Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8047c73f-466e-3626-9cf7-14a860a18710.roa
File:                     8047c73f-466e-3626-9cf7-14a860a18710.roa (raw, json)
Hash identifier:          La0BL94w8j9wyyKkyMLYmA+EEYAkxvHskm/pnDaCoeI=
Subject key identifier:   A9:B3:EF:06:2B:25:53:93:6C:69:E2:FD:0A:0E:8A:0C:23:93:FA:CE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0DBBF4FEB574A49CEBD00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8047c73f-466e-3626-9cf7-14a860a18710.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397227
IP address blocks:        156.154.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:db:bf:4f:eb:57:4a:49:ce:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=7f07eb4e-a9b1-4520-ac2d-622504ce7f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:54:ae:6b:30:e3:e6:cb:39:8d:db:ec:7f:
                    47:7f:c4:de:e7:29:6d:28:c2:b4:f6:39:8a:d3:53:
                    52:55:de:8d:b7:d6:87:2f:31:3e:70:8b:85:67:6f:
                    39:ce:b9:82:98:77:1d:de:64:48:02:c4:10:30:a1:
                    73:03:de:f4:47:a4:3a:0b:ed:6d:51:ef:a8:e9:2f:
                    b3:8e:98:7e:c6:e4:09:e8:e9:5b:57:85:f0:97:8d:
                    3d:dd:5d:7c:01:ce:05:0d:79:bb:a9:50:0b:e9:2d:
                    eb:75:26:39:43:6a:d1:0c:29:66:ab:f9:84:ae:42:
                    91:5a:5b:8e:06:19:7a:96:15:85:4b:b4:53:bc:36:
                    e7:64:d9:99:43:5c:44:fa:ce:c8:34:11:a5:fa:a3:
                    af:7a:bd:e0:e9:89:e3:6a:f2:dd:6f:9b:1f:2b:23:
                    f5:9c:14:49:ed:8f:cb:c4:15:c2:56:97:06:aa:88:
                    43:14:52:04:4e:53:84:37:b3:e0:a2:02:a5:34:08:
                    1f:c3:25:90:1f:27:66:b4:80:31:c0:b8:a3:d6:9f:
                    d7:a2:ec:c5:88:54:f7:ec:31:69:d6:84:8e:e1:fa:
                    0d:90:9c:12:5a:3b:48:64:e4:9f:50:f7:4c:9e:01:
                    cf:54:9e:ab:74:8c:53:6f:0d:37:54:f5:5f:05:1c:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B3:EF:06:2B:25:53:93:6C:69:E2:FD:0A:0E:8A:0C:23:93:FA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8047c73f-466e-3626-9cf7-14a860a18710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:44:11:e0:05:18:48:9a:37:d1:5a:8e:39:a9:01:4f:0b:16:
         ed:b6:0e:d2:9a:0a:4c:45:10:b3:b3:0f:de:27:92:8c:6a:4c:
         36:af:96:55:88:8c:93:b4:db:24:86:c9:c2:60:ec:82:2a:78:
         88:72:c7:79:16:c7:f2:e5:3f:6b:03:d8:a5:4e:72:5a:35:ea:
         6e:08:e9:ff:75:6a:a3:de:02:01:a6:c6:a0:bd:c0:53:cd:fc:
         e2:13:f1:83:9e:37:85:ca:cc:51:ee:fe:49:e4:fa:36:54:11:
         6c:17:15:e5:fd:fe:fb:8d:23:b3:97:a8:7b:b5:41:2f:ef:48:
         8a:12:b2:6b:20:bf:81:81:b2:8a:44:b2:81:fc:72:1e:47:ac:
         bc:09:b4:bf:1a:f5:b8:d6:67:b3:a7:8e:93:a7:27:9f:47:4b:
         af:d2:08:31:f8:0b:a5:b0:25:91:a0:84:98:fa:c8:1c:15:a5:
         e7:02:a8:85:b1:00:db:d2:ad:8c:04:9b:4d:ef:df:ae:7f:14:
         a5:8e:68:4b:e8:b7:9e:b5:7f:14:ae:ff:3d:d2:03:8f:d9:ac:
         ff:c4:95:5b:04:c5:73:7f:aa:a0:2c:dc:8a:19:a2:0e:03:8f:
         9f:c0:75:4b:e1:63:b9:79:fe:5b:d4:4f:00:f3:41:fe:12:4f:
         3d:65:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:49 2025 by rpki-client