Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9ce6584-d870-358a-bb75-d831d99dc8f0.roa
File:                     f9ce6584-d870-358a-bb75-d831d99dc8f0.roa (raw, json)
Hash identifier:          nFJkk9Ef0HBf1BHJra4g4ZkDwWJoJC4Zpu0mxmiWcxQ=
Subject key identifier:   34:BD:BE:A8:B8:98:E0:9F:46:FA:A6:F4:25:23:22:30:FF:30:F8:10
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C02E6925ED671C8E85100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9ce6584-d870-358a-bb75-d831d99dc8f0.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     12008
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:02:e6:92:5e:d6:71:c8:e8:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=b01c4afe-b978-4840-9ef2-f6d75331afee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:95:78:69:f8:9a:4d:d4:dd:c6:06:56:19:fa:
                    23:5b:50:a2:97:db:bc:6f:65:2b:97:db:9c:df:68:
                    2c:44:99:97:c1:6f:39:d4:49:73:b1:08:fc:c1:d9:
                    ff:f7:88:5c:fc:54:33:28:9b:3c:42:6b:a3:d6:3f:
                    41:c6:88:82:4e:5a:8d:80:ab:d5:88:02:f1:66:50:
                    fa:6c:70:af:c8:8f:86:24:54:ea:17:83:8e:21:50:
                    9d:47:fb:c1:40:02:fd:2d:52:3f:22:a4:ad:e7:72:
                    5e:41:e3:64:54:53:a0:3d:41:30:a6:00:2d:7e:d9:
                    a2:6e:ec:32:51:8a:c5:54:37:18:4b:dc:d4:c8:67:
                    0e:aa:77:dd:b7:be:4f:08:65:fd:2a:39:2f:e9:6f:
                    d9:d1:dd:8c:af:7b:33:d7:48:b6:75:5b:3c:1b:35:
                    2b:e4:92:91:98:38:4f:27:d1:d1:46:ad:c9:25:0e:
                    63:d7:29:15:09:86:19:18:d1:c0:de:d4:71:96:13:
                    b0:b2:1c:b9:92:d7:82:b7:20:61:8c:cd:5d:0e:01:
                    51:a4:d3:cf:e9:0f:ed:f4:7b:e7:ab:26:a7:1c:99:
                    9c:18:46:2b:e6:08:99:d5:61:7f:3c:78:3b:d2:43:
                    22:c7:d7:fd:13:c8:e8:35:14:9a:0b:fe:66:32:5a:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BD:BE:A8:B8:98:E0:9F:46:FA:A6:F4:25:23:22:30:FF:30:F8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9ce6584-d870-358a-bb75-d831d99dc8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ab:22:0e:e1:df:74:74:fb:cd:ab:60:08:dd:8d:ef:c4:86:
         10:dd:f2:fa:c0:d2:18:c6:79:a7:91:49:9f:17:a0:2e:b2:93:
         5a:87:20:e1:2e:bd:63:62:82:61:78:a4:29:de:78:5b:be:ff:
         99:4d:a7:fc:d1:7b:98:ac:ea:4b:e3:94:97:bd:dc:f1:71:43:
         68:e2:71:07:71:d6:68:1f:08:bb:da:de:ff:4a:f3:3c:fc:52:
         75:53:c1:7e:be:e9:7e:85:22:39:4a:d2:af:a8:a8:ee:e9:d0:
         e0:d7:cc:3f:8f:e6:97:3f:74:af:6b:74:93:9a:6d:da:a5:9e:
         5a:58:de:80:b9:9d:c9:c8:58:0a:b5:22:38:3e:e5:b4:77:c6:
         19:13:9b:49:4c:d5:92:1e:e0:21:ed:d2:64:ad:5f:fc:f2:b6:
         55:a3:90:e4:d2:a0:87:e4:49:00:8b:ed:1b:26:d5:b7:fe:28:
         79:e6:9e:52:62:b7:e3:cf:1c:2f:ee:5e:b4:b1:18:47:ed:af:
         c6:1f:d5:0e:b8:83:15:d6:c4:7f:d9:89:76:91:4d:44:9c:12:
         9a:49:1e:38:14:5e:11:f0:33:81:5c:19:24:97:60:d5:8f:97:
         c4:1a:e0:a1:7b:8f:9f:23:51:cb:e3:fc:15:71:41:b1:2d:01:
         37:30:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:02:33 2025 by rpki-client