Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f7abc92-5e56-3b92-b4fb-6263ef26b41e.roa
File:                     6f7abc92-5e56-3b92-b4fb-6263ef26b41e.roa (raw, json)
Hash identifier:          MF/wk+RqrkS2GN8hd0uAK9vFGzocVbD9Ezot0aCLnh4=
Subject key identifier:   F8:FF:8D:33:B0:CC:82:BF:29:E5:87:53:C9:94:36:3F:37:CD:06:3A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1FB62E587C473EF4BB190
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f7abc92-5e56-3b92-b4fb-6263ef26b41e.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397220
IP address blocks:        156.154.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:fb:62:e5:87:c4:73:ef:4b:b1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=fe88283a-c39f-4317-8713-598ddff263ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:ec:18:dd:fc:5e:e6:b6:64:cd:09:d5:29:
                    f6:16:84:8e:b3:8f:02:e6:24:af:49:fe:fa:bb:6d:
                    6f:a5:ed:8b:ef:5e:37:7a:05:74:ce:04:7b:c3:b7:
                    a0:41:93:37:23:7a:93:6e:3d:43:ae:a9:a5:df:89:
                    5d:53:ef:3d:67:fa:b6:3a:db:fb:82:2f:0b:55:28:
                    06:4d:84:40:7d:bc:9c:13:9b:8e:1f:a7:ef:a0:ab:
                    ab:61:fb:3e:4c:a4:23:94:e1:c3:f2:da:44:26:23:
                    9f:bf:3e:78:de:86:07:b5:6f:0e:75:8a:74:9c:ec:
                    76:00:68:6b:54:7f:be:92:33:b2:e8:c1:49:c1:bf:
                    62:10:f9:7c:42:bf:02:f6:6b:f4:7f:d5:00:92:b1:
                    02:91:5e:7d:8b:f3:15:07:95:f5:b8:f7:e6:74:b1:
                    5d:51:58:67:15:cc:aa:4a:9e:39:7e:6a:29:34:3c:
                    83:45:01:32:0c:96:36:d8:e9:db:42:69:d2:31:f1:
                    f4:5e:20:fd:6a:56:f1:ac:0f:47:d7:be:2c:45:4e:
                    b3:4c:db:ec:79:7e:99:e2:ba:a9:fa:39:da:6f:f6:
                    2d:d8:e8:de:65:9e:87:2d:ed:53:76:ec:8f:5f:55:
                    92:d3:46:ed:9b:3c:e0:8e:63:dc:2a:2d:13:27:4d:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FF:8D:33:B0:CC:82:BF:29:E5:87:53:C9:94:36:3F:37:CD:06:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f7abc92-5e56-3b92-b4fb-6263ef26b41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:1c:9e:64:84:b4:9c:69:a8:64:e0:02:1e:4b:95:a4:3b:
         e0:3c:0d:c2:69:00:40:eb:ad:7d:41:5b:34:21:5e:e9:3f:7d:
         a5:25:8c:89:c6:82:b9:c0:b3:80:08:75:80:c2:53:81:25:85:
         05:34:ec:c6:58:39:fa:8c:05:2a:08:3e:4b:ac:7d:e9:7e:cf:
         af:fc:20:92:03:8d:e5:a1:12:47:e2:ea:de:fb:86:07:04:82:
         58:f9:3f:d1:97:b5:e1:6d:83:09:58:a0:94:21:d3:7b:da:54:
         f6:ac:f3:44:81:07:87:b1:36:3d:e7:d4:7e:37:eb:23:43:96:
         20:77:62:4b:95:11:ef:6b:8c:ea:c1:24:e2:f8:c2:a7:20:dc:
         8c:89:68:44:69:15:8d:a8:ee:d3:c3:2e:1f:97:fa:d1:81:2f:
         51:50:d0:fc:de:8c:af:67:cd:c0:51:74:d3:bb:76:43:a7:d5:
         a4:ab:9c:80:89:19:ad:cc:e3:aa:b8:dd:4f:f3:7e:c5:2e:ec:
         00:58:97:82:2f:a5:34:92:27:a3:1c:75:3e:ff:a6:35:b5:f0:
         f9:e6:65:b4:9c:26:3e:16:2f:8f:4c:36:c9:ab:c3:92:24:f9:
         82:b8:91:83:38:b7:ec:38:66:27:4e:a2:7d:25:c1:ab:d9:64:
         12:6a:ea:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:52 2025 by rpki-client