Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7fe330f-da4d-38dd-ae7f-d0c28697bb07.roa
File:                     e7fe330f-da4d-38dd-ae7f-d0c28697bb07.roa (raw, json)
Hash identifier:          maQ++T5w5vBq0oc7m8k8VESYj4nto9s0BhFiE1ytrgI=
Subject key identifier:   E6:87:EF:6F:A8:10:5E:FF:C6:A8:BD:9A:D7:39:EB:87:A5:41:F9:4E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C36FA6B97FF411DD6A38080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7fe330f-da4d-38dd-ae7f-d0c28697bb07.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397216
IP address blocks:        156.154.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:fa:6b:97:ff:41:1d:d6:a3:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=47ea1d65-d6ec-454b-b9ce-63712c3cbe31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:0e:fb:4c:5f:95:30:43:28:8b:d6:02:dd:
                    42:57:df:a1:c8:c2:ef:02:ca:d7:b5:b5:78:18:ca:
                    b4:bb:45:1e:f2:11:63:ee:63:62:41:2b:b3:80:7f:
                    19:eb:50:9d:e3:12:38:3b:6a:34:bc:5c:2f:3e:be:
                    b8:68:9a:9a:59:9c:e0:5c:a1:8c:83:07:b5:ac:b9:
                    0c:d5:bd:82:46:3c:ac:18:78:3b:39:6d:34:46:f7:
                    99:31:9c:fe:69:da:5d:cc:6f:52:a3:1a:81:43:af:
                    98:e9:23:2d:c4:bd:3c:80:20:2d:84:1a:d1:c0:5b:
                    f6:d2:bf:1f:a3:68:2c:56:68:a3:a6:fe:3a:e6:a2:
                    fe:db:95:4d:e1:c2:96:5b:64:33:02:75:0d:96:82:
                    57:4c:c3:54:b9:3b:3b:b0:96:34:0b:ea:ad:a9:8b:
                    68:2f:94:f4:ba:e1:37:f3:a5:ca:e3:cd:2e:47:1a:
                    d0:5b:ba:a5:6f:74:f2:a1:44:86:0e:74:40:66:d5:
                    0f:f2:08:f5:b4:4f:d6:b8:3d:8b:55:c7:cc:91:d2:
                    7e:ce:0d:8f:22:24:ba:3b:eb:fc:c8:5d:63:13:d2:
                    d8:ad:ad:1a:4f:5e:6f:4a:bf:88:63:c9:89:a2:d1:
                    76:c5:2f:82:01:13:de:d7:36:48:77:d2:99:ec:a2:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:87:EF:6F:A8:10:5E:FF:C6:A8:BD:9A:D7:39:EB:87:A5:41:F9:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7fe330f-da4d-38dd-ae7f-d0c28697bb07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:67:06:b1:92:b9:ee:51:60:0c:46:87:27:9b:a3:dc:40:
         98:50:49:70:c8:87:be:b8:23:34:a7:f9:2f:6b:0d:85:0e:9e:
         67:60:a8:08:d5:97:2c:fe:75:56:ff:db:c1:8f:a3:2f:aa:21:
         94:8c:ff:25:0c:80:10:53:24:6b:bb:5c:96:f4:a3:5d:05:fd:
         68:92:6a:aa:b5:0b:43:90:fd:39:bf:de:2b:84:46:d2:72:d9:
         10:48:ae:93:b7:00:36:bc:94:a1:62:f2:41:d6:e6:1a:a4:36:
         e7:a9:a9:1e:eb:35:44:62:3e:e0:36:d5:d6:10:07:ad:c5:22:
         f9:7d:18:56:d4:0f:a1:38:d2:6f:33:0f:65:a6:86:12:fc:99:
         0c:6c:2d:ef:66:3b:94:de:69:8a:8d:50:f2:1b:6c:b1:6f:21:
         f6:bf:db:9c:4b:1e:47:b5:55:d5:a5:15:62:01:e6:21:c2:cb:
         80:e4:16:a2:10:20:fe:53:e7:de:90:9d:90:d4:4c:44:b1:f4:
         e0:1a:65:49:bd:9b:11:57:16:bb:fe:ff:db:64:99:8b:6d:a0:
         be:2c:42:92:1d:9c:9e:95:b7:2e:0f:c0:84:2b:c3:e8:34:11:
         f8:93:c9:3a:93:43:42:90:8f:19:52:a7:92:ba:dc:94:4f:6f:
         a5:c8:1f:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNvprl/9BHdajgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NDdlYTFkNjUtZDZlYy00NTRiLWI5Y2UtNjM3MTJjM2NiZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/kO+0xflTBDKIvWAt1CV9+hyMLvAsrXtbV4
GMq0u0Ue8hFj7mNiQSuzgH8Z61Cd4xI4O2o0vFwvPr64aJqaWZzgXKGMgwe1rLkM
1b2CRjysGHg7OW00RveZMZz+adpdzG9SoxqBQ6+Y6SMtxL08gCAthBrRwFv20r8f
o2gsVmijpv465qL+25VN4cKWW2QzAnUNloJXTMNUuTs7sJY0C+qtqYtoL5T0uuE3
86XK480uRxrQW7qlb3TyoUSGDnRAZtUP8gj1tE/WuD2LVcfMkdJ+zg2PIiS6O+v8
yF1jE9LYra0aT15vSr+IY8mJotF2xS+CARPe1zZId9KZ7KLb3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOaH72+oEF7/xqi9mtc564elQflOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTdmZTMzMGYtZGE0ZC0z
OGRkLWFlN2YtZDBjMjg2OTdiYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwOZwaxkrnuUWAMRocnm6PcQJhQSXDIh764IzSn+S9rDYUOnmdgqAjV
lyz+dVb/28GPoy+qIZSM/yUMgBBTJGu7XJb0o10F/WiSaqq1C0OQ/Tm/3iuERtJy
2RBIrpO3ADa8lKFi8kHW5hqkNuepqR7rNURiPuA21dYQB63FIvl9GFbUD6E40m8z
D2WmhhL8mQxsLe9mO5TeaYqNUPIbbLFvIfa/25xLHke1VdWlFWIB5iHCy4DkFqIQ
IP5T596QnZDUTESx9OAaZUm9mxFXFrv+/9tkmYttoL4sQpIdnJ6Vty4PwIQrw+g0
EfiTyTqTQ0KQjxlSp5K63JRPb6XIH8A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:36:57 2025 by rpki-client