Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7616176a-f296-33d3-b433-21e0d7d87117.roa
File:                     7616176a-f296-33d3-b433-21e0d7d87117.roa (raw, json)
Hash identifier:          SdbN97rA2Zrya+2LLmOND2tXQ1PBxxOKAc7qPdesshg=
Subject key identifier:   5F:86:09:87:17:D1:76:A2:FB:76:38:0D:15:07:C3:2D:75:A4:86:68
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BF1812F32431AAA7181A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7616176a-f296-33d3-b433-21e0d7d87117.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397226
IP address blocks:        156.154.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:f1:81:2f:32:43:1a:aa:71:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=b439e505-1ee3-448b-9116-5d8c156deac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:d3:01:4d:12:01:18:7d:4a:0c:10:e0:5a:
                    65:3a:f6:18:f0:a8:05:f1:59:2d:45:34:89:49:c1:
                    46:d3:44:76:58:49:b5:86:b7:63:5e:f8:15:c9:01:
                    04:14:24:c1:c6:ff:3d:e8:8e:7a:60:f9:a5:bb:63:
                    cb:db:a9:d4:34:0d:2b:01:63:bc:19:be:bb:dc:11:
                    2c:bf:df:f2:03:91:dd:b1:18:f5:86:e2:ed:6b:47:
                    1c:d2:60:4c:b0:ed:53:92:b8:76:a1:c8:cc:5a:8f:
                    58:d8:7a:74:dc:d1:8c:62:2d:fb:b7:d0:95:e3:07:
                    f0:78:26:00:61:86:1d:69:bb:d8:52:8f:a8:d4:ee:
                    14:87:33:eb:e7:45:7d:51:63:4d:94:67:d0:81:47:
                    15:11:9b:f5:bd:9c:d5:ad:d1:7e:46:b6:b2:98:71:
                    04:d3:f9:60:50:39:35:2b:ec:fd:e3:23:2f:d4:3b:
                    c4:b3:39:cc:e6:50:b5:41:96:3c:3e:e8:a2:14:84:
                    e7:c7:a0:b5:95:aa:8b:74:68:09:1b:8c:e1:0d:d1:
                    00:89:d2:95:0e:c8:f7:62:ed:0a:a8:57:27:65:c6:
                    55:a4:16:c9:0e:c3:0f:69:9a:ae:4c:f0:db:af:02:
                    8f:be:5c:bd:5d:be:8a:b7:21:ef:2d:f9:56:26:47:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:86:09:87:17:D1:76:A2:FB:76:38:0D:15:07:C3:2D:75:A4:86:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7616176a-f296-33d3-b433-21e0d7d87117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:d6:c6:b6:62:94:68:b6:9e:27:5f:76:07:08:5e:43:91:
         41:c0:50:aa:63:21:f3:7f:40:f5:ff:25:1a:88:4b:1d:b8:42:
         df:67:19:05:c9:47:62:82:45:06:af:1d:58:27:56:34:09:cc:
         6c:65:3a:67:2f:c8:52:49:c1:ce:e2:35:40:54:ba:77:75:b9:
         ee:eb:49:bb:02:43:cf:34:84:f7:55:a2:0d:b4:29:46:3a:a4:
         7e:01:f1:6e:61:93:7a:0d:15:e6:85:c7:0c:01:c1:db:c5:52:
         97:a6:81:de:93:8e:33:c5:22:12:38:1f:78:b7:29:5b:ce:71:
         79:30:74:91:27:52:17:a6:66:06:a9:74:64:f4:65:a9:84:05:
         f3:13:9e:0f:84:57:88:31:a3:40:5e:46:ff:84:99:01:02:16:
         05:f2:bb:de:86:76:aa:a0:0d:6b:94:9e:d4:fc:a1:00:e3:4a:
         3b:4d:d1:7d:de:75:74:b4:5e:c4:39:2a:92:0c:8a:c5:19:76:
         04:02:7e:bf:42:c6:94:4a:69:32:75:0b:04:94:e8:17:98:3d:
         79:96:f2:fe:63:c3:96:10:9e:18:cb:18:c5:b5:8c:67:06:c1:
         fc:d5:13:a4:95:b0:08:ba:8c:08:aa:32:2b:d5:c7:5f:13:98:
         bd:99:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:22 2025 by rpki-client