b:54:e0:81:98:
                    e4:a2:06:f9:ee:b6:e7:62:b2:e0:63:c5:9b:9c:97:
                    08:dc:92:bb:c1:36:98:fd:bb:c4:70:c1:6d:26:b6:
                    c1:92:44:93:39:c1:42:36:7c:5b:a3:82:8b:f3:94:
                    7e:98:fe:fe:aa:cd:a5:72:93:89:1c:36:e1:8c:38:
                    25:10:35:d4:7d:d1:13:ed:99:6a:75:32:ca:0a:5a:
                    ee:2a:6b:bb:f2:8a:fa:ec:f5:a6:17:a8:e7:1b:c8:
                    6d:f3:16:cd:a9:02:c4:6a:4b:c9:ea:7d:f8:eb:ad:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E9:33:BD:D2:83:B1:71:24:CD:CA:66:15:3E:6A:D8:58:E6:B0:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43be01e0-085b-3771-bf34-d375c183f7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:af:c9:b8:d8:32:d2:3c:e3:02:ae:56:45:06:8d:8d:80:
         dc:61:fd:c2:2d:76:44:9b:6c:af:39:fd:be:bc:31:f1:60:be:
         06:0e:15:e4:63:ae:c0:22:0f:91:f5:db:e7:1c:5f:31:a4:2a:
         d9:b0:b7:22:e8:00:d5:42:a6:3a:7d:6f:72:b6:46:46:4a:7d:
         a6:3c:7d:f7:c8:37:df:1e:61:23:b0:6b:69:a5:67:24:0f:66:
         d7:1f:52:0f:48:7c:90:1e:b8:de:b6:bf:45:ca:26:68:da:8c:
         ae:a4:c3:2e:27:39:e2:73:f6:9d:32:de:39:43:f0:13:0c:77:
         54:83:a9:55:09:7b:8e:16:ea:28:ba:f8:0f:03:46:b5:bc:0f:
         33:19:07:60:48:f7:9b:89:b1:bb:a8:e2:4e:6f:b9:45:c1:32:
         d2:fe:f1:18:e6:5c:f7:4c:9b:54:5e:52:d1:a9:49:5d:87:89:
         9a:5b:03:20:be:c6:0c:8d:ad:3e:93:56:46:48:4d:5a:a9:4b:
         55:fc:23:b5:c1:73:b5:9c:b8:b2:73:4b:76:4d:cd:aa:38:aa:
         7d:21:0d:9b:bd:24:05:04:4e:4a:e3:3f:a1:9a:c5:a0:89:63:
         a1:a2:28:cd:cb:36:c2:0e:44:66:10:0a:20:c1:85:ab:75:e7:
         a8:69:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:46 2025 by rpki-client