Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa
File:                     b436817c-4532-3893-8e9f-0d0d939fc77d.roa (raw, json)
Hash identifier:          ySK+Q70an6XmDw42QZBBxJcZJiwgvPAv6/6FJK46pa0=
Subject key identifier:   94:BF:F5:27:B9:4E:41:C4:29:83:79:CD:12:2F:69:EE:7A:22:27:E9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1D029091B3BA646B05E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397216
IP address blocks:        156.154.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:d0:29:09:1b:3b:a6:46:b0:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=28e62775-6c7c-4009-af65-7c0b7f72c676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:a8:e4:44:32:1b:83:54:7d:7f:16:32:15:
                    0d:5e:ea:71:31:18:6f:80:df:1e:19:57:0d:67:c3:
                    d0:32:33:d0:94:e6:85:be:37:2b:06:54:40:c2:fb:
                    51:f2:96:db:32:7e:76:b9:06:55:c5:27:63:4a:9f:
                    7e:ba:7a:60:bc:6f:66:e8:4f:70:18:0d:85:bf:eb:
                    5f:5f:ff:d6:bd:1f:5d:ce:c8:55:24:1a:f6:2a:8c:
                    97:25:7c:41:d8:ee:a2:fd:f0:76:03:5e:a5:5e:53:
                    79:38:36:2b:18:d3:9e:8f:69:ae:1a:6d:31:3e:75:
                    6b:91:5a:a7:34:a3:fe:50:21:4d:50:22:4f:88:23:
                    df:bb:2f:7b:47:28:d9:dd:76:b3:3f:6b:e0:90:8a:
                    ad:84:d0:a5:e2:e5:b0:9e:b7:f9:b9:3f:17:b2:e9:
                    18:6c:04:6b:4a:df:59:42:89:07:dd:1f:70:fe:af:
                    93:2c:0d:54:7a:52:40:3f:e6:70:36:3a:53:ea:6c:
                    59:d6:d9:20:a4:49:10:1c:86:00:43:df:2c:da:9e:
                    a2:6e:1c:8e:f6:64:46:cf:c0:1f:de:43:8b:16:2b:
                    4b:23:64:0e:b8:93:09:5b:30:9c:03:9b:e1:57:08:
                    2c:c8:15:3a:f7:48:a8:a1:f1:ff:ad:c5:92:26:c6:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BF:F5:27:B9:4E:41:C4:29:83:79:CD:12:2F:69:EE:7A:22:27:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:52:0f:89:da:00:f0:ae:e1:1e:08:05:34:25:5e:fa:c4:
         41:22:7e:89:48:60:ef:00:1d:c8:9f:28:58:1c:9e:5b:e8:19:
         7e:b7:8a:d1:bf:1e:2c:f3:32:95:d1:2d:31:5d:5c:6b:c8:6c:
         20:47:db:38:18:a4:b4:b4:95:c4:6c:15:c9:33:81:93:b4:91:
         42:c3:d3:4c:a0:b0:2a:82:b4:8d:3f:dc:94:e0:53:e6:47:7f:
         dd:a7:7f:01:32:c0:66:f2:c2:70:5b:83:f9:6a:8a:15:42:51:
         75:3c:6a:99:ec:c5:d1:85:d6:bb:0c:ba:f7:e9:3b:91:44:4a:
         8c:0b:11:b7:fe:03:2e:9c:31:4a:d0:a7:fd:5b:08:d1:f8:63:
         51:31:20:08:9b:af:9d:b1:d3:33:4b:c5:b0:0d:ed:cd:59:28:
         bc:d4:13:04:e6:5a:b3:57:e6:a7:e7:21:2a:e5:8b:e9:b8:df:
         8a:06:dc:40:05:4e:73:63:f9:b3:75:66:c0:df:f4:2d:f3:72:
         21:09:33:2d:ae:ef:e2:ef:e5:da:68:02:ed:b3:ad:e9:07:5a:
         15:19:56:ab:07:08:31:f1:69:3c:d7:c7:00:41:2a:36:d0:42:
         26:ec:d1:c3:d2:68:b5:57:77:01:d0:86:de:d2:56:b1:37:aa:
         c6:29:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:47 2025 by rpki-client