Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48915206-38c7-3105-b425-ed54273627a3.roa
File:                     48915206-38c7-3105-b425-ed54273627a3.roa (raw, json)
Hash identifier:          9eIZgwl3RuZ8kyRGwlFSvy1Vhe2vWyeWJPaJ1kNl7cg=
Subject key identifier:   7B:57:B8:51:A5:4F:AB:50:D3:81:A2:31:22:46:6F:1F:93:3E:BA:4E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BFA75BD5CDE56DDE24140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48915206-38c7-3105-b425-ed54273627a3.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397221
IP address blocks:        156.154.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:fa:75:bd:5c:de:56:dd:e2:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f8de08f2-7180-4ea0-aa68-fbac810cbd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:8e:0c:82:6f:53:58:db:fa:00:e4:26:95:
                    28:16:3b:25:e6:4c:d8:c8:02:0f:ca:72:47:50:fd:
                    21:70:d0:f3:d2:fe:fb:2d:f9:40:69:46:2b:1f:75:
                    6a:d5:7a:99:8e:40:f2:07:89:14:27:24:ba:30:d0:
                    64:f0:72:7e:25:19:e6:4e:fc:aa:01:00:54:83:2b:
                    79:d3:55:e9:96:b9:73:c7:32:c9:aa:e4:1a:44:8c:
                    55:51:b2:8f:2d:c3:ae:ba:4a:a9:54:4c:6b:dc:df:
                    f0:78:46:5b:ce:2a:51:75:78:60:6b:15:a3:04:39:
                    b1:57:38:8f:c6:3f:a8:2b:ad:bc:01:6a:b5:93:4f:
                    52:8f:81:c1:b1:fd:02:8c:63:40:1e:85:b9:6d:0f:
                    a4:15:4d:ca:38:c8:81:25:b2:01:de:a5:bd:02:c4:
                    fe:c5:62:38:ee:de:1d:41:b0:e2:6c:02:b4:c1:8c:
                    fe:08:43:76:18:cf:57:4c:7b:57:87:41:7f:db:b0:
                    f5:cd:f1:71:3d:ca:1c:b4:4c:f6:f4:3a:7c:c6:07:
                    c6:66:54:69:ec:31:69:3c:e6:96:50:a0:a2:67:f1:
                    f0:65:ce:1b:88:a9:e6:51:8e:6b:27:c9:b1:94:cb:
                    75:a6:49:69:f3:1f:27:aa:56:63:d6:ae:f4:1b:0f:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:57:B8:51:A5:4F:AB:50:D3:81:A2:31:22:46:6F:1F:93:3E:BA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/48915206-38c7-3105-b425-ed54273627a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:94:a7:6a:c3:6e:96:85:d0:2c:39:a2:f6:28:ae:69:2d:d5:
         6c:35:9c:5f:a2:20:c2:20:3c:26:18:a4:5a:fc:b8:15:fb:8e:
         19:8a:13:1a:24:7d:29:59:88:5b:a8:40:ed:f1:c2:88:62:59:
         62:4a:b7:c1:59:37:0a:7e:e3:63:1f:54:8c:6c:97:ca:27:58:
         a2:1e:a8:ec:88:e9:86:d9:45:11:1d:e6:5e:c4:2f:14:7a:e0:
         65:52:e5:5e:17:4f:8a:24:7d:bc:c7:bb:6d:ee:c1:4b:9f:05:
         e4:c9:f7:aa:27:a9:e2:d0:21:98:30:49:88:aa:c6:a0:be:fa:
         4e:d1:f9:cd:58:81:6c:93:f0:33:9d:1d:ea:10:53:97:67:ba:
         e6:5a:c9:77:81:70:09:f6:cc:e5:ee:97:25:16:e2:20:80:44:
         00:0e:64:82:a6:6d:51:ef:d1:a6:61:48:e6:a0:bd:8f:c4:f4:
         78:3c:81:13:2e:f1:d5:4b:7b:50:bb:77:cf:ff:98:71:13:2c:
         28:26:fa:db:ae:df:5f:aa:eb:fb:64:db:a0:a6:a0:52:d1:3e:
         90:2e:5f:97:1e:c4:28:94:99:7d:02:27:d7:d0:99:06:8c:0a:
         32:a3:72:15:53:fa:e6:22:b9:6f:e9:10:c4:6d:0d:db:72:33:
         c7:fe:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:18 2025 by rpki-client