Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/844ee85f-f969-38ed-b55c-d023963ebce5.roa
File:                     844ee85f-f969-38ed-b55c-d023963ebce5.roa (raw, json)
Hash identifier:          jwJozZ8PUEIEs7+8GpBHZjSvN5StCZdjKbIl8r+uXuc=
Subject key identifier:   B7:58:4B:9F:9E:3E:B3:4A:0B:33:8E:31:CC:A3:AE:38:64:12:65:15
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C9FC7D83A7AC8F685D810
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/844ee85f-f969-38ed-b55c-d023963ebce5.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397241
IP address blocks:        156.154.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:9f:c7:d8:3a:7a:c8:f6:85:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=577d8690-f962-4e87-8cbd-e5885341de93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0b:44:38:a6:d1:e6:2b:7c:e1:da:80:77:98:
                    be:5d:0e:83:a2:30:12:59:e9:84:3d:b6:ee:32:2f:
                    c6:99:aa:ae:70:48:45:d9:ea:d7:fc:48:03:31:01:
                    8a:09:d0:84:ba:14:5c:a7:9a:29:55:7e:0e:2d:bd:
                    b7:48:81:1c:ad:30:8c:e8:63:82:d2:e9:6a:47:07:
                    0a:3d:df:71:32:9e:0c:0d:55:df:aa:26:cf:68:fd:
                    b1:56:77:68:4b:c4:1a:0d:9a:76:59:e5:53:83:f2:
                    8a:d7:75:36:b1:f2:33:7b:48:5b:a0:9d:0d:7e:04:
                    36:80:03:c3:d6:6a:d7:3e:4c:17:78:90:c0:ff:18:
                    d0:e5:f6:19:c6:12:e3:39:d2:06:d4:8d:10:e4:93:
                    29:14:a7:81:0b:fa:2f:c2:20:ff:b0:14:b7:5a:7e:
                    31:53:91:2d:c3:f6:1e:61:ab:83:f9:f5:b1:9d:3d:
                    30:91:37:cd:fd:4c:61:e9:d3:ac:c8:29:93:52:ef:
                    6a:27:b7:72:31:da:d1:d0:75:76:fa:ed:08:a0:e0:
                    d6:c0:a1:1a:24:91:f8:36:0a:e8:70:33:f1:6a:6b:
                    71:9d:3d:9a:e1:51:11:9d:b0:4f:07:e6:b1:25:01:
                    2b:39:f5:44:9f:9f:e6:34:3b:73:f6:25:58:78:b1:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:58:4B:9F:9E:3E:B3:4A:0B:33:8E:31:CC:A3:AE:38:64:12:65:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/844ee85f-f969-38ed-b55c-d023963ebce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:23:7b:73:1d:d1:11:6e:17:58:47:a8:74:bd:fb:49:91:62:
         8d:17:54:17:24:58:17:52:af:c9:ab:9e:9e:90:44:68:75:a7:
         06:8e:03:b0:e1:8a:20:c4:c7:ab:05:5b:b0:05:34:1d:33:15:
         77:89:32:b2:67:ad:7c:e6:97:db:09:63:aa:5e:2c:4e:cc:81:
         3e:ed:1f:e5:8c:69:b9:74:d2:ee:c2:5b:3a:e6:67:fa:0b:b9:
         21:92:21:79:7b:a3:1a:88:e9:f4:a0:78:51:59:0b:57:10:9e:
         f6:fd:a7:e8:47:1c:bc:05:88:f3:24:0d:6d:73:15:84:19:7a:
         c9:d0:17:5b:f5:ad:53:c5:fb:0f:50:ed:83:d8:b8:da:09:93:
         fa:b1:a1:e4:7e:fc:d1:c9:51:e2:ca:84:1d:a6:43:37:3c:2a:
         c9:c7:b9:c1:a4:14:fc:72:0a:de:5e:a5:18:00:92:64:c9:c5:
         68:d4:ff:ab:ce:f6:46:28:a1:ce:7d:1d:4f:25:24:7e:60:27:
         e7:7d:bc:d9:44:fc:f9:6d:74:a4:f3:8a:d7:44:1c:f6:2a:49:
         4e:82:29:15:0b:2b:4b:3b:cf:b7:43:2e:99:eb:3e:a1:ba:81:
         40:b3:9e:e6:79:9b:99:c9:48:b5:dc:1a:4c:7c:c9:d1:ed:18:
         3b:7e:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:26 2025 by rpki-client