Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
File:                     ed146ec7-7e6f-319e-866d-36b93dbadde5.roa (raw, json)
Hash identifier:          GaE5m9bh340S53lKXalpA1iLE61WnL3yDFK/8Lhs/lw=
Subject key identifier:   3B:93:58:18:A9:CA:23:F4:5A:58:BC:33:E8:00:9F:EA:3F:3D:6B:DF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CAA7FF6E0C84D0956D7D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397228
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:aa:7f:f6:e0:c8:4d:09:56:d7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=fcd8e351-c2d3-4a83-bff4-1e479fdc0bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:47:e1:8a:bc:bf:e0:8f:76:1a:76:ca:0d:
                    71:a7:39:3d:8e:89:18:0a:57:f8:00:24:e6:5d:94:
                    b3:28:af:cd:cd:24:ca:6d:ab:97:74:0d:a0:91:21:
                    02:38:81:89:0d:b6:e9:64:d0:cf:02:ac:ab:fa:a7:
                    50:c0:72:58:93:07:40:7b:f3:12:fa:71:05:ca:c7:
                    e1:f4:83:49:0e:cb:eb:7f:a3:0e:8a:45:ae:7c:03:
                    c8:9d:04:e1:eb:22:82:b9:6b:5a:15:9a:41:38:17:
                    ea:39:98:8c:1f:fd:a7:b3:08:35:3c:bf:d3:b1:b5:
                    52:8b:04:d1:27:01:75:2a:3d:c1:06:11:32:3b:a2:
                    16:e8:48:e1:04:fe:35:ff:17:4a:a7:73:09:bd:f8:
                    1c:b9:ec:a3:a4:bf:30:9f:62:8a:a6:f0:2d:92:24:
                    15:4c:df:f8:cd:1d:78:f8:54:95:d6:f3:fb:ec:2e:
                    a1:55:5b:d1:b2:21:3a:9f:49:bf:16:0a:b7:ae:de:
                    32:2e:78:ec:b2:07:25:75:40:1e:ce:88:fc:84:63:
                    0e:1c:4b:96:d6:e1:23:b2:82:26:6c:de:ab:02:81:
                    bc:9b:3d:08:bf:2d:b9:0a:a8:7e:6c:2f:c6:3e:7c:
                    8f:43:0d:d4:22:0f:03:9d:05:22:b7:fe:3a:35:0e:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:93:58:18:A9:CA:23:F4:5A:58:BC:33:E8:00:9F:EA:3F:3D:6B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed146ec7-7e6f-319e-866d-36b93dbadde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fe:6f:ce:fe:d9:53:48:de:67:46:d2:c5:9a:1a:48:c7:29:
         40:ff:15:f4:0d:9c:ab:fa:d9:1e:00:f8:52:d1:a5:e5:53:ee:
         ca:d7:2e:55:f0:5f:7b:c2:a5:8b:76:81:05:ba:68:47:9a:51:
         a2:17:29:51:7b:8b:20:7f:17:fc:fa:fa:6c:f6:0a:34:2b:e4:
         93:0c:ab:94:e8:69:fe:a5:59:30:96:8f:53:6e:04:b1:e0:cd:
         a1:65:fe:22:29:3c:11:5d:d6:da:0e:80:24:ab:f0:a9:51:09:
         c2:9c:48:e0:f9:a2:9d:ae:1f:60:8a:7b:02:6a:99:ed:9e:a9:
         6e:bc:3d:31:69:38:e0:8a:68:fd:98:3f:b6:8b:03:e7:2d:e2:
         1a:01:49:b5:03:56:8e:42:66:f0:31:70:07:71:65:54:98:16:
         17:e2:17:4f:25:2c:ff:be:61:0c:a1:90:bb:83:0f:45:72:d1:
         70:c1:b6:f4:99:2a:1c:c1:68:2c:6e:b8:8a:18:92:77:1f:ad:
         90:02:fc:1c:1b:0d:65:4b:5b:19:7e:b3:e3:de:92:c6:6c:d1:
         0c:cd:b5:32:29:0f:9a:ae:fd:83:5d:15:d9:75:89:f5:58:f1:
         b9:0c:75:db:96:d9:b5:4b:ae:6f:ec:e3:02:3a:c4:47:f5:4c:
         5a:75:2d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:43:58 2025 by rpki-client