Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/547df6b1-89ad-388c-ac3d-644e9cc71f2e.roa
File:                     547df6b1-89ad-388c-ac3d-644e9cc71f2e.roa (raw, json)
Hash identifier:          6fwoSJ9iK246Wm2IpPkK9aKTjtiV62x4pnYnYKW/w+Q=
Subject key identifier:   D8:18:0C:35:D6:D6:24:E2:DB:6C:86:0C:4A:71:77:1F:77:1D:44:C4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D9C240DDD0CB926035F0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/547df6b1-89ad-388c-ac3d-644e9cc71f2e.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397226
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d9:c2:40:dd:d0:cb:92:60:35:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=6ced2885-2e2d-4c26-9c2b-a2018fbbae11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:43:cb:c2:25:27:11:81:4e:87:85:77:48:
                    7a:1c:35:e3:27:70:f5:03:e8:3e:f4:62:51:c0:0f:
                    5e:1f:21:37:f9:99:5e:d1:c9:01:69:9b:90:bf:dc:
                    84:2f:f8:e3:4f:7b:67:12:3c:06:e7:e9:2f:91:68:
                    14:af:f5:0e:fe:25:ea:e3:82:25:c2:a7:95:20:76:
                    3b:b7:bb:d1:1e:ae:29:5d:20:4f:fb:b4:af:54:d0:
                    d7:d9:7a:78:d1:3a:84:63:6e:04:2b:d7:91:67:c4:
                    5d:f2:ab:bc:83:76:24:5c:de:37:21:d8:58:c3:9f:
                    7c:1c:13:ae:d8:ca:fd:b9:10:33:f1:01:93:51:2a:
                    c4:10:cb:5a:b1:af:d5:32:19:aa:f9:ed:88:ee:16:
                    c9:11:3b:ba:1f:56:3a:d2:64:06:f1:7f:f8:60:c7:
                    2a:2c:cf:8a:22:d9:aa:0a:ee:ff:f1:6a:cc:cc:08:
                    33:9d:52:ae:24:25:ff:04:4e:f5:c7:8c:11:61:ae:
                    1b:f0:46:57:1f:b1:de:0e:1c:51:70:1d:96:d3:8e:
                    c7:36:4e:af:96:cd:5c:e4:a6:56:cd:55:b7:b7:4b:
                    b4:62:c3:e4:f2:74:b3:48:48:b3:31:0b:66:b4:af:
                    6b:62:c8:6b:b7:08:50:4b:05:09:a4:61:33:d9:d0:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:0C:35:D6:D6:24:E2:DB:6C:86:0C:4A:71:77:1F:77:1D:44:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/547df6b1-89ad-388c-ac3d-644e9cc71f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:de:5e:b4:fe:17:1c:38:b7:b2:aa:7a:d4:7a:38:56:0f:90:
         df:72:f6:7b:45:02:96:1d:d2:b2:d3:62:cf:e1:c5:02:aa:3d:
         06:19:62:54:1b:f6:80:04:5d:df:bc:f2:7e:2f:31:b7:49:9d:
         ce:60:f5:c2:8f:d0:e5:87:c9:59:37:b0:b7:37:1e:a1:69:b4:
         68:7c:72:4f:c8:b9:2a:e5:35:02:3e:a5:27:dc:52:ff:96:88:
         d8:21:e1:70:10:41:fc:09:10:ac:24:b3:04:a1:4b:21:2b:3f:
         f3:78:ea:21:14:42:ac:8e:04:9d:0c:7b:9b:af:f8:97:fb:11:
         0d:ee:83:bb:26:cd:51:9a:4d:84:77:5f:7e:ed:18:41:43:58:
         b2:7c:c4:c7:7c:9a:f8:f0:07:a0:0a:cd:a3:d9:28:dc:b2:35:
         37:f8:75:94:be:b3:97:83:b9:30:bc:64:19:b6:3c:ad:63:78:
         7a:bf:21:08:58:37:ce:40:0c:d0:33:64:64:d7:af:0d:a3:58:
         e6:df:1a:2a:95:ec:6f:c1:1b:af:5d:ae:5f:3c:97:9e:a0:7e:
         85:41:dc:37:a9:b2:e1:1b:8c:1b:5e:64:92:5f:5d:3a:d8:6e:
         51:42:3d:21:e8:e3:cd:ac:bd:b1:57:35:89:ae:9a:c8:4e:b5:
         d6:a5:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:22:23 2025 by rpki-client