Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cc63738-3600-3e12-8631-4d0fa3845ad8.roa
File:                     7cc63738-3600-3e12-8631-4d0fa3845ad8.roa (raw, json)
Hash identifier:          qImU6YguqaqtoyOzvsl46i1jzJ7yGwbhjAfMTE0wAKs=
Subject key identifier:   44:B4:4D:2B:8D:5E:D8:CE:6F:7C:B4:CC:3A:CD:6F:4E:96:78:08:9B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C976EEE91D400B5EC4F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cc63738-3600-3e12-8631-4d0fa3845ad8.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397222
IP address blocks:        156.154.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:97:6e:ee:91:d4:00:b5:ec:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=b1d558fe-141f-4e2b-b014-4d60a7bb9d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:2e:b2:48:59:e3:72:07:f6:ad:f5:3e:7f:
                    ba:6c:00:2c:bd:73:da:51:91:c5:06:01:da:74:32:
                    de:d4:4e:93:08:f8:9f:42:31:36:f0:81:3b:ec:43:
                    e2:90:86:4e:16:49:e3:fb:4a:92:ce:2a:e7:12:7b:
                    c6:be:72:61:b0:6a:d3:01:56:76:a3:6f:99:22:1d:
                    2e:01:09:29:88:95:36:31:0f:49:44:53:28:29:83:
                    7f:3a:40:5b:f2:88:56:4b:67:0b:75:01:ab:37:16:
                    69:83:25:ad:1f:59:40:f9:42:f0:bf:1b:0c:39:05:
                    23:25:c7:02:7f:25:ac:e2:68:8a:9f:9d:be:de:8c:
                    e0:de:9e:46:5b:7f:ab:28:e3:4c:07:82:7f:a3:38:
                    eb:04:6e:1c:be:f1:4c:16:a0:93:54:58:80:24:bb:
                    6e:c4:91:d9:3c:7b:84:0a:3e:4e:6a:08:21:e5:ac:
                    0a:fc:1a:7f:2c:d7:23:ea:7a:63:5f:2e:91:10:b5:
                    88:94:e8:d6:3e:fa:5a:5c:46:17:ec:99:50:7f:ed:
                    71:14:5b:00:c9:a3:ae:27:fd:c2:04:2e:37:94:fa:
                    2d:5e:68:04:cb:f1:4d:e8:16:a7:c4:8d:1d:7e:0d:
                    8d:34:92:b9:e6:e0:52:d4:73:ff:25:14:5b:9d:95:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:4D:2B:8D:5E:D8:CE:6F:7C:B4:CC:3A:CD:6F:4E:96:78:08:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cc63738-3600-3e12-8631-4d0fa3845ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:e9:60:a1:b7:67:af:04:62:4c:ec:b4:91:7e:1e:05:3f:
         da:cb:19:73:46:66:cf:cb:bc:ce:0f:1e:b4:06:8f:bc:a7:e1:
         55:e6:98:4e:5f:18:89:68:a1:22:48:cb:7e:f5:32:76:8f:eb:
         69:97:f8:5c:3a:df:ea:1a:65:51:c2:47:b3:8c:b9:ab:77:85:
         16:9a:83:e3:7a:52:2a:6f:b5:4e:73:81:bb:3b:71:08:78:00:
         31:d5:f0:15:97:3d:5b:ea:4f:ac:1f:fb:33:ba:64:14:79:f2:
         84:08:95:c8:f2:c5:8c:2d:52:3c:05:db:5a:d9:5d:ae:04:48:
         49:ea:df:13:e7:13:f6:62:26:5a:1a:0e:7e:68:80:f5:ca:3a:
         b9:5c:de:c8:25:aa:c8:cf:03:89:d9:ad:b5:97:56:0d:b6:a8:
         f1:d4:8b:78:11:21:24:97:0f:51:bc:37:46:69:b5:91:72:d1:
         99:c1:2b:46:1c:51:a7:c0:33:07:8f:83:ed:4b:23:76:17:60:
         7a:f9:73:c7:e6:a7:fa:1d:00:5f:5d:7f:5a:cf:b7:8b:72:09:
         5f:bf:c7:21:48:d3:0e:53:e4:16:01:5a:e1:e7:af:af:23:a7:
         e3:fe:cc:1b:d8:f3:53:bc:44:21:c2:ff:23:36:c2:12:f5:66:
         61:6f:3f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:27 2025 by rpki-client