Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/807f7d53-032b-3484-b506-8d147aa348d3.roa
File:                     807f7d53-032b-3484-b506-8d147aa348d3.roa (raw, json)
Hash identifier:          4Z9pD8B+i5V8EF2nP+2tUNrkDETvWRKao98CQvAeDjY=
Subject key identifier:   2E:2C:D6:0E:2C:1D:18:41:A0:C6:8B:AB:FF:73:26:27:CC:0D:33:83
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BF9193392516CEC3B7980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/807f7d53-032b-3484-b506-8d147aa348d3.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397235
IP address blocks:        156.154.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:f9:19:33:92:51:6c:ec:3b:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=29fe8368-fa07-4577-a212-9d6d6b6713be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:d0:c5:c1:19:43:0b:9a:20:39:33:39:6c:
                    55:a5:1c:a0:e4:5e:75:c2:b7:b3:81:be:cc:a9:b6:
                    28:9a:f6:a2:c5:77:95:6a:e2:f2:04:76:6d:76:33:
                    3c:ab:52:60:08:f5:84:9f:c2:84:36:68:07:f3:cc:
                    12:67:2b:e1:3d:a9:dc:2b:99:ea:d7:a8:5c:1d:21:
                    95:96:2d:11:52:ed:d7:4b:aa:1f:fb:6c:df:d8:46:
                    4a:18:a2:64:da:5c:58:f4:35:3b:0c:90:a0:3b:66:
                    9c:a2:0d:78:9d:f2:d1:3e:31:bb:39:4a:e3:74:f5:
                    34:85:4d:04:ff:7a:4d:51:8c:8e:e1:a2:d5:47:dc:
                    47:cc:de:e5:ef:c1:d4:48:b9:69:28:be:98:e6:0b:
                    7e:d2:9f:d8:73:f6:d4:1d:c3:ed:82:05:d6:cd:47:
                    2a:6e:73:41:67:43:85:6a:ca:7c:90:f2:38:81:6f:
                    62:c8:7e:c7:d6:71:ed:5b:35:2a:5b:94:4a:71:31:
                    28:7f:3b:a3:46:99:ac:3d:6a:7e:2c:51:fd:15:38:
                    82:81:47:ef:14:95:9d:df:10:41:b8:77:73:d0:8b:
                    54:98:9b:fd:a1:a6:68:34:6e:c8:ec:d5:db:44:15:
                    d3:c5:01:5a:f5:1f:37:c3:7d:36:96:de:b2:d8:36:
                    4b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2C:D6:0E:2C:1D:18:41:A0:C6:8B:AB:FF:73:26:27:CC:0D:33:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/807f7d53-032b-3484-b506-8d147aa348d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ad:bf:cb:e6:75:22:a3:45:78:4a:cd:76:7d:83:3a:af:10:
         c6:39:35:27:9f:11:2a:39:48:e1:3b:a6:48:47:5e:5e:6c:4b:
         de:78:25:60:fd:9c:c5:d2:11:3e:4c:93:75:e0:67:63:c1:9d:
         87:18:90:a1:4d:91:38:8c:c2:0a:cd:7a:e4:45:70:41:21:e3:
         0c:03:00:69:9d:e3:f2:ad:5f:77:e4:dc:c7:01:06:41:46:43:
         07:a0:18:1d:b0:05:f2:92:bd:46:ca:38:7e:47:29:5e:67:81:
         40:46:44:78:18:bc:23:6f:47:55:a3:0b:46:e4:dd:b0:97:bb:
         85:bf:0a:a6:80:16:2d:20:b8:b1:55:9e:df:90:29:fe:79:53:
         b7:87:b3:9e:8b:0e:9e:32:b3:7b:11:8c:68:e1:05:3d:23:2d:
         72:fc:a7:49:e2:3d:be:95:43:4d:a2:0a:1c:79:f1:84:a6:5b:
         e4:79:14:e2:e0:6f:2b:81:3d:30:62:4e:c1:05:70:67:ab:60:
         fd:1e:c4:4c:ac:69:7b:cc:ff:0b:8a:e1:88:37:c2:6b:18:e5:
         d3:a7:c8:f7:fd:09:af:45:89:0d:88:bf:94:f7:5b:ac:17:95:
         76:cd:4e:64:71:6a:b5:12:2c:57:5b:98:c0:59:f5:8c:ba:2d:
         14:44:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:19 2025 by rpki-client