Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbf91949-c8ce-376e-b497-653317600419.roa
File:                     fbf91949-c8ce-376e-b497-653317600419.roa (raw, json)
Hash identifier:          Qwde6LNqx0EGaxJuCz90fxDMzkzdofpJ/c+eOB3j7WA=
Subject key identifier:   8F:E6:84:E5:6D:33:52:6D:18:99:AD:FA:94:88:E9:74:16:3F:A1:1D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CA766E863A3FADE404280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbf91949-c8ce-376e-b497-653317600419.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397216
IP address blocks:        156.154.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:a7:66:e8:63:a3:fa:de:40:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=a2f7b61d-44e2-4aa8-8828-8b4b6e8d58a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:85:69:b7:63:b0:0a:fa:22:26:a5:6b:e0:
                    88:12:6e:7b:4b:eb:84:77:84:55:fe:ac:80:8f:51:
                    92:08:76:64:cd:17:37:03:03:f6:51:4e:54:4c:f3:
                    22:76:ac:18:1a:94:8c:1f:32:99:ba:e3:f2:b5:c4:
                    ff:92:fc:24:b3:4f:b2:12:16:b7:71:0a:87:20:b9:
                    13:79:54:d5:3d:f8:b6:dd:70:f8:16:41:50:69:e1:
                    3c:77:e2:0b:9f:56:f6:e0:43:e4:5f:cf:0f:0f:81:
                    cf:38:e2:74:e4:98:60:a8:dc:1f:70:fa:a8:1c:45:
                    05:4c:bd:09:7a:87:90:d1:30:30:26:c9:0d:0a:26:
                    07:49:61:d5:9b:88:3f:53:32:22:f8:fd:9f:d1:39:
                    af:ae:11:3b:d2:b3:55:19:89:6b:64:ea:31:eb:c6:
                    94:57:1f:fd:aa:e8:1d:9f:25:7f:03:a5:5c:70:1f:
                    42:27:ba:3f:c2:12:60:a9:5a:a7:97:35:ea:9b:62:
                    f4:d7:1b:2a:7f:6a:eb:de:7d:22:d4:36:33:ba:c6:
                    a9:33:58:45:88:35:83:f1:c0:ef:61:0c:0b:73:5e:
                    e7:ee:9c:27:8f:cd:a0:2e:ea:08:0f:6d:81:a4:83:
                    b5:09:c0:77:6a:62:51:2b:ba:23:88:19:94:eb:31:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E6:84:E5:6D:33:52:6D:18:99:AD:FA:94:88:E9:74:16:3F:A1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbf91949-c8ce-376e-b497-653317600419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:79:7e:2b:94:a2:d5:8a:4e:6b:25:1a:00:73:62:46:23:
         7e:b8:bc:b9:1a:10:7c:6c:de:0a:76:59:06:93:b8:d2:d0:3b:
         f4:1a:52:a9:0c:d3:66:92:3f:6e:0c:a1:87:b3:8a:22:1e:4e:
         fb:94:20:9e:e3:64:21:28:8f:75:7f:ee:15:77:c0:a5:ad:3b:
         22:8f:2c:5e:6c:ca:9a:e5:d5:dc:d4:b9:ea:78:fe:10:fb:5b:
         1c:9b:45:19:26:02:71:70:d1:33:46:04:e7:07:94:52:19:60:
         50:f2:d0:98:a7:31:40:d9:d8:3a:53:6e:36:39:45:1c:d3:02:
         53:12:49:6d:77:e9:3f:1b:71:65:fe:67:01:c1:29:4f:aa:bb:
         00:dc:6d:c4:03:7a:87:55:1a:28:e1:83:fa:16:29:5f:70:10:
         f5:4c:23:bd:43:0e:0f:ba:e0:6c:0d:16:01:94:5c:3c:ec:bc:
         eb:b1:42:e2:91:68:49:f8:b8:50:bd:1f:64:ef:be:0c:16:63:
         ec:8c:35:34:3f:ef:db:32:79:22:03:8f:61:51:5d:74:87:d7:
         49:df:77:53:39:f4:96:f3:46:d2:61:dc:d0:28:62:04:cc:41:
         d2:49:bf:a4:7c:15:65:6b:c0:da:c2:34:46:fc:6e:f1:23:03:
         99:9a:e2:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKdm6GOj+t5AQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
YTJmN2I2MWQtNDRlMi00YWE4LTg4MjgtOGI0YjZlOGQ1OGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM2FabdjsAr6Iiala+CIEm57S+uEd4RV/qyA
j1GSCHZkzRc3AwP2UU5UTPMidqwYGpSMHzKZuuPytcT/kvwks0+yEha3cQqHILkT
eVTVPfi23XD4FkFQaeE8d+ILn1b24EPkX88PD4HPOOJ05JhgqNwfcPqoHEUFTL0J
eoeQ0TAwJskNCiYHSWHVm4g/UzIi+P2f0TmvrhE70rNVGYlrZOox68aUVx/9qugd
nyV/A6VccB9CJ7o/whJgqVqnlzXqm2L01xsqf2rr3n0i1DYzusapM1hFiDWD8cDv
YQwLc17n7pwnj82gLuoID22BpIO1CcB3amJRK7ojiBmU6zERYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/mhOVtM1JtGJmt+pSI6XQWP6EdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmJmOTE5NDktYzhjZS0z
NzZlLWI0OTctNjUzMzE3NjAwNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKqeX4rlKLVik5rJRoAc2JGI364vLkaEHxs3gp2WQaTuNLQO/QaUqkM
02aSP24MoYeziiIeTvuUIJ7jZCEoj3V/7hV3wKWtOyKPLF5syprl1dzUuep4/hD7
WxybRRkmAnFw0TNGBOcHlFIZYFDy0JinMUDZ2DpTbjY5RRzTAlMSSW136T8bcWX+
ZwHBKU+quwDcbcQDeodVGijhg/oWKV9wEPVMI71DDg+64GwNFgGUXDzsvOuxQuKR
aEn4uFC9H2TvvgwWY+yMNTQ/79syeSIDj2FRXXSH10nfd1M59JbzRtJh3NAoYgTM
QdJJv6R8FWVrwNrCNEb8bvEjA5ma4kw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:57:25 2025 by rpki-client