Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bf7bc71-f62e-3f85-9ef4-268a065c3cd9.roa
File:                     5bf7bc71-f62e-3f85-9ef4-268a065c3cd9.roa (raw, json)
Hash identifier:          pozq0dTwQdKMSZobtVU62xIL/tK/4jRebNoMYOk3OBM=
Subject key identifier:   7C:1D:0A:FB:83:C5:08:62:6B:0A:B7:78:36:83:CD:63:50:DE:B1:18
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C827E9BF12B0074390000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bf7bc71-f62e-3f85-9ef4-268a065c3cd9.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397234
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:82:7e:9b:f1:2b:00:74:39:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=e731571e-d923-4b0b-8207-02a4cd44e661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:11:c8:92:f2:26:c5:9f:98:5b:5e:15:a3:
                    8b:58:10:f7:42:a2:12:8c:3d:2d:1b:50:40:f4:f6:
                    67:2b:78:ff:e1:17:1b:12:75:39:fe:00:d2:00:43:
                    71:9c:02:6a:60:24:35:bc:d8:29:04:d3:17:08:cd:
                    ec:f5:b3:ed:3d:0c:60:e8:7c:61:2c:8f:fe:29:36:
                    dd:51:bb:b2:ba:62:86:2f:e8:d3:85:8d:93:7b:d1:
                    0b:f1:5a:4d:9b:85:47:8d:f5:26:2a:20:c3:74:c5:
                    9f:99:35:8d:20:be:e9:e8:f4:71:df:6b:62:f4:ab:
                    77:89:e3:66:c5:6c:30:1d:d2:aa:4c:d7:52:de:8a:
                    42:fe:ff:8c:b2:6b:95:26:e2:f7:ad:3d:17:95:26:
                    47:18:5e:25:8c:b9:1b:4e:0c:5d:78:5d:1f:b9:2c:
                    99:93:2c:5d:ae:1e:e2:67:a5:98:0c:46:56:a2:ef:
                    71:05:b0:39:e0:ba:f0:02:2e:65:cd:96:40:75:78:
                    2a:3c:a3:d0:6f:9d:6a:74:e0:47:74:00:48:9d:62:
                    d5:e1:2b:7f:49:29:99:b2:ea:04:56:85:99:5b:12:
                    3f:1f:eb:79:6a:b1:e4:b2:2f:21:52:1a:ae:b0:7a:
                    ca:52:f7:43:e8:a2:a2:d2:e5:68:e9:60:6d:ec:ef:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1D:0A:FB:83:C5:08:62:6B:0A:B7:78:36:83:CD:63:50:DE:B1:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bf7bc71-f62e-3f85-9ef4-268a065c3cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:42:9e:b0:22:1d:d7:7b:34:32:16:07:3a:95:cb:69:63:55:
         62:c7:44:1a:d6:ee:06:28:58:c1:71:46:04:51:50:27:86:0c:
         09:70:23:e4:c1:3e:99:29:bc:75:2c:f6:e4:83:4a:98:d0:3c:
         8e:82:c7:6d:98:0d:39:fb:15:4b:e8:3f:b0:fe:3e:7e:b8:a3:
         6a:cd:c2:2a:0b:56:b5:89:79:f1:ba:0e:41:79:58:3e:71:76:
         17:9f:1a:9b:3b:9e:54:9a:a0:d0:b4:94:19:79:2d:b1:55:8a:
         de:01:aa:74:4d:a4:da:8a:60:e4:ce:81:9c:82:5f:f5:91:1f:
         14:f3:86:43:c5:02:62:e1:f6:de:15:c8:c7:56:20:e8:4d:0d:
         54:09:d3:3f:25:3f:21:d7:ba:3a:61:13:69:8b:79:12:3e:49:
         8a:fa:ee:ff:be:24:a1:f7:0f:bb:2e:98:b7:44:0a:8c:c7:19:
         6f:d3:cb:48:e8:dd:34:66:df:fc:2a:6a:1b:71:cb:dd:9e:df:
         bf:56:74:b2:71:05:3f:5c:de:f9:ba:f7:4d:2b:c2:f7:1a:e4:
         15:6a:f8:2b:7f:aa:3d:e7:4f:ca:19:9b:31:22:40:fa:c0:bf:
         40:ff:ac:4c:0c:de:03:f7:da:b1:3f:d5:91:a0:f9:78:c9:73:
         da:b1:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:08 2025 by rpki-client