Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a35838cd-dc17-3559-bec4-adf2c18666cf.roa
File:                     a35838cd-dc17-3559-bec4-adf2c18666cf.roa (raw, json)
Hash identifier:          kjo8dPxceKNanix9lYNCbwXEqiwBRa+hg3tVtNLeVeQ=
Subject key identifier:   1D:E8:90:56:D8:E6:61:8E:40:F7:06:59:F2:5B:77:7D:5D:7C:BE:65
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B7F520A64AAB0F668597B4400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a35838cd-dc17-3559-bec4-adf2c18666cf.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     12008
IP address blocks:        156.154.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:0a:64:aa:b0:f6:68:59:7b:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=07aa10b0-ad47-4f13-9794-3dc535e7d0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:86:54:db:32:48:b0:8f:d7:79:c0:a3:7d:
                    2b:ff:a6:73:a4:97:a9:9f:19:fd:eb:25:36:5c:0b:
                    f6:87:f8:e9:93:a5:42:ff:c6:ee:f5:0d:f4:ed:11:
                    b5:e2:64:cc:5a:b6:50:cf:ad:8a:1d:72:71:d5:b5:
                    8d:a4:50:45:d2:77:2e:82:c8:06:47:02:e4:22:0b:
                    c1:84:50:f8:15:b0:4d:07:a9:8c:77:b0:fd:45:70:
                    47:a5:e9:c3:cf:88:9a:c4:38:26:ad:15:c9:b6:ee:
                    84:71:cb:c6:90:4c:d4:be:e2:50:a0:46:11:6e:3f:
                    8e:4b:eb:5a:99:08:b0:4d:4f:02:7b:5e:39:f7:0d:
                    74:1e:cd:8d:f2:28:4f:e8:1c:5e:dd:53:97:81:2f:
                    22:2a:ed:78:0d:9f:b4:f8:c9:d5:34:ba:96:81:b6:
                    9e:3b:10:ca:a5:c9:3d:78:af:a2:e0:a0:8e:0f:dc:
                    ec:2d:cd:96:1f:11:aa:8f:34:ad:aa:da:51:5c:39:
                    9d:54:45:19:11:fa:cf:ac:62:68:2c:8a:5a:8d:fc:
                    e0:83:83:3d:7d:e6:aa:55:38:5c:d9:ff:92:ca:38:
                    88:c2:f0:a2:03:42:06:18:d2:b2:ef:de:1b:1f:a1:
                    db:09:66:83:63:19:52:49:81:04:ab:9b:80:66:d0:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E8:90:56:D8:E6:61:8E:40:F7:06:59:F2:5B:77:7D:5D:7C:BE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a35838cd-dc17-3559-bec4-adf2c18666cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:44:36:55:e4:f6:5b:61:ca:4c:a1:ee:0a:aa:7e:ba:e0:3c:
         56:13:e8:bf:fe:75:f3:4b:76:6b:c9:57:e5:69:8f:bb:10:ff:
         d6:00:e4:4a:0a:fe:cb:ce:aa:52:e9:fe:0e:e6:2f:ab:5b:38:
         80:68:0e:04:d4:e9:e7:bf:16:2e:50:7c:9f:6f:81:43:e9:4a:
         6c:87:69:f5:09:69:aa:01:69:f1:0e:af:ca:10:1c:3e:32:0c:
         95:f8:19:89:1b:6c:d8:76:b2:da:75:ee:ec:d4:94:ea:4a:39:
         59:a7:36:c8:1d:59:9c:7c:39:78:ad:fb:3e:5c:25:9e:40:1f:
         48:8c:cf:ca:50:2e:bf:f5:07:8d:d2:6d:39:a3:1d:df:7d:83:
         e1:80:64:42:8d:e0:7e:35:89:cf:f3:58:e7:f7:c9:9c:24:c8:
         94:69:a1:bb:f3:7b:71:98:fe:f7:20:f7:e6:59:c1:d4:b7:fb:
         df:c7:30:cd:70:92:11:44:8a:4b:69:1d:50:ff:bd:12:c6:94:
         e1:d2:f6:6c:e2:f7:10:dc:e0:49:e8:a1:b4:a4:cb:1b:c1:90:
         e8:4b:d2:da:8d:cb:78:a9:ef:d8:6c:a7:36:ae:0a:3c:42:e3:
         40:dc:7a:56:e9:df:f9:a4:19:0a:09:f3:86:8d:de:5d:ac:b8:
         69:9d:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:34 2025 by rpki-client