Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b5b694b-8b9e-3982-9a29-a348449737a5.roa
File:                     8b5b694b-8b9e-3982-9a29-a348449737a5.roa (raw, json)
Hash identifier:          S2xX/9t5U+a5BR9cSoRE4AxNtQqgNQrzjW/XWJSkpp4=
Subject key identifier:   35:52:77:61:73:0B:14:00:60:1B:74:F0:32:98:ED:62:A1:0F:CD:51
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68263407481A14723294B180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b5b694b-8b9e-3982-9a29-a348449737a5.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397215
IP address blocks:        156.154.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:34:07:48:1a:14:72:32:94:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=7096c956-43c0-42a9-b989-c11a3e5a4072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:a7:f5:0a:20:58:11:fb:0b:25:2c:20:7a:
                    f0:88:7f:bd:55:90:b7:08:70:50:cb:be:d3:38:e9:
                    1b:80:4c:27:57:99:87:96:58:09:d8:a6:ea:ab:bf:
                    0f:6f:55:8a:f5:7c:d4:19:93:07:d2:bc:2b:36:bf:
                    5a:79:76:27:23:d1:c7:ff:a4:4e:27:11:e4:a4:6a:
                    14:d5:8a:53:43:8a:76:bd:a8:69:6a:6c:60:28:17:
                    0e:15:fb:00:5f:0f:ed:fb:e8:34:8c:7a:d2:15:62:
                    89:48:46:18:0c:75:2d:99:3b:f7:ec:29:f4:b2:be:
                    c8:31:ae:f1:0e:cd:60:25:b4:36:0a:36:34:eb:9d:
                    c3:e8:fe:39:cc:99:9b:30:4b:ea:32:40:6f:97:ef:
                    47:53:5a:f6:1c:da:46:8c:a4:3d:a0:42:2e:5c:38:
                    2f:2e:dc:6d:7d:d4:dd:27:ae:ea:61:26:55:61:ca:
                    3e:88:15:56:82:d1:65:c8:d7:73:02:6d:e8:20:a6:
                    7c:21:79:e9:c5:08:65:21:a2:b7:12:a0:91:f3:76:
                    a7:86:95:5d:ad:0e:92:ce:97:7f:cb:fc:e4:22:c4:
                    da:f6:eb:4c:41:87:09:94:ac:3c:80:3b:05:95:41:
                    84:6a:c2:db:d1:d2:5d:95:60:e8:31:ac:e5:80:a2:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:52:77:61:73:0B:14:00:60:1B:74:F0:32:98:ED:62:A1:0F:CD:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b5b694b-8b9e-3982-9a29-a348449737a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:31:52:19:97:41:ce:32:9a:1c:7b:6c:c8:f0:ad:de:28:19:
         af:3e:a3:f0:0f:a7:e7:90:02:c6:5d:0f:0a:2d:08:c0:5e:be:
         45:82:86:e5:b0:52:f7:c8:7c:29:07:eb:8b:d4:ef:3d:1d:6d:
         69:45:cc:4f:c9:a4:87:49:cc:a1:b0:0c:b9:29:80:7a:c1:f4:
         fa:11:4e:11:74:ef:e5:56:90:f8:0e:aa:f8:41:98:fa:d4:4d:
         5d:bd:a1:47:e2:e1:27:6d:3b:c9:7f:2d:00:35:bc:ba:9e:e7:
         4a:76:17:1a:f7:fb:4f:cc:45:1d:70:a7:52:67:a5:8b:48:50:
         8b:4c:68:15:0c:87:e7:a4:ca:a2:36:fb:c3:34:25:ad:a0:18:
         d8:55:42:17:90:78:fe:33:c9:60:e4:dd:ee:0e:75:7e:be:fc:
         c6:6a:93:51:60:fb:51:22:0a:22:cd:d9:15:b5:d1:4e:e0:03:
         1b:c5:99:50:46:b8:fc:e1:84:4c:5e:32:be:7a:07:3f:48:bd:
         d4:dd:70:09:2a:99:20:bf:67:8f:11:63:39:a6:75:94:ad:7b:
         7c:b2:bf:51:92:28:27:f5:23:a1:27:13:1d:e9:30:7b:77:ae:
         80:13:0b:5f:8d:52:31:b3:00:71:67:f3:bc:68:74:d5:de:c2:
         97:6d:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:48 2025 by rpki-client