Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bf7bc71-f62e-3f85-9ef4-268a065c3cd9.roa
File:                     5bf7bc71-f62e-3f85-9ef4-268a065c3cd9.roa (raw, json)
Hash identifier:          nC04VLXVtpms5EURQeY6VM6y7abLbgd/d6Ppa0O6mrE=
Subject key identifier:   49:7F:8B:22:35:DA:C0:CC:A9:8D:F4:10:D5:0D:4B:28:73:7E:22:4D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0BEC1EEA0B4E00DADC060
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bf7bc71-f62e-3f85-9ef4-268a065c3cd9.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397234
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:be:c1:ee:a0:b4:e0:0d:ad:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=77d5c719-cc94-48a9-8128-93c01400ed5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:2f:dd:96:c5:b9:e7:99:fa:0c:de:7c:47:
                    83:3e:f8:0c:df:33:80:c0:ac:96:75:f3:a3:73:15:
                    3e:c5:7e:84:ba:ac:03:1b:94:70:e3:3e:56:a7:73:
                    2c:5b:45:7a:5c:8a:cb:f2:70:71:37:43:95:52:a1:
                    e4:63:10:c7:ea:54:0d:98:bf:d6:bf:b6:97:c8:30:
                    82:e9:ff:17:23:4f:61:a0:d5:15:b2:c6:64:cf:bd:
                    24:8b:9e:95:20:af:e1:85:f1:f0:78:af:49:c8:91:
                    f6:e7:52:bb:1d:e3:16:54:31:d1:27:1d:80:59:8a:
                    f7:1c:2e:a4:48:9d:cd:95:b4:ec:2d:92:d9:9f:e7:
                    15:a0:c2:82:ed:f6:7c:1d:43:d0:ff:7e:17:4b:4a:
                    4d:5f:13:72:82:b7:cd:a4:aa:74:e8:d9:cc:22:6d:
                    5c:5b:ad:11:32:cc:fb:07:3b:4b:4f:0a:4e:fc:85:
                    96:82:b8:f7:99:be:7c:67:84:52:79:bd:50:28:9a:
                    fd:3d:95:54:8d:18:24:90:87:fb:ee:2a:92:8c:06:
                    e9:e2:ef:c0:d1:e6:a5:b6:16:82:27:68:bb:51:eb:
                    f7:39:db:e1:c5:54:56:96:a4:91:0d:84:2a:75:39:
                    fe:aa:a3:06:27:58:df:85:96:0d:3f:74:66:27:42:
                    6b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7F:8B:22:35:DA:C0:CC:A9:8D:F4:10:D5:0D:4B:28:73:7E:22:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5bf7bc71-f62e-3f85-9ef4-268a065c3cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e8:92:c3:6c:53:4f:de:a4:ee:07:b1:f9:bb:b5:d8:ee:c9:
         e8:10:79:5a:c8:9d:81:5e:db:96:5a:26:80:8e:5b:bd:4a:ac:
         d7:5f:46:83:b9:bb:79:ca:5b:0f:48:1b:8e:75:fd:66:f9:fe:
         67:9d:4d:38:a3:aa:2f:fd:e0:c5:02:51:d0:59:7a:03:64:9e:
         28:25:7a:82:af:90:c1:a5:a3:cf:b7:63:ca:33:11:a4:7d:bd:
         aa:8b:38:f4:4f:00:a2:cb:e7:ee:45:01:fa:2d:a6:9d:50:17:
         9c:f3:eb:77:2e:4f:aa:d3:9f:6a:19:a8:70:0c:fd:08:d6:90:
         e9:32:b6:92:1a:16:d3:c3:3a:a6:03:b3:13:71:34:63:3f:20:
         08:3e:4b:4b:ed:e5:5b:71:0d:39:39:9b:c2:bb:4f:df:12:8c:
         41:73:9a:b3:61:31:c4:14:6b:e8:42:93:d1:69:6a:d5:fe:18:
         67:cf:b4:39:68:5b:41:75:ad:61:fd:a3:8e:f6:9f:b4:33:65:
         57:97:a3:81:c0:8d:60:ac:43:01:18:9b:c1:5b:ee:00:a3:e9:
         11:4a:cb:05:8d:bc:fc:61:40:82:9a:84:52:38:6d:03:bd:23:
         df:97:fc:42:1f:18:3d:d5:13:5e:af:05:01:59:45:ef:c4:d5:
         21:a6:f4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:35 2025 by rpki-client