Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a89e1c-57cc-3361-b3f7-96b8fdb848ed.roa
File:                     d2a89e1c-57cc-3361-b3f7-96b8fdb848ed.roa (raw, json)
Hash identifier:          INI5PWE7SswZOWz5K0JyaPTbwdn/+xFA6LOnXScFb2E=
Subject key identifier:   FC:2E:3F:32:62:AC:51:45:64:4A:B6:E3:64:16:F2:B9:5C:A9:11:78
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B2FC1A9A92A27333CA7272000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a89e1c-57cc-3361-b3f7-96b8fdb848ed.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     397222
IP address blocks:        156.154.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:a9:a9:2a:27:33:3c:a7:27:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=e34fcbbb-35b8-46f2-952d-9fa529b3407a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:8a:cb:ab:63:5f:5f:24:7d:f7:38:b3:45:
                    55:9f:85:dc:15:38:99:81:0d:ca:8b:76:ce:36:7c:
                    0d:e2:cb:95:7f:35:a6:0f:14:92:f4:22:27:fc:8a:
                    24:72:aa:4d:01:45:2b:c3:bf:07:d9:fc:2d:b6:ef:
                    77:8a:2a:3a:eb:a7:d0:db:4f:8b:8e:bd:4c:b5:5b:
                    e9:63:89:2b:1d:df:59:81:24:5c:dc:6a:17:83:da:
                    07:92:a5:16:48:1d:12:dd:8a:b4:5b:83:69:27:68:
                    e7:c6:cb:58:f9:ad:6f:34:eb:4b:c3:83:2d:c0:d0:
                    ad:f8:0e:80:39:2a:c5:4c:17:ed:48:89:16:9a:45:
                    a9:bb:8a:a8:6b:ca:8d:0a:de:1c:c3:c2:79:6d:c0:
                    4a:47:30:96:86:15:ae:1b:51:d6:da:1f:05:2b:6c:
                    cc:ee:0f:74:04:c8:72:dc:10:4d:42:c6:b1:7c:46:
                    f1:69:1a:f7:88:e8:e9:58:f2:19:e5:7a:e8:c3:5c:
                    35:69:76:e0:fe:f9:6a:64:9b:8e:ce:4b:2c:23:f1:
                    cf:30:df:cb:fc:54:af:af:e0:4b:5a:b9:0c:b9:25:
                    09:97:07:18:6c:c1:ab:12:95:2a:54:06:37:cc:a1:
                    1f:2c:1a:72:63:26:44:87:5d:1d:a7:36:1f:91:05:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2E:3F:32:62:AC:51:45:64:4A:B6:E3:64:16:F2:B9:5C:A9:11:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a89e1c-57cc-3361-b3f7-96b8fdb848ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:71:13:0e:6a:9b:6b:07:dd:5f:a9:5f:ce:4e:40:36:b0:
         e0:48:36:59:74:ad:58:db:73:71:14:f7:d4:52:66:81:20:71:
         8c:40:70:79:7f:fe:e5:13:3b:4a:f1:41:45:bf:93:b8:7a:9c:
         85:11:66:20:e2:7d:9e:49:18:99:61:8e:4f:d2:de:ad:85:34:
         34:ae:ea:81:9f:10:8a:04:8c:e9:65:84:7c:0c:52:f3:83:48:
         51:a6:6b:5c:88:28:3f:e7:a4:c6:b4:ee:ff:e8:55:4e:8e:21:
         4f:90:cc:30:c0:f3:e4:a5:6b:ff:e3:62:0d:ec:2a:32:fe:5c:
         99:3f:47:a6:dc:8a:63:d6:92:f5:fd:fd:d3:31:96:4b:5b:c1:
         93:bd:f6:9e:e0:ff:51:06:01:eb:7f:74:64:4e:3b:93:f9:3f:
         cd:a3:e7:a3:04:bd:9d:a2:06:1e:74:bc:ae:0b:59:cc:43:04:
         6d:86:86:3d:ef:0a:19:de:3f:b8:9d:a4:13:05:4d:90:7c:73:
         d5:8d:3f:c3:56:63:84:7f:59:db:40:a3:39:c2:31:a8:fc:c3:
         5a:46:73:82:46:9a:45:68:21:14:8c:57:fa:7a:b8:8d:64:42:
         6a:55:76:03:ef:20:38:14:46:7a:a0:ee:00:a1:aa:5b:29:82:
         11:10:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:09 2025 by rpki-client