Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7121b63d-f5e9-323a-bbe6-1b05ec1bf6b0.roa
File:                     7121b63d-f5e9-323a-bbe6-1b05ec1bf6b0.roa (raw, json)
Hash identifier:          zyMqbg0778EYB4AfOT+0LMs8JGtvZ9lNHRTmH1mqh5U=
Subject key identifier:   6B:F7:69:8C:56:53:24:58:15:9E:1A:35:2B:E5:3C:63:E3:69:2D:D2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1F9643CED4BD83AF03480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7121b63d-f5e9-323a-bbe6-1b05ec1bf6b0.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397224
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:f9:64:3c:ed:4b:d8:3a:f0:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=d9ce5f89-adf6-40b8-bc8e-aef146281827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fe:6c:a0:65:d0:4f:ce:cc:b1:0e:d3:e5:a6:
                    94:f6:4f:a5:7c:cb:d4:e0:48:55:cb:f4:ad:71:de:
                    8a:27:f8:3c:b4:34:f4:29:ae:3a:4c:42:6d:86:fe:
                    b9:d0:8b:ff:50:90:0e:e7:f6:60:f0:69:a0:bc:b6:
                    fc:9a:ff:72:37:88:ca:1d:6f:56:33:be:6d:62:9e:
                    aa:cc:65:21:c8:a3:6c:dd:ac:c4:1f:88:98:a1:7a:
                    36:07:75:8e:97:ef:57:23:68:2b:1d:56:6a:22:a0:
                    02:a3:42:b9:a5:6d:78:f8:dd:35:93:18:52:5d:ae:
                    e9:2d:d7:ea:d6:f5:31:3f:b8:3d:f4:0c:4e:5f:90:
                    1a:6f:aa:e4:2a:b3:63:ce:f1:75:cf:db:c7:4a:13:
                    cf:6a:fd:e5:b9:ca:72:a3:11:91:3c:30:39:eb:44:
                    3a:a2:5b:ce:84:55:4b:5c:f0:8e:c4:d1:5f:59:98:
                    24:ba:c1:a1:59:f3:66:0e:51:d6:78:39:f8:37:ed:
                    00:71:d7:c8:e1:ff:bb:7a:54:ab:d0:ab:11:cf:b3:
                    f7:ab:05:3b:1b:b9:86:1f:7c:51:e8:8c:86:6e:93:
                    a3:4c:54:1f:61:26:ef:b6:66:78:00:cf:86:69:5d:
                    63:67:3f:ea:91:84:03:03:87:9c:e3:3f:a0:cc:d7:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F7:69:8C:56:53:24:58:15:9E:1A:35:2B:E5:3C:63:E3:69:2D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7121b63d-f5e9-323a-bbe6-1b05ec1bf6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:36:8a:d5:dc:33:5d:54:fa:5e:c7:04:cd:7f:1c:3d:49:2f:
         62:b5:b0:20:99:9b:5a:33:81:d9:53:5d:5a:44:76:5c:b8:5d:
         69:f8:f6:c0:4f:eb:af:78:f2:b5:a1:af:1b:a8:cf:e8:15:17:
         e7:ae:d2:4c:dd:93:46:25:03:15:e5:5b:94:23:40:4c:04:d3:
         17:b4:49:96:7d:8a:d0:6e:d2:38:87:8f:f2:a8:2c:30:4a:fc:
         03:08:a5:e2:dc:69:06:3a:bb:04:f9:0d:45:19:58:ad:13:e5:
         5e:8f:60:ee:cd:5a:6f:d5:a4:dd:c1:0d:ff:a2:43:ef:e4:a3:
         34:15:73:e6:13:ac:08:b2:05:46:8d:47:07:a7:1a:61:9a:a9:
         a7:8e:aa:dc:20:c4:20:15:83:12:bf:5e:27:1a:c2:f6:96:63:
         31:54:d7:59:21:9e:fe:d0:3e:34:95:bf:5f:4a:ba:22:a0:4e:
         78:68:ac:84:9b:80:ff:ae:ac:a0:70:5b:9a:d6:bd:1d:07:b2:
         1c:d9:7a:08:48:f6:9f:8f:a4:a0:e9:40:2c:1b:20:97:a3:25:
         fc:d2:88:8e:23:8c:f3:08:03:17:cf:09:e9:e5:c5:cb:40:14:
         5b:0f:4c:7c:71:0e:74:9d:0e:a3:5c:6a:39:41:8b:1d:fb:26:
         a5:08:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:42 2025 by rpki-client