Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67e2d9b9-2d89-3b5b-83b9-502d50dcde40.roa
File:                     67e2d9b9-2d89-3b5b-83b9-502d50dcde40.roa (raw, json)
Hash identifier:          QhF4AU6tdr+lC3yKIFjgJQJ+4Ea1Tl8gSUv7xXSqoIk=
Subject key identifier:   4A:E9:AE:64:23:D6:52:2E:C1:22:CF:C9:BA:BE:4C:DE:BB:A4:1E:D6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AECC4BDB20849212DF8E0B780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67e2d9b9-2d89-3b5b-83b9-502d50dcde40.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     399169
IP address blocks:        156.154.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:bd:b2:08:49:21:2d:f8:e0:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=35e28e51-393d-40dc-a7bf-31f3ada0c23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:3f:4d:7b:4b:42:2f:ac:67:3a:29:fe:c4:
                    5b:f1:b4:78:46:b7:11:3c:c8:0c:8d:9e:e8:34:d8:
                    84:36:45:0b:89:b6:b4:24:e1:94:c8:7e:3c:bf:d9:
                    93:4e:12:15:8c:04:a3:48:02:40:3f:88:b0:1f:cd:
                    75:69:12:ef:03:69:53:6f:9b:33:d3:0f:37:c3:ab:
                    8f:01:44:54:0d:5b:b9:ef:e0:ca:73:8a:de:34:f1:
                    1f:91:81:ec:34:0a:74:83:49:1c:ad:b9:a8:2b:28:
                    5e:ea:54:da:17:63:c4:f2:3e:4f:b1:3e:00:d1:dc:
                    71:40:ba:ae:9a:78:2c:f8:3f:0a:4c:07:af:43:04:
                    e5:54:6f:a1:66:c1:3a:b3:23:ce:d2:72:5e:12:18:
                    46:89:3c:7f:f3:83:68:07:40:90:a2:76:97:8a:bb:
                    bb:bc:73:5a:01:50:e8:b9:db:80:c3:95:47:b0:f9:
                    a0:5a:7e:7c:dd:d9:ba:4a:ed:ee:b7:59:d0:7c:a4:
                    1d:64:10:4b:d0:75:78:6a:0f:6b:b3:59:ed:15:66:
                    f0:3b:c7:79:97:c9:99:64:18:0a:59:cb:12:bf:67:
                    e6:ad:84:54:90:50:e9:ab:92:0a:8c:6d:05:41:77:
                    f3:07:6c:e7:0f:01:5f:f6:a6:3a:ad:19:2c:a0:31:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E9:AE:64:23:D6:52:2E:C1:22:CF:C9:BA:BE:4C:DE:BB:A4:1E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67e2d9b9-2d89-3b5b-83b9-502d50dcde40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:01:c5:dd:97:60:02:7d:92:10:b8:71:f9:f0:47:e6:ad:
         58:72:d3:95:f3:a6:34:d9:43:6c:20:c7:ec:a4:54:21:69:86:
         be:1a:b6:4e:5a:99:a5:d9:12:b1:49:1f:f3:21:d8:08:72:ce:
         cb:5c:cc:93:6a:11:0e:77:1a:44:1a:78:21:eb:6e:07:00:31:
         94:d3:6f:2b:99:cb:14:13:f0:09:b1:43:01:86:09:f4:e7:a7:
         3a:0e:94:ed:40:db:27:b1:2f:e1:0b:96:fb:ef:38:6c:4d:ce:
         57:9d:e5:db:c4:74:f3:d4:62:be:f6:be:c3:38:6c:95:01:ca:
         f1:84:4d:6e:55:1c:b8:5d:dc:fa:8f:f2:17:46:2a:16:0e:18:
         3f:92:88:ce:0b:c7:8f:7a:21:b7:70:af:6f:5d:ab:d0:74:50:
         73:bf:e9:f9:23:2a:f7:5e:98:99:89:b3:b2:ba:c9:cd:e7:c0:
         c3:4e:f9:46:34:a6:15:50:8c:d3:9b:9f:3b:ef:28:11:ca:5d:
         bb:ea:1f:8d:a7:03:9b:b6:ab:c1:6b:af:e7:e2:13:b4:8c:90:
         fb:29:b2:79:b7:43:a4:d9:3f:57:ab:9f:a3:26:32:dc:5e:09:
         8c:99:1f:98:d4:08:5f:5b:c1:f6:a3:40:4f:14:8d:57:d4:1c:
         e5:f4:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:34:13 2025 by rpki-client