Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a8b823f-1f1b-32a2-8f65-a541e2f5e8a5.roa
File:                     9a8b823f-1f1b-32a2-8f65-a541e2f5e8a5.roa (raw, json)
Hash identifier:          BeyWlS1AH9RH4a1ade1Qzz28SPmkKdj5R9Lcd8zl1AU=
Subject key identifier:   EC:CF:49:F6:57:5A:C0:A9:CC:F7:A3:BF:F3:1B:BA:86:76:D5:A6:D1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A4F05DB241D0DBCEFA933A2C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a8b823f-1f1b-32a2-8f65-a541e2f5e8a5.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     19905
IP address blocks:        156.154.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:db:24:1d:0d:bc:ef:a9:33:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=3b8094fb-d074-4f74-a807-00775c0923be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:4e:35:4f:77:30:bd:48:5d:f8:6c:39:ee:
                    a3:84:69:e7:89:8e:bc:57:33:74:cf:68:9a:bf:17:
                    1d:84:76:5d:f3:7c:82:4d:8a:c2:ba:6a:a6:a3:9d:
                    59:13:2f:75:7e:36:1d:3c:41:20:55:e2:3c:58:ed:
                    0d:8c:87:99:41:e1:96:50:1d:d0:56:01:ea:a2:97:
                    1c:29:a5:7c:db:e8:e0:3c:38:60:63:ca:34:d9:7c:
                    1a:29:34:17:c7:2e:7b:11:f4:6c:76:53:7a:00:ed:
                    83:25:ed:52:35:75:2d:9d:62:dd:1f:b1:a6:0f:49:
                    05:f9:b5:26:be:ec:4d:09:a4:02:a6:51:e0:5d:74:
                    0b:b7:71:7b:9b:68:35:54:6a:32:72:0c:dd:c5:62:
                    d9:b3:79:d6:69:fd:fd:f0:d9:cc:53:7a:16:cb:d6:
                    3e:52:71:16:a6:34:20:d6:96:ed:79:0c:1b:8c:9b:
                    81:77:05:ff:f4:bc:8a:76:27:dc:a2:45:87:22:25:
                    05:84:d8:a7:e1:a1:9b:ac:b4:3f:38:b9:8d:5d:89:
                    3e:45:58:3a:27:17:ef:34:23:29:fc:31:61:76:1a:
                    22:24:76:f8:84:d4:c5:87:ee:5f:4c:b0:62:a3:bd:
                    87:f2:63:46:39:4d:c8:c4:b4:54:fa:1f:96:5e:5f:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:49:F6:57:5A:C0:A9:CC:F7:A3:BF:F3:1B:BA:86:76:D5:A6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a8b823f-1f1b-32a2-8f65-a541e2f5e8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:e7:23:36:f1:a6:95:33:41:83:b8:40:af:cf:91:9b:87:
         e1:ec:33:99:e7:e1:a1:57:fd:56:7d:26:8d:53:fa:52:c3:4b:
         a9:25:d9:ad:09:66:c3:2b:e4:57:c2:fd:33:39:de:c5:cb:2e:
         81:aa:97:9d:89:a1:b5:c3:b6:28:ac:36:19:79:23:4a:69:75:
         1b:53:a4:a3:e3:90:24:38:5d:9a:9f:18:e4:f0:a2:30:10:d4:
         d2:f4:1e:45:2e:8f:bf:73:8c:af:cf:b8:48:fa:41:01:94:ee:
         38:fa:5c:74:41:72:14:ae:08:51:54:24:6b:3c:3e:ce:22:81:
         00:da:78:68:4b:b0:6a:14:3e:33:79:e5:c8:43:fd:13:bf:7c:
         2a:d5:f5:14:dd:33:46:2d:cf:9d:74:5d:82:b1:b2:d3:b8:cc:
         d0:14:a8:11:2f:36:07:16:d0:a2:d1:e5:bd:6b:74:e9:ac:6b:
         23:59:1a:16:12:7f:09:64:5e:ab:1d:0c:c9:fd:29:fb:fc:96:
         05:60:3e:86:ef:84:fc:39:d8:c6:10:65:62:87:7c:b7:8b:4a:
         a4:69:07:79:15:60:2f:c5:05:98:d1:f6:58:2e:de:93:34:a1:
         1e:02:89:f9:0b:dc:cc:4f:45:b3:07:78:85:fc:f6:f6:ad:06:
         56:43:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:45:24 2025 by rpki-client