Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8f421e2-a7c0-32b6-b18a-49a4c2a32faa.roa
File:                     f8f421e2-a7c0-32b6-b18a-49a4c2a32faa.roa (raw, json)
Hash identifier:          0R2U+/vkGu+EhH5YHG+m6VDsdKbh9O31k5UofKkZmrI=
Subject key identifier:   20:34:3B:FE:35:18:A3:F2:97:00:1C:1A:AF:30:57:11:82:83:62:19
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CAB961BBE3D75C008B900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8f421e2-a7c0-32b6-b18a-49a4c2a32faa.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        156.154.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:ab:96:1b:be:3d:75:c0:08:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=28541ef2-9bc0-4673-803d-426409b3ba7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:0e:69:13:10:24:75:4b:18:d2:d3:bf:50:
                    d3:11:36:94:bc:74:b3:a2:0f:e9:bc:84:cb:35:fe:
                    6b:d8:f9:13:09:8a:ab:a6:e0:ba:f4:58:9c:e1:06:
                    cf:e9:a0:17:0f:79:4a:64:0d:be:d9:4f:53:56:dc:
                    15:14:f8:6c:9d:c9:ac:72:0c:99:b8:d9:e7:bc:17:
                    4a:56:75:3b:31:a4:f2:d4:d4:c9:d3:ed:0c:6d:09:
                    05:2e:2c:a8:cc:79:c6:90:46:b5:21:42:46:07:f2:
                    03:87:32:5e:aa:d4:d0:1c:ed:aa:98:a3:e6:17:1e:
                    28:ae:d4:8b:4e:15:0e:b5:4c:33:e2:0a:c9:c3:ef:
                    1b:76:a2:b9:ba:66:6f:4f:49:29:ef:a7:40:b0:4f:
                    a4:c6:d0:2d:32:98:ce:70:58:2b:94:14:30:26:cf:
                    b9:df:62:d2:b6:e1:db:f5:a9:c3:e2:f4:d2:31:65:
                    d4:4c:bf:52:19:7c:b7:d5:8e:5e:47:d6:b0:44:9f:
                    da:ce:f2:55:98:bb:78:2e:97:ed:c3:ce:ba:e4:c6:
                    82:06:d8:43:e9:c6:af:a2:9b:18:e6:72:5a:f6:ca:
                    e1:7e:15:19:ee:cf:a5:9c:7b:75:ae:e0:48:e9:59:
                    24:55:24:83:8c:40:13:84:ee:1a:63:3a:2b:96:3a:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:34:3B:FE:35:18:A3:F2:97:00:1C:1A:AF:30:57:11:82:83:62:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8f421e2-a7c0-32b6-b18a-49a4c2a32faa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:c7:7f:97:fc:fa:48:3b:03:82:2b:85:d4:ee:7d:15:a1:
         98:8e:21:88:e0:31:69:bf:b2:3c:71:30:a9:ea:ad:4d:b5:84:
         a9:a1:df:92:67:25:dd:fa:38:18:d4:56:0f:01:52:d7:5d:ad:
         a5:81:f9:6c:24:ea:52:54:d5:3d:6e:0b:2c:58:eb:9c:b9:b4:
         ce:a8:75:d2:41:7a:cd:7a:e5:cf:8d:52:b6:2d:90:2b:90:d5:
         9c:d5:ee:03:d1:67:fa:b1:c7:bb:94:95:31:6e:f3:03:e5:b1:
         3b:f1:f9:62:44:cc:60:98:0c:0e:01:f6:3d:57:0a:6d:fd:6c:
         3c:d5:2f:a2:54:2c:26:7c:6d:6b:fd:21:e0:25:ce:c6:a6:49:
         73:6d:fb:6e:15:bd:ba:8d:81:fe:6e:31:93:74:77:3f:fb:d8:
         d8:f8:1b:c9:6d:32:cc:16:ce:b9:34:e7:d2:d4:a0:17:2f:93:
         d0:31:28:96:49:bc:45:fa:3f:7d:57:07:44:34:aa:a7:32:d5:
         63:27:2d:f5:42:bd:66:37:76:42:ee:c9:af:34:a4:09:ab:5d:
         6b:f3:6f:d9:c6:40:2a:f2:63:b2:aa:a5:6a:7a:9a:d4:40:b3:
         55:ed:b4:9d:ff:f9:cf:33:fc:4f:2c:cd:f1:e9:13:11:5e:b2:
         7d:55:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:52 2025 by rpki-client