Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc941d06-25e9-3f1a-8fbe-1dadefbfd322.roa
File:                     dc941d06-25e9-3f1a-8fbe-1dadefbfd322.roa (raw, json)
Hash identifier:          dkXjcLVvdf079sfVZTrg2k7csTXMNVgtuJjNcnvhrUY=
Subject key identifier:   3A:73:ED:69:13:82:63:CB:3E:0D:25:0B:68:8D:EF:34:87:19:15:A9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BF22D12FFBB089402DE80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc941d06-25e9-3f1a-8fbe-1dadefbfd322.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397235
IP address blocks:        156.154.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:f2:2d:12:ff:bb:08:94:02:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f66b93d1-d4e1-4444-ab93-66b8c4d6025d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5d:9e:70:3f:1a:d2:58:c3:4e:6c:a3:bf:7e:
                    7e:06:03:ca:e2:76:6c:48:1f:7c:59:b2:dd:da:9c:
                    cc:96:6e:44:2f:a0:c9:f2:be:48:9f:92:c7:30:68:
                    55:d0:83:7b:ad:c6:c1:fb:eb:55:9d:07:46:d1:f5:
                    45:75:9a:79:6d:06:40:65:9d:ca:bc:7b:a0:0e:c7:
                    fb:22:6b:f7:c5:96:ab:72:bc:6c:fd:b7:93:fc:db:
                    c6:ed:2a:c4:88:51:33:e1:aa:2d:5f:72:13:fe:2a:
                    2b:04:bc:7b:f0:ac:f4:4f:4b:72:88:1a:19:23:91:
                    70:0c:b4:6f:11:20:79:f0:5a:4f:63:a4:20:bc:3a:
                    9d:d5:4d:34:cf:d0:08:7b:5e:f7:a8:77:eb:db:3f:
                    9d:f2:a9:58:fd:e7:97:c5:e9:86:cd:f1:f4:a7:fd:
                    f2:63:27:c0:64:ab:a4:8e:e5:39:e8:67:9d:31:96:
                    b0:a0:65:65:66:e0:40:33:01:35:20:77:6e:0a:d0:
                    73:d3:fc:8c:06:11:67:d4:23:4e:3f:a9:1a:ba:2b:
                    55:39:08:03:d0:ae:1a:ac:73:33:d7:69:26:8b:99:
                    fe:33:45:98:91:94:81:f1:f9:34:cd:4d:4f:87:91:
                    94:bd:f6:15:a2:e2:08:67:e2:98:40:d5:ac:a6:63:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:73:ED:69:13:82:63:CB:3E:0D:25:0B:68:8D:EF:34:87:19:15:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc941d06-25e9-3f1a-8fbe-1dadefbfd322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:94:d4:ce:7d:aa:34:bd:cc:d2:b0:d7:df:f9:fa:c3:4b:
         6d:d0:2e:c3:cd:65:3c:48:10:d1:ea:82:8c:f7:d5:6b:4e:af:
         9c:2a:8d:3c:38:ac:57:ef:54:74:d4:82:de:a9:e7:73:e7:d9:
         36:e8:b6:8e:47:9d:8d:77:0a:75:eb:69:ce:10:ea:3d:89:fa:
         70:e8:ba:50:bf:56:5f:14:b7:8b:56:cd:1f:5e:b0:a9:67:5c:
         8b:3c:63:04:27:bc:52:29:fe:3f:99:31:0e:c1:b0:da:ea:aa:
         7d:3f:4d:a3:7a:35:1d:a2:3f:05:40:19:de:c8:72:4a:e7:c5:
         c0:ff:6b:a3:76:75:f5:81:d3:d6:4d:09:09:1c:3e:75:cc:0a:
         18:c0:48:d0:93:c9:d4:b6:5d:1e:44:40:12:7d:6f:c0:68:38:
         2b:43:9b:3e:3a:81:ad:5f:89:c9:91:f1:3c:97:51:a3:41:0d:
         d0:f1:6f:ef:68:54:77:77:ef:ea:bc:5c:07:aa:f1:83:e1:d0:
         42:05:e6:c7:b2:1b:fe:d2:4c:c8:ed:e8:a2:8e:d3:f1:8e:9a:
         5d:cd:01:d6:06:46:cb:1e:cc:76:76:f7:19:4f:23:29:3b:f9:
         e4:43:0f:0c:67:f2:18:b5:1c:a1:0c:1b:63:d4:be:9e:1c:b4:
         54:15:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:40 2025 by rpki-client