Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa
File:                     f206ae86-3c5f-3629-9092-609e9f195de2.roa (raw, json)
Hash identifier:          9Ir5hCV4RcJWOGwOTUwc7D/0+A+Ova2C2vmTj9H9H6c=
Subject key identifier:   0F:E0:46:E8:55:A3:DD:8A:55:9B:6F:4F:5D:CE:1F:6B:1A:60:CE:A0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CA556E494955C3F13F500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397220
IP address blocks:        156.154.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:a5:56:e4:94:95:5c:3f:13:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=e2bade2e-c510-4cf7-a1a5-d8a4c0ef67e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ba:a4:4e:83:63:7f:cf:22:ee:c2:6b:46:57:
                    8a:a3:8d:77:d1:4c:05:1c:a5:d2:81:fd:91:e8:64:
                    4e:25:77:28:cd:0f:49:31:fc:d5:ab:6c:50:ff:e6:
                    2b:e8:2a:52:2e:4d:c2:a5:f1:61:72:16:49:49:db:
                    77:14:b3:a8:59:9c:95:4a:39:0c:66:35:e0:9b:16:
                    d5:4f:1b:5f:51:e4:ef:9c:b5:d2:b2:00:49:f6:4e:
                    23:ed:00:97:08:9a:51:a9:3b:35:0a:ae:fe:65:ac:
                    3d:2a:02:ef:8a:4a:80:b4:b8:3d:67:f5:a9:b1:cc:
                    4c:ed:c6:34:07:d1:de:03:b0:62:23:6a:0c:00:b0:
                    98:71:9f:86:64:04:b7:d5:5c:be:ff:6b:10:70:b6:
                    cf:2f:41:76:01:73:ae:c8:d5:43:c0:d1:e8:05:34:
                    b1:c3:0b:31:79:f3:ee:8e:4c:66:7b:ed:d8:15:a1:
                    4b:f5:db:09:d6:94:d1:98:6c:fc:d8:5b:71:00:b0:
                    e4:06:f5:59:23:a1:1d:eb:fe:25:ca:a7:4b:b6:bf:
                    28:11:e1:05:a8:97:bd:1e:24:0f:0b:76:8f:59:b0:
                    37:d9:59:32:76:9a:e5:a2:a0:88:b1:1d:02:a1:b2:
                    99:3a:c6:a9:fc:c5:f2:20:f7:89:50:1b:f8:37:33:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E0:46:E8:55:A3:DD:8A:55:9B:6F:4F:5D:CE:1F:6B:1A:60:CE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ec:3a:da:40:98:a5:2e:95:e8:e4:2c:4b:43:a0:9c:89:72:
         47:dd:d5:51:54:8c:1b:ae:1e:a1:71:37:8c:61:95:99:f3:80:
         54:fb:65:c6:c1:91:f6:fd:f0:9d:ef:92:b5:4c:16:88:72:7b:
         c3:ac:63:35:57:e9:b0:ac:21:0b:42:75:36:e9:64:b7:bb:06:
         6d:9f:bf:7a:32:e7:ce:bc:7f:9b:47:37:11:26:7f:01:6a:6b:
         4e:7d:0c:3d:a9:ea:f1:f0:a9:2c:4e:92:42:c1:77:a2:92:9c:
         99:31:37:34:9a:c0:a7:f1:bb:16:1e:71:93:79:f9:67:9d:8b:
         9d:e1:17:60:ae:20:4a:bc:2f:e5:0b:3e:26:3b:06:52:43:63:
         8e:fe:39:23:bf:f8:38:6c:03:3e:24:1a:83:42:b8:55:47:07:
         8c:31:84:63:02:16:04:cf:01:22:02:9b:81:c3:31:55:00:8b:
         49:50:50:20:26:96:a0:30:8a:de:2d:05:30:1a:00:10:c3:70:
         bf:a6:1e:aa:4f:8d:b4:c9:21:41:b6:1b:4c:1a:d2:c8:80:2d:
         50:11:02:3b:ff:6e:fe:b4:74:12:fe:ed:30:22:b0:8b:54:0c:
         78:e0:0b:55:cc:7d:e4:b2:60:21:46:5c:f3:fc:41:b0:d0:96:
         32:51:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:26 2025 by rpki-client