Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7189b036-4d56-301d-8a47-66b63252b690.roa
File:                     7189b036-4d56-301d-8a47-66b63252b690.roa (raw, json)
Hash identifier:          5gE+UiFwdQFkSwR/1ZBG2PEcZuqwfJRAr8NugfNqtqM=
Subject key identifier:   04:2B:8E:A8:94:1F:E2:7F:4A:2D:C0:EC:B8:9E:86:87:53:FC:BD:2F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C82E73B16962570FD2A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7189b036-4d56-301d-8a47-66b63252b690.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397240
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:82:e7:3b:16:96:25:70:fd:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=0e052d4b-e554-42ea-ada1-bc98bb8619fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:48:81:d8:69:74:9f:3e:b9:6d:e9:fa:3c:
                    57:92:96:68:94:6f:74:98:4b:9e:fc:a0:62:ff:c8:
                    61:cd:72:6f:a5:e0:57:d0:16:41:ab:11:d1:aa:93:
                    36:99:aa:4e:d8:35:0b:ca:11:ef:b3:dd:99:b9:6b:
                    4f:17:10:b4:46:f0:ec:8e:ef:57:4a:ad:d4:93:52:
                    49:22:d9:2d:e0:f0:89:09:86:7e:93:fd:ea:20:65:
                    85:ff:09:01:de:b3:77:63:03:4e:26:a2:a3:e4:f8:
                    d0:17:f8:07:a8:23:6e:3b:93:0b:9a:20:37:29:a7:
                    e8:98:ef:da:8b:a3:12:2e:87:1e:24:fb:a3:cc:20:
                    e0:31:21:18:1c:49:10:4b:af:18:a4:bb:bd:6a:59:
                    36:6b:0f:16:8a:e6:53:be:35:6e:c1:ce:2c:d7:f2:
                    e3:ad:98:a2:e4:04:00:60:ee:37:ef:97:d1:30:d9:
                    6f:60:8f:16:f4:1e:bc:3a:be:d7:4a:14:9e:11:3f:
                    16:6c:ea:d2:81:a9:88:a1:fc:73:33:e9:7e:fa:ef:
                    15:4e:99:71:12:ab:b8:4d:41:62:df:5a:a2:ee:05:
                    fc:da:d1:96:87:6d:d6:7d:42:cc:53:e7:23:f8:d1:
                    84:33:92:09:fc:0e:c2:9f:cb:26:09:71:26:33:b0:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2B:8E:A8:94:1F:E2:7F:4A:2D:C0:EC:B8:9E:86:87:53:FC:BD:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7189b036-4d56-301d-8a47-66b63252b690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e1:37:8b:cf:b5:51:a5:3a:61:7f:9a:3b:07:98:51:b1:3a:
         a5:2a:ab:48:08:03:69:90:17:76:e7:bf:a5:27:db:b8:fa:75:
         28:5d:a9:16:2e:51:cd:2a:09:d4:1e:cd:b9:7e:45:37:b1:5b:
         32:07:e7:81:7b:b4:e1:5e:b4:4d:00:e7:4d:c7:da:31:7b:82:
         51:64:59:b3:64:22:d1:d5:98:2f:bb:34:b4:14:57:e7:4f:aa:
         26:83:89:6c:4e:ad:28:03:c2:1b:67:f8:a9:13:f8:1c:77:ad:
         c1:17:86:18:17:9e:c3:0c:3f:6a:91:a5:16:27:e3:09:f1:78:
         01:5c:d8:f0:be:f1:9c:5e:17:d2:e9:67:d5:14:1b:d4:2b:f1:
         66:5e:ac:bf:01:b8:f5:48:2f:30:95:aa:4a:0d:11:98:15:11:
         c4:b0:a6:1d:94:79:88:7f:eb:42:0c:03:90:cd:3c:71:34:08:
         61:18:81:db:36:55:b1:ce:8d:f3:5c:4b:3b:ab:8c:55:d1:54:
         7b:20:c0:2b:6f:7b:86:86:c5:67:98:fe:a6:a9:5c:eb:71:dd:
         53:65:75:b1:11:53:ca:53:30:61:80:4a:db:bb:44:00:12:a7:
         56:c8:7e:00:e6:c7:1c:70:27:96:5a:cc:42:64:ee:60:25:7a:
         65:da:51:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbILnOxaWJXD9KoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
MGUwNTJkNGItZTU1NC00MmVhLWFkYTEtYmM5OGJiODYxOWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYNIgdhpdJ8+uW3p+jxXkpZolG90mEue/KBi
/8hhzXJvpeBX0BZBqxHRqpM2mapO2DULyhHvs92ZuWtPFxC0RvDsju9XSq3Uk1JJ
Itkt4PCJCYZ+k/3qIGWF/wkB3rN3YwNOJqKj5PjQF/gHqCNuO5MLmiA3KafomO/a
i6MSLoceJPujzCDgMSEYHEkQS68YpLu9alk2aw8WiuZTvjVuwc4s1/LjrZii5AQA
YO4375fRMNlvYI8W9B68Or7XShSeET8WbOrSgamIofxzM+l++u8VTplxEqu4TUFi
31qi7gX82tGWh23WfULMU+cj+NGEM5IJ/A7Cn8smCXEmM7A4eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQrjqiUH+J/Si3A7LiehodT/L0vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzE4OWIwMzYtNGQ1Ni0z
MDFkLThhNDctNjZiNjMyNTJiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvhN4vPtVGlOmF/mjsHmFGxOqUqq0gIA2mQF3bnv6Un27j6dShdqRYu
Uc0qCdQezbl+RTexWzIH54F7tOFetE0A503H2jF7glFkWbNkItHVmC+7NLQUV+dP
qiaDiWxOrSgDwhtn+KkT+Bx3rcEXhhgXnsMMP2qRpRYn4wnxeAFc2PC+8ZxeF9Lp
Z9UUG9Qr8WZerL8BuPVILzCVqkoNEZgVEcSwph2UeYh/60IMA5DNPHE0CGEYgds2
VbHOjfNcSzurjFXRVHsgwCtve4aGxWeY/qapXOtx3VNldbERU8pTMGGAStu7RAAS
p1bIfgDmxxxwJ5ZazEJk7mAlemXaUUw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:46 2025 by rpki-client