Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b1cb11b5-3241-3979-880e-4630ac356bda.roa
File:                     b1cb11b5-3241-3979-880e-4630ac356bda.roa (raw, json)
Hash identifier:          qmgWw747r/U8WyADgbqqUwmXU1AYjHo4l5q6aWLjmBg=
Subject key identifier:   AF:98:CB:4E:36:5C:B5:FD:39:67:A1:E2:D6:CA:00:07:00:06:69:A8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A6826115B73948B1958368200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b1cb11b5-3241-3979-880e-4630ac356bda.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397224
IP address blocks:        156.154.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:11:5b:73:94:8b:19:58:36:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=9da03477-2983-43b5-9649-d72ac7b9e88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:62:b9:34:78:d6:d5:aa:10:61:d3:53:26:
                    08:f5:67:e4:cb:60:1f:63:d6:0e:90:6c:6f:a4:b5:
                    a3:55:7f:b2:0b:b9:b1:1f:ff:05:ad:a4:1b:6f:f7:
                    e6:40:33:d0:80:41:3e:00:b2:2d:c2:87:5f:f7:d2:
                    7d:88:a2:de:2d:75:f7:1f:8b:26:37:e6:2d:2e:e0:
                    a8:b3:75:b4:23:43:2d:bc:f5:8e:38:c4:5b:04:7d:
                    6f:ba:af:2a:ee:8e:31:f5:f2:f0:df:bd:a9:bc:3d:
                    d4:76:40:8d:d6:37:ed:67:6b:b3:2d:eb:45:d8:5d:
                    13:80:38:aa:25:01:7c:af:00:8d:d1:b7:2d:fc:e4:
                    4e:2e:31:0f:0b:d5:49:f5:d5:c0:f9:e2:1b:91:1c:
                    52:36:fc:0f:01:9b:9f:93:42:c6:66:af:2d:72:a1:
                    24:aa:9d:45:6d:9f:48:7a:b5:ae:d4:8c:9b:1b:0f:
                    61:05:25:b9:79:19:fb:15:6e:8e:b7:f9:b4:88:ec:
                    52:37:86:0d:d7:64:5a:c7:fe:a1:6f:1a:70:79:56:
                    f8:e0:83:42:11:e6:40:c2:72:8b:f8:48:67:3d:ba:
                    e9:85:f1:8e:fb:56:fd:57:b5:d3:67:a9:a1:d6:9e:
                    42:1b:13:16:e3:26:22:a7:b3:1c:ca:9a:70:16:63:
                    68:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:98:CB:4E:36:5C:B5:FD:39:67:A1:E2:D6:CA:00:07:00:06:69:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b1cb11b5-3241-3979-880e-4630ac356bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:ba:e8:15:88:21:4c:ff:35:80:9f:1d:bb:31:33:19:9b:
         a9:d2:b4:1c:ef:1a:74:a6:f5:25:63:30:09:cb:fc:fc:c4:b5:
         49:cc:6d:47:d3:0d:af:70:41:09:da:0e:2b:d8:3e:22:40:0c:
         21:b2:c5:9b:55:65:9f:c9:a0:be:c7:50:ff:84:94:8e:38:0e:
         93:fa:16:29:11:bd:2c:8b:7c:ce:20:76:aa:0f:5e:59:7c:10:
         d1:07:8c:62:13:3c:c8:7c:86:6d:03:fb:9b:1b:87:3d:df:a9:
         18:61:71:fe:f4:27:11:e9:fd:07:6c:05:f7:51:1a:ee:ed:2d:
         bf:02:e1:97:38:08:1b:4b:61:b2:5c:ce:a4:62:44:d6:60:bb:
         f1:be:f6:64:b9:d9:35:b0:52:d2:9d:c0:11:fb:bb:07:eb:62:
         b8:56:7b:de:74:a9:94:b2:f6:20:b2:85:cd:11:e3:d4:03:0e:
         31:cf:65:74:ea:a5:15:73:12:fc:e1:ea:a1:69:a6:6a:95:2f:
         b5:bf:84:94:36:a6:35:0c:6b:92:e5:bb:5c:36:93:94:91:fb:
         48:47:97:c0:f6:7c:4c:1b:52:5a:5b:12:15:c0:13:ee:95:c0:
         fe:87:3e:74:e1:1c:b6:40:33:e6:7a:3b:5c:cb:48:d3:62:f6:
         a5:b6:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:12:00 2025 by rpki-client