Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7f5a83e-d7b9-3254-85a7-9ba328150a5d.roa
File:                     d7f5a83e-d7b9-3254-85a7-9ba328150a5d.roa (raw, json)
Hash identifier:          yAI+Pc0B2gE1k1VFjnBY2DjGlzyikBNHjmhDz08V26U=
Subject key identifier:   51:E7:42:E7:93:AD:24:CE:D8:C2:26:7B:E1:B0:FA:D9:3F:D0:CB:6B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1EB59923D6684106A7860
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7f5a83e-d7b9-3254-85a7-9ba328150a5d.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397214
IP address blocks:        156.154.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:eb:59:92:3d:66:84:10:6a:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=67497610-7d74-406e-a692-d7011df037b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:4a:9d:0b:7d:80:38:11:f4:ff:04:ae:c5:
                    25:c8:e2:7a:2d:18:be:3a:21:fc:fc:7a:87:c9:25:
                    fb:86:3c:ab:69:da:c7:18:6b:78:6d:e6:53:ba:c1:
                    7a:1a:9c:d9:85:47:4e:7d:57:1b:ca:c8:9d:46:3f:
                    cf:7b:6a:6c:75:e4:7d:77:b6:20:b1:52:23:c4:c6:
                    c1:f7:a7:7d:c5:98:17:f5:34:5b:de:32:bd:be:e1:
                    19:45:b2:7c:af:c5:82:35:36:01:97:cb:b6:5a:65:
                    9f:00:0b:62:db:e0:e8:cd:a8:05:a8:11:73:06:a5:
                    34:b3:26:78:e9:1d:26:0d:fb:44:a0:cb:e2:82:90:
                    d4:09:7d:6d:be:0d:ac:66:4f:c3:84:30:22:eb:48:
                    9b:94:cc:2a:e6:89:0f:b1:79:53:8f:87:1c:31:32:
                    58:2d:fc:fd:58:dd:0e:c8:23:30:d9:ea:a2:5c:31:
                    bc:8a:7f:a6:da:d1:df:82:9a:06:51:b4:2b:10:34:
                    fd:7c:74:39:06:15:f3:78:72:15:94:f0:06:5f:66:
                    19:96:e9:09:67:19:61:88:73:aa:a5:65:34:37:19:
                    8f:ab:f0:5f:e9:57:c2:e2:0b:bf:7a:3f:ea:1c:64:
                    31:1f:96:7c:9e:f9:62:c8:cc:46:36:73:0e:3e:54:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E7:42:E7:93:AD:24:CE:D8:C2:26:7B:E1:B0:FA:D9:3F:D0:CB:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d7f5a83e-d7b9-3254-85a7-9ba328150a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:0c:39:30:8c:6c:fc:f1:b2:cf:a3:92:04:02:dd:1e:de:
         40:a5:2d:91:5d:6e:06:49:88:7b:09:a0:3a:6e:e7:a2:4d:ec:
         f8:86:d3:90:b4:00:98:64:8b:5c:50:dd:d7:58:3a:af:72:ec:
         f7:be:0c:0f:82:43:bd:b1:95:ef:08:d2:d4:c7:45:b3:80:c5:
         58:72:47:6f:01:0b:39:5f:b7:9f:ec:dd:07:dc:6b:9b:0d:2e:
         4d:21:9e:5e:f3:0a:9f:a2:e5:9a:49:9b:47:e6:c8:68:b3:38:
         b0:c4:5f:dd:86:00:20:99:c0:a6:44:bd:26:46:b6:35:e5:0f:
         97:2c:c5:dd:5e:fd:39:53:b5:de:cb:5a:ca:23:37:e2:53:2f:
         5b:fe:07:f4:3d:63:f9:26:7b:27:35:36:ed:94:6d:1e:3b:99:
         6c:ca:b8:04:46:aa:b6:27:d2:86:17:27:02:30:74:71:ab:4c:
         5e:72:ae:3b:9a:c6:24:39:5a:9c:b8:30:94:f0:87:c7:3c:a3:
         1a:7e:ec:60:27:72:7c:b0:1e:df:f9:bb:5a:a7:1a:8d:b3:5d:
         39:01:3e:65:a9:2f:07:82:37:25:76:25:3f:82:05:fb:dd:d1:
         ee:2c:a2:63:5e:2b:67:31:db:a3:3e:b5:11:2d:90:37:7b:ee:
         67:d3:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:19:38 2025 by rpki-client