Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7c8f829-5e73-37eb-b9a9-ca5dfefb0f34.roa
File:                     f7c8f829-5e73-37eb-b9a9-ca5dfefb0f34.roa (raw, json)
Hash identifier:          wOwMd1bO7x4FJsM6PSj/+VukWCi8/96ox61A0SyhXTQ=
Subject key identifier:   DD:F3:64:38:00:92:33:03:20:30:CF:A9:C8:71:E0:3C:EC:81:9A:04
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C94F0D8022FD8B1805B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7c8f829-5e73-37eb-b9a9-ca5dfefb0f34.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397220
IP address blocks:        156.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:94:f0:d8:02:2f:d8:b1:80:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=33f8518b-1dcb-4130-abf3-30da3a26a493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f6:72:59:5a:ae:45:f9:7b:3a:ae:49:57:1b:
                    11:60:20:b3:62:82:d5:99:2f:98:e9:69:ce:20:be:
                    ed:4e:80:71:b4:7b:35:2e:c9:b0:7e:9d:26:c9:74:
                    6e:61:a5:e2:a2:6a:71:08:e4:a6:f7:b5:ef:cb:7c:
                    e5:cc:9c:bd:96:ed:ae:45:ab:ad:43:5a:bc:e7:26:
                    57:ee:dc:2d:bb:1f:1f:1c:5c:04:15:64:d5:e4:be:
                    7e:43:8e:22:23:6b:e5:17:61:7e:5a:9a:78:3b:55:
                    7f:e9:0f:d8:ac:56:20:d6:9b:56:d9:44:45:40:24:
                    54:b9:28:5c:37:c0:8d:77:40:0c:b9:8c:d7:3e:58:
                    70:3f:d7:ad:46:eb:8d:ac:b2:7d:f6:39:07:2f:54:
                    6a:0d:78:80:9f:f8:5a:f4:71:9e:47:b3:e8:d4:dd:
                    16:43:fe:76:72:f8:be:68:82:9f:4b:6b:2b:81:e4:
                    5a:57:6f:a5:c8:d5:c4:e8:16:ce:b7:6c:89:7d:2f:
                    60:83:59:9f:1b:ec:ea:8f:81:0b:c1:51:29:62:32:
                    69:7a:0b:ec:77:93:ac:df:94:ab:29:a1:16:9e:20:
                    0a:73:cf:ba:4f:03:12:9d:58:eb:e9:8e:4d:13:40:
                    68:ee:5d:44:a4:42:42:b7:d6:5c:61:69:70:28:f6:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F3:64:38:00:92:33:03:20:30:CF:A9:C8:71:E0:3C:EC:81:9A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7c8f829-5e73-37eb-b9a9-ca5dfefb0f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:bd:55:5f:4f:e3:e6:5d:e7:17:5a:ea:a0:07:b6:07:8b:
         98:28:46:6a:38:6f:7c:f5:78:42:a4:a8:0d:a2:cf:eb:61:e1:
         77:22:03:25:7e:14:3d:e7:27:50:a6:ba:e9:a8:ee:c8:1c:72:
         07:d8:30:32:c3:64:5c:dd:f7:64:b7:7c:da:09:4b:e5:7c:30:
         50:62:4e:78:78:61:74:35:7f:08:0f:54:e1:0d:56:e0:7d:ae:
         1a:dc:75:ab:dc:68:0c:42:8b:93:7a:72:2e:6d:cd:0a:e9:50:
         ba:94:6d:ac:8c:ed:de:44:4d:96:da:6e:b4:ac:a2:e5:66:ff:
         35:9f:ed:2e:3d:98:f0:20:5d:13:f1:08:63:50:23:d2:4e:fe:
         8f:1d:dd:7e:1a:29:3e:36:a1:12:58:64:0f:0b:9f:53:17:c0:
         87:82:b2:c5:28:d6:58:08:f5:ab:51:81:87:70:6e:92:6b:4c:
         78:fa:55:ef:a3:12:a7:58:0d:2a:59:c9:4d:01:22:90:76:4c:
         b9:09:ad:1b:2e:b1:10:3d:37:50:50:1b:cd:b1:84:9b:bf:3f:
         f1:89:c5:06:8c:6b:72:f7:36:7a:91:0f:db:a0:00:d9:cb:8b:
         54:70:23:b1:b7:f6:c0:91:a8:31:b2:75:db:06:74:36:77:b1:
         1c:47:4f:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJTw2AIv2LGAWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
MzNmODUxOGItMWRjYi00MTMwLWFiZjMtMzBkYTNhMjZhNDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfZyWVquRfl7Oq5JVxsRYCCzYoLVmS+Y6WnO
IL7tToBxtHs1Lsmwfp0myXRuYaXiompxCOSm97Xvy3zlzJy9lu2uRautQ1q85yZX
7twtux8fHFwEFWTV5L5+Q44iI2vlF2F+Wpp4O1V/6Q/YrFYg1ptW2URFQCRUuShc
N8CNd0AMuYzXPlhwP9etRuuNrLJ99jkHL1RqDXiAn/ha9HGeR7Po1N0WQ/52cvi+
aIKfS2srgeRaV2+lyNXE6BbOt2yJfS9gg1mfG+zqj4ELwVEpYjJpegvsd5Os35Sr
KaEWniAKc8+6TwMSnVjr6Y5NE0Bo7l1EpEJCt9ZcYWlwKPaWqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3zZDgAkjMDIDDPqchx4DzsgZoEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjdjOGY4MjktNWU3My0z
N2ViLWI5YTktY2E1ZGZlZmIwZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqIvVVfT+PmXecXWuqgB7YHi5goRmo4b3z1eEKkqA2iz+th4XciAyV+
FD3nJ1Cmuumo7sgccgfYMDLDZFzd92S3fNoJS+V8MFBiTnh4YXQ1fwgPVOENVuB9
rhrcdavcaAxCi5N6ci5tzQrpULqUbayM7d5ETZbabrSsouVm/zWf7S49mPAgXRPx
CGNQI9JO/o8d3X4aKT42oRJYZA8Ln1MXwIeCssUo1lgI9atRgYdwbpJrTHj6Ve+j
EqdYDSpZyU0BIpB2TLkJrRsusRA9N1BQG82xhJu/P/GJxQaMa3L3NnqRD9ugANnL
i1RwI7G39sCRqDGyddsGdDZ3sRxHT40=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:24 2025 by rpki-client