Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1d17512-1459-3108-8b8c-3798f05db395.roa
File:                     a1d17512-1459-3108-8b8c-3798f05db395.roa (raw, json)
Hash identifier:          +UF8wBNP9hSNsNKUJsqWYptEYDgbq5tRM+ErjHBDrDk=
Subject key identifier:   7C:62:9F:57:F2:53:56:F4:33:2B:FE:DD:EB:43:32:5B:D6:2E:45:FF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AECC4BAC2251FAE1DB2339B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1d17512-1459-3108-8b8c-3798f05db395.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     399163
IP address blocks:        156.154.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:ba:c2:25:1f:ae:1d:b2:33:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=8e0e9934-4cc9-4e91-bf83-ffa3ceb34d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:97:ca:08:b4:67:0f:81:59:b9:f3:8e:42:
                    04:5a:19:99:49:af:7e:bf:89:0e:fe:6c:df:96:70:
                    64:c5:b2:38:22:67:0c:a9:26:aa:0a:28:b9:e8:7e:
                    dd:15:89:f2:38:33:7a:2f:26:57:f7:29:98:2b:18:
                    f3:38:fa:6f:f2:1b:91:53:56:0a:26:cd:e6:13:80:
                    5f:73:73:d5:2a:ff:c8:cd:84:ff:7c:84:dd:ee:f3:
                    49:c7:27:5f:89:1a:e1:2a:d8:d4:99:d5:1a:8c:1c:
                    ff:ad:36:3c:8a:d7:e6:ab:94:de:27:5c:8c:7c:94:
                    85:da:b6:dd:02:cf:79:6e:89:46:9e:30:7a:a9:b0:
                    a3:07:d9:e4:5b:00:43:36:9f:0b:1a:aa:8b:d8:4d:
                    bd:f5:82:09:b6:e5:57:cf:6e:79:d3:44:61:05:54:
                    e7:b9:2b:95:35:bf:0d:5b:e5:76:36:df:78:9b:a5:
                    6a:b9:52:41:7f:d8:80:25:19:57:2b:22:eb:ff:f3:
                    79:df:bb:83:37:19:e3:32:eb:fd:62:49:8c:ea:4c:
                    4f:3d:ba:76:5e:0b:bd:6e:f3:2b:d6:ed:67:4a:f2:
                    10:0e:b5:48:b3:c5:46:32:66:06:01:f5:10:c1:4f:
                    3c:7c:c2:7e:f9:81:ae:56:70:1d:98:26:56:49:49:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:9F:57:F2:53:56:F4:33:2B:FE:DD:EB:43:32:5B:D6:2E:45:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1d17512-1459-3108-8b8c-3798f05db395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:40:08:8d:9c:3d:1e:cb:25:a2:dc:22:3b:49:70:92:97:3b:
         19:b4:3c:84:9f:08:a9:36:d2:48:61:40:02:f8:55:30:e9:e4:
         1e:bf:03:09:b2:5d:68:ab:70:e7:05:2d:fc:f0:3d:7c:5b:d8:
         f9:89:91:af:23:43:e9:f1:da:d4:c7:c4:c9:55:5b:90:3c:91:
         9d:fb:32:38:63:95:2d:f1:0c:0a:7e:e7:93:15:7c:14:ec:b2:
         81:23:66:8a:d3:07:4a:1a:60:63:dc:81:19:92:41:48:e9:42:
         38:dd:19:3d:c1:37:25:83:ff:2e:88:1e:ba:4e:af:e4:f6:e8:
         c0:23:5f:5f:6e:9d:d7:fd:41:05:3a:45:cd:3b:57:5e:4b:e9:
         4e:e4:37:96:7a:dd:00:3b:e4:78:7c:ff:58:2f:3c:94:05:c5:
         8c:e0:34:e5:ba:03:c1:60:80:e9:a7:f7:ae:bd:22:a0:bf:aa:
         7e:56:ee:c3:ed:b6:ce:b8:d3:1b:41:3e:dc:59:03:ff:a2:59:
         3f:da:b1:7d:c0:37:87:cf:25:44:ac:f0:c6:3b:45:fe:d2:2c:
         d9:c1:a6:dc:97:48:8a:0a:6d:4a:05:92:39:9b:b6:12:f0:aa:
         a0:35:dc:67:5c:1c:7f:f2:f8:b6:b2:17:9e:ad:ca:08:54:fc:
         47:cd:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:56 2025 by rpki-client