Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/705d7665-e449-3c01-98c8-80ba54fd20a1.roa
File:                     705d7665-e449-3c01-98c8-80ba54fd20a1.roa (raw, json)
Hash identifier:          PmxD2ole/XGFODaMQc0/EbCZK1B2GJ8QfI3G2qkqcOs=
Subject key identifier:   A7:04:FD:2D:D3:96:D8:21:85:8E:8E:AF:11:16:1C:FD:7E:56:A9:99
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CAC415CEE444FE9548510
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/705d7665-e449-3c01-98c8-80ba54fd20a1.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397222
IP address blocks:        156.154.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:ac:41:5c:ee:44:4f:e9:54:85:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=fcaaac11-606f-4d6b-ae42-3d785460c540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:ba:e1:a0:67:8d:08:35:d2:25:6b:ce:04:
                    ce:cd:2f:ba:05:7b:73:05:12:94:9e:58:29:39:fd:
                    b8:ee:95:4a:5c:b2:c0:13:da:38:a7:fe:0a:49:65:
                    bb:64:7f:c4:f5:d8:72:36:87:2f:c0:e4:cf:92:58:
                    cb:e0:f8:03:e7:4c:f8:4b:97:78:aa:15:62:3b:2b:
                    56:8e:08:87:22:d5:bd:af:e7:e8:58:43:fe:3e:0f:
                    b0:20:73:bc:fb:c0:cd:a3:d2:d9:74:a0:84:d0:fb:
                    13:4f:1d:16:7e:6c:97:ae:77:3d:d5:0e:4e:be:b2:
                    6a:a6:90:18:a6:79:2f:00:44:62:45:fc:8e:30:d6:
                    44:d9:c9:f2:c4:36:04:cc:3d:93:af:aa:2c:7d:21:
                    13:30:42:06:3c:5a:1d:fb:79:f4:dc:c3:eb:86:f7:
                    07:03:40:8d:64:fb:72:9d:1b:31:82:bf:e2:fc:a9:
                    bb:62:fa:24:b0:18:ad:50:a2:c2:e7:fd:48:f7:89:
                    aa:6c:fe:29:78:82:21:a2:9d:48:bb:8e:a2:4d:5e:
                    50:77:59:3e:f3:e5:7a:15:4b:a7:5b:b4:a1:7a:a5:
                    ef:a6:1b:ca:3d:d8:60:bc:7d:22:ef:67:f5:6d:52:
                    d5:45:6f:03:77:4a:45:1f:fd:1b:0f:69:37:0d:4f:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:04:FD:2D:D3:96:D8:21:85:8E:8E:AF:11:16:1C:FD:7E:56:A9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/705d7665-e449-3c01-98c8-80ba54fd20a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3a:9c:b9:48:32:50:ad:74:f9:51:f0:1b:6d:ff:83:78:8e:
         e2:7d:a9:58:de:1e:60:8a:c6:7c:71:c1:4a:95:f3:0f:ba:12:
         1c:07:f5:d9:ea:4e:78:d8:95:88:1b:f4:eb:d9:e0:45:60:b5:
         99:a0:df:5d:9c:dd:6b:94:58:41:25:d1:20:2f:9b:ba:f9:42:
         f0:e3:44:b6:86:f0:67:b8:5d:71:f7:b2:9b:9a:3c:36:94:0b:
         fa:e0:ad:90:d4:ba:39:06:cd:8a:9b:48:85:6b:b3:c3:1b:5f:
         16:ff:a7:fb:32:b5:b6:09:55:01:9a:71:c4:27:ba:51:9d:71:
         39:32:9b:38:ce:27:53:30:81:9a:26:a7:2f:e0:b5:c3:ca:1b:
         4a:34:4e:34:42:3c:98:d6:32:6a:00:70:5b:c6:f6:a2:b6:a0:
         95:b0:19:03:84:e2:15:ab:38:36:a8:b3:51:9f:bc:d7:e7:8a:
         92:36:41:73:08:06:65:78:ca:bd:c8:6b:0d:b8:c7:d4:75:87:
         fd:4c:db:c9:e3:f9:7e:05:b4:ce:73:9b:f5:ea:e4:15:56:ea:
         49:a8:7f:96:09:37:7e:5f:54:9e:7a:ec:3e:a8:b7:7b:f1:f1:
         4e:2d:03:fe:f5:ec:74:44:77:21:23:c0:ee:5b:aa:bd:5d:5d:
         f1:81:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:47:13 2025 by rpki-client