Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/427153eb-6ed2-39f2-ad33-a7ae0d7a50c6.roa
File:                     427153eb-6ed2-39f2-ad33-a7ae0d7a50c6.roa (raw, json)
Hash identifier:          6X5sSOOjCUfzwdZvP/HiFPwegn4yeq134PkMmeFxfM0=
Subject key identifier:   EA:3E:73:50:8C:FB:DB:FB:7A:7C:6C:0A:D0:69:52:9A:5B:FD:45:2C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0E0C38BC01BF7F6344940
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/427153eb-6ed2-39f2-ad33-a7ae0d7a50c6.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397215
IP address blocks:        156.154.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:e0:c3:8b:c0:1b:f7:f6:34:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=ff58d4e5-5486-4bad-a202-0f7ffc0f5b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:27:74:ee:15:be:4c:33:aa:d7:9e:8c:34:
                    22:b5:3d:e1:74:bd:7d:3c:09:a9:af:58:5f:dc:1d:
                    94:b5:06:4a:11:9a:c6:38:51:87:54:9e:58:ed:bd:
                    c8:8e:d1:8d:a7:0d:69:12:8c:84:f7:e3:65:54:cb:
                    32:e6:d0:d8:5d:61:43:57:15:c3:5e:d1:a4:2d:ad:
                    95:06:01:08:80:c0:08:bf:50:8e:5d:16:2c:e4:66:
                    dd:2b:f2:a8:d3:78:76:01:72:34:fd:03:fd:79:61:
                    a8:f0:48:ec:df:d1:6f:2a:02:a5:c7:54:d7:a8:5e:
                    f3:ea:5a:07:fe:29:b1:ad:51:10:63:04:b7:cb:4b:
                    5d:c3:24:70:12:d9:4a:8e:5b:d1:dc:1a:20:56:28:
                    d9:b4:75:04:b6:f6:e3:ad:08:2a:c5:4b:1a:77:32:
                    d2:28:88:07:d4:fb:80:63:10:f7:52:57:06:58:ad:
                    ea:1d:79:3c:63:fb:bb:74:4b:27:44:1b:44:c4:2b:
                    5c:aa:5a:2d:97:1c:92:48:10:85:b3:3a:32:e9:a4:
                    67:1d:3c:67:71:43:2f:a9:ff:49:eb:7c:f3:c4:39:
                    6f:41:e4:29:1a:ea:ac:64:ff:7b:d3:84:55:04:3a:
                    d3:97:d6:d1:00:a7:7e:3c:9b:bd:cc:ba:a2:5e:cc:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3E:73:50:8C:FB:DB:FB:7A:7C:6C:0A:D0:69:52:9A:5B:FD:45:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/427153eb-6ed2-39f2-ad33-a7ae0d7a50c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:54:ee:be:4d:1c:b8:0a:26:00:73:a6:96:65:f1:ed:42:1f:
         7f:c8:cb:95:2c:43:17:59:01:8c:85:fd:2a:1e:9e:a1:b2:1b:
         d7:28:97:38:80:81:a8:35:f1:d1:5d:9c:9e:db:ea:48:69:f9:
         dd:bd:c9:fa:57:8a:25:ac:33:e8:fd:cc:a2:fe:22:f8:eb:ef:
         30:50:bd:13:8f:09:22:05:d3:5c:55:f7:41:20:73:74:dc:ff:
         55:8f:ff:c2:f1:c7:3d:8b:93:a4:3f:d5:bf:46:d6:cb:39:f4:
         38:f8:04:0a:67:08:7a:43:79:8a:c3:1c:1b:ff:ac:5c:3f:1d:
         d5:ef:c8:ca:d7:04:08:6b:d6:11:a0:38:19:0a:67:23:bd:53:
         0d:d5:42:4a:c7:4d:3c:11:4e:05:56:aa:e2:3c:c7:34:8a:ae:
         87:47:b5:b2:2d:58:dc:fa:c1:09:44:7a:16:20:2d:34:6a:3c:
         d2:72:fc:e6:ab:ad:77:86:00:cc:68:e9:3c:b6:4d:56:3f:16:
         ee:a0:32:ee:cc:ca:fb:5c:9a:1e:fb:c6:cc:aa:2c:f6:38:4a:
         dc:b3:7f:b9:41:d9:96:6b:d4:44:89:ce:2f:7d:ca:14:f9:44:
         38:7c:04:22:47:38:56:a2:e0:dd:4c:3b:b1:ef:6a:33:b4:46:
         7b:87:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:03:17 2025 by rpki-client