Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa
File:                     9ad2416f-6539-3ef4-9992-d4de90c820d7.roa (raw, json)
Hash identifier:          e/OFc0Ociw+NHmoYGKLYiDpcHB+8rjDJ0SYxTBOOm2s=
Subject key identifier:   87:21:2E:E3:F0:BB:91:2D:05:73:E3:A9:45:CF:C3:17:CD:3A:53:A9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BF5C35D7A055A5DE1CE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397220
IP address blocks:        156.154.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:f5:c3:5d:7a:05:5a:5d:e1:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=6215e080-0ddf-44c7-be42-7498932a2074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:85:06:39:7a:29:cb:1b:da:58:dd:15:4a:
                    e4:93:6d:b3:7c:b3:34:cb:b7:e1:dc:0b:ec:f2:2e:
                    6c:f8:18:09:e5:a8:30:f0:c8:dd:73:08:e7:82:24:
                    a2:3b:8b:c8:0d:24:2b:62:f9:4d:64:a7:24:24:1e:
                    68:69:a6:76:a5:38:7e:3e:9e:7e:20:4f:b2:f6:a1:
                    17:13:cd:38:77:b1:c2:76:ae:01:72:4d:d1:b8:d6:
                    7b:69:e0:75:1c:24:b1:18:7a:aa:a1:9c:ef:c2:b8:
                    05:e7:af:79:fd:2e:fa:ce:d9:e9:e4:a7:c6:30:77:
                    64:35:c0:9a:a4:31:42:a9:2d:6d:9c:26:ab:ac:72:
                    3b:76:5a:8a:a2:8c:eb:d2:55:ce:3b:7e:05:8e:a1:
                    05:af:87:9a:a8:7b:ce:97:d9:2b:bd:63:85:4a:3c:
                    30:5f:e9:52:92:07:b5:9a:5b:4e:6d:e7:ca:b6:35:
                    e6:b7:e6:8b:66:72:2e:01:36:f6:f1:01:95:ab:29:
                    f7:f6:cc:ea:0f:8d:f5:a7:11:ec:64:6f:a2:67:47:
                    d1:ff:8d:89:90:e2:86:f7:f8:52:3e:e1:9c:77:f5:
                    12:3c:95:35:fa:6e:04:bd:cc:93:97:a4:d6:15:c8:
                    16:08:4b:04:a2:fe:ae:38:80:f8:84:35:93:04:06:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:21:2E:E3:F0:BB:91:2D:05:73:E3:A9:45:CF:C3:17:CD:3A:53:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:af:85:a1:c2:e4:47:62:3f:69:3e:5e:4b:19:e1:c8:24:da:
         df:f4:6f:df:77:db:08:f7:9d:8e:df:aa:c6:1f:67:af:5b:e9:
         89:bf:64:af:22:a7:dc:98:40:54:df:df:38:de:4b:9e:fb:f6:
         a7:a1:92:cc:8e:4f:0e:d4:ff:a5:ea:88:2f:e3:f8:41:6d:dc:
         ca:23:0a:c1:e9:13:e4:5f:56:9d:ee:8f:42:de:f9:41:86:d7:
         0c:1a:97:8d:ff:49:a4:34:38:ec:e9:03:54:bd:cf:72:9b:b7:
         21:37:e8:98:30:48:c9:22:9a:f7:dd:5e:3d:bb:70:f4:15:bf:
         4e:6e:00:e3:95:3b:bd:d0:c8:28:83:02:fd:f0:c9:d2:c6:42:
         79:87:b7:24:ca:a4:36:04:22:75:47:2a:23:44:c3:06:3c:ae:
         e1:69:52:28:95:d2:db:87:48:77:d1:51:64:59:fb:39:7b:bc:
         17:e8:65:1b:fd:f4:d5:42:97:5c:c4:19:06:3d:6b:04:06:d5:
         33:a4:b5:af:ac:ff:50:d8:ef:89:04:ec:04:88:23:cc:18:49:
         01:55:09:ff:5e:95:6b:79:fe:fb:21:5d:f4:d4:e5:72:38:91:
         5a:40:10:94:5c:5a:11:cb:23:e5:74:d3:19:73:29:df:d5:97:
         a3:b4:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:16 2025 by rpki-client