Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aafb6155-52c1-3131-ad8d-45ae2f608420.roa
File:                     aafb6155-52c1-3131-ad8d-45ae2f608420.roa (raw, json)
Hash identifier:          EGNmux9XdpZoc2Msv0ZQmw1YOFaqhc2EUwrxTva7EYU=
Subject key identifier:   F1:57:98:9A:AA:73:0C:CB:52:B6:C9:DD:2C:64:F6:EA:F9:1C:3F:54
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D4CED397409A2868E860
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aafb6155-52c1-3131-ad8d-45ae2f608420.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397237
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d4:ce:d3:97:40:9a:28:68:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=708aa748-2e9b-45b2-a144-bcdb22af7518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:83:77:ff:99:9f:32:88:98:8a:75:62:6c:
                    ba:c6:15:a1:1c:8b:f6:37:f6:e4:66:ba:e3:01:e8:
                    b9:b4:26:f3:34:76:b3:f8:14:7d:ca:d3:41:5b:e8:
                    93:7c:d8:db:dd:f0:85:af:c7:e6:73:f7:f7:25:b0:
                    75:2b:24:df:af:59:f0:45:51:bf:28:d1:cd:cb:8f:
                    cc:23:59:4d:d0:2d:6a:7f:0a:b1:d5:04:af:14:d3:
                    c9:e7:87:72:f5:63:4e:2a:f8:58:a4:8f:00:87:b6:
                    b0:d1:21:78:56:1a:db:29:3f:36:76:58:4f:fa:1a:
                    f6:91:50:99:46:60:3c:6f:b1:6c:03:cb:48:c4:ad:
                    fc:99:48:fb:14:85:fb:2f:7b:db:dc:ed:0b:ab:5e:
                    d0:b4:c7:b9:16:63:5f:7d:a9:94:9b:9b:21:87:12:
                    70:12:f6:b8:3b:67:f7:06:ac:f4:ba:29:9d:1c:0a:
                    cd:81:db:7d:73:54:a1:fe:3d:58:92:9d:eb:4b:0a:
                    b9:cb:74:50:29:db:86:7b:76:85:6a:34:0d:7c:ef:
                    66:67:c9:df:e4:28:6f:ac:b5:89:16:a3:3a:b5:7e:
                    b2:e0:20:1a:fb:d7:9f:04:65:87:b9:09:f7:a9:9b:
                    17:3b:3a:19:9a:56:76:7c:77:63:aa:40:16:6a:13:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:57:98:9A:AA:73:0C:CB:52:B6:C9:DD:2C:64:F6:EA:F9:1C:3F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aafb6155-52c1-3131-ad8d-45ae2f608420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:70:65:f8:13:ab:dd:fc:13:1c:4e:5a:9f:e4:5f:0f:91:9e:
         aa:0f:78:f8:81:e8:36:09:cb:a1:04:ec:19:4f:3b:19:1a:2c:
         8b:95:90:53:38:20:ee:a6:43:13:ee:06:83:f7:2e:46:9d:1a:
         ba:7a:b3:61:c5:3e:71:5e:97:15:30:50:48:df:36:75:6b:5f:
         dc:d8:6a:35:0e:93:99:42:2e:43:ff:e7:de:58:c6:c9:c1:3d:
         34:fd:b7:a7:c3:ee:7a:89:ab:b9:2e:a1:a5:59:6a:5d:8f:71:
         61:31:b1:d6:48:c4:ef:e9:78:1c:e9:aa:87:49:72:dd:30:86:
         5d:48:22:51:e8:c9:41:aa:92:d8:68:0c:88:36:94:e8:e1:50:
         90:9f:fb:bc:92:7c:44:9b:41:d3:c1:e6:18:56:e4:d9:63:fa:
         ec:fc:b4:22:9b:7c:22:06:ff:99:8b:9f:f0:42:ec:0c:22:91:
         a3:f1:c8:58:c8:b1:14:e2:c2:22:09:d1:2d:78:12:0b:f1:b8:
         7e:64:a7:0c:40:01:40:4b:93:94:4a:d9:44:bd:f5:7b:12:a9:
         65:14:1b:fe:83:eb:79:46:1f:9a:f3:dc:13:9b:ab:d8:fe:40:
         eb:44:fb:c9:89:dc:b8:81:43:25:ee:d5:10:0c:cb:24:38:d7:
         45:80:21:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:08 2025 by rpki-client