Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f779d3f-23ae-3fd3-847c-34fc5dee3cfa.roa
File:                     8f779d3f-23ae-3fd3-847c-34fc5dee3cfa.roa (raw, json)
Hash identifier:          kHlVpN19dHHQ6DaEp5SikyRO+Wb79Qtw2bhpZSs67XY=
Subject key identifier:   8B:DB:15:F9:9C:16:E0:A1:9C:1A:61:FC:4E:5C:4C:53:44:36:43:79
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C9EE28DF0BE7F277ED7C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f779d3f-23ae-3fd3-847c-34fc5dee3cfa.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397228
IP address blocks:        156.154.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:9e:e2:8d:f0:be:7f:27:7e:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=531b6ee4-1fb7-426d-a031-b9efbf88839c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:59:ee:2d:30:bf:65:83:25:97:57:e0:d6:
                    fc:c5:9f:24:16:e4:7f:d8:59:f5:9c:c5:a6:51:c0:
                    f6:79:2b:95:a0:1b:25:5c:e6:cd:a0:6d:d3:cb:a3:
                    ff:67:e7:b0:a2:07:51:b8:3d:40:d4:d1:db:5e:8c:
                    4d:dd:eb:83:35:0a:00:c3:f6:be:dc:0e:7a:05:2e:
                    d0:b6:25:19:30:73:16:10:70:39:6b:58:42:9d:56:
                    f0:b9:28:58:b5:93:b7:f2:66:06:6b:7d:99:cf:9e:
                    42:c8:98:bc:aa:f1:b4:4e:e6:6d:b6:56:8f:82:42:
                    2e:a6:d4:e9:36:ef:ea:00:e1:a9:8d:4c:b7:ac:a7:
                    bf:06:fe:24:da:d4:e9:74:76:e4:06:3f:51:6a:a2:
                    e0:44:f7:3e:86:23:3f:98:c6:0f:f4:f0:c5:00:78:
                    ba:16:59:67:33:44:01:1b:ca:f4:ee:5f:c1:7a:0f:
                    ff:db:db:b8:a9:9e:f3:9a:08:e1:da:c9:42:4c:9e:
                    91:73:2b:33:62:76:ae:7c:ed:ed:ba:ec:2a:79:f4:
                    23:83:11:bd:cc:28:2a:30:43:e8:21:8f:6c:f5:94:
                    0d:df:37:88:3f:45:e3:7f:c8:c7:db:ba:1d:68:9d:
                    91:1b:c7:7d:a3:51:c9:dc:8e:23:8e:2c:9e:40:a9:
                    b7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:15:F9:9C:16:E0:A1:9C:1A:61:FC:4E:5C:4C:53:44:36:43:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8f779d3f-23ae-3fd3-847c-34fc5dee3cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:74:9a:18:5a:06:b7:5b:47:0c:cf:de:aa:2b:4f:9f:49:
         14:09:f8:c0:53:a2:90:1f:71:0b:da:fa:a4:59:41:9a:c1:86:
         dc:cf:77:1e:ae:0f:b7:81:bc:7f:ba:4f:d3:e4:12:80:f7:10:
         15:27:77:a1:8a:28:c9:ba:17:b3:42:27:ad:cd:ed:ed:4c:1d:
         d0:0c:3b:dd:e3:ca:72:fc:55:84:1f:35:f9:ca:83:90:22:4a:
         19:4d:e7:e7:41:0e:7b:b3:09:36:7a:ec:39:c1:6c:13:0e:4e:
         64:46:f2:38:2e:b2:20:fc:8f:58:c4:c7:33:d7:91:3c:f1:80:
         3e:3b:ca:7e:55:3e:5d:60:3e:32:52:bd:18:a5:56:f1:8f:f1:
         fe:8b:f4:30:98:95:a4:16:00:bb:c1:d4:34:68:9a:26:f5:6e:
         dc:69:95:31:e7:dd:72:d8:92:9c:17:88:af:61:f3:37:35:ba:
         55:eb:6a:db:15:31:53:bb:4a:29:d5:ed:2e:61:1d:00:46:a9:
         3d:f3:a9:74:8c:74:fe:82:9f:46:79:ba:b5:f2:44:dd:19:07:
         03:dd:70:63:07:ab:6e:ae:c6:df:62:05:60:df:67:09:7c:03:
         11:b2:c2:54:f4:97:18:72:53:00:9e:b6:63:54:c7:d0:13:91:
         a4:80:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:13 2025 by rpki-client