Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea9d8559-7dbe-38c4-a6b1-2b03e56585a1.roa
File:                     ea9d8559-7dbe-38c4-a6b1-2b03e56585a1.roa (raw, json)
Hash identifier:          eR5mMcnnrGBvUs7h2ar3IQO9Qsylq4NcXAG4V7KiS1g=
Subject key identifier:   0C:E7:AF:9E:49:FB:2D:29:7D:A3:3A:C4:2E:1A:E9:CD:C9:8D:96:57
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D1F7DC1A3E5E197F1124
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea9d8559-7dbe-38c4-a6b1-2b03e56585a1.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397222
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d1:f7:dc:1a:3e:5e:19:7f:11:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=ff1b5d0d-dc1f-4825-a4d7-16a3c1f7db19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:18:d4:d0:b8:1a:a4:fe:03:18:5b:af:93:
                    44:b2:8e:84:57:ec:02:8c:87:39:00:9a:8b:7f:d3:
                    9d:33:67:b3:4d:fb:ea:61:b2:a6:87:c2:75:13:6f:
                    a2:66:85:17:df:a6:a1:89:21:df:d3:75:4b:6f:a2:
                    e4:e6:8d:0b:78:12:01:70:4d:fb:ab:25:cd:c4:55:
                    1b:2e:a6:d8:bb:2c:49:73:e9:a1:df:6d:22:c4:69:
                    35:51:e3:e5:47:12:8b:2e:37:e5:4b:f2:e0:3d:67:
                    a2:67:27:7c:14:f1:8a:c7:44:14:0f:71:d1:a1:49:
                    8a:d8:7f:4b:cf:16:0b:81:fe:e6:21:ee:7a:91:1e:
                    57:e3:bb:85:d0:09:71:b8:8e:4f:90:fe:20:f5:d7:
                    d5:53:48:14:f2:4b:29:8a:ef:f8:8c:cf:51:c1:24:
                    a2:dd:35:2e:40:4f:84:37:78:1c:28:51:13:01:90:
                    8c:2d:51:ff:27:58:86:3c:69:ba:18:2f:ad:86:30:
                    0d:ff:78:1e:e7:0c:a2:ef:d9:75:f2:56:26:d1:fe:
                    5e:ad:77:1f:4d:c2:97:6c:76:e3:23:c2:21:1e:75:
                    cb:f9:dd:ec:e8:c0:e9:25:00:98:8a:8e:a8:e2:9f:
                    5a:3e:2a:d2:6b:9e:2d:f7:bf:2c:d6:d7:a5:a9:af:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:AF:9E:49:FB:2D:29:7D:A3:3A:C4:2E:1A:E9:CD:C9:8D:96:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea9d8559-7dbe-38c4-a6b1-2b03e56585a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:27:e5:2b:f2:90:bc:22:a9:d8:dc:75:56:ae:23:35:74:15:
         3c:e5:5b:05:6c:c9:3f:52:1b:d3:7e:3c:50:0f:36:d3:63:ac:
         7d:d3:e6:46:94:95:a0:e4:99:3b:a1:32:39:97:e9:8a:77:ce:
         b3:43:8b:32:91:5b:a2:6a:5a:ce:eb:17:f8:42:43:13:69:b6:
         d7:fb:0c:a3:77:83:a1:a2:a8:19:35:be:bd:91:7e:64:0a:f7:
         ac:55:8d:80:de:b4:86:67:47:61:69:bf:c2:ac:df:b9:53:4c:
         54:81:f8:6d:f9:83:41:58:f4:8a:1f:95:17:9a:bf:35:b0:74:
         62:53:67:90:fc:5d:d2:35:e9:76:49:3f:bc:13:d9:45:d7:05:
         fd:6e:c3:84:98:96:d8:0f:e2:bd:cf:e3:b6:5c:52:cf:ff:24:
         c2:de:30:47:12:8b:00:58:71:60:3d:46:2e:a2:4f:4d:e9:6c:
         20:d3:6b:d6:72:2d:71:3d:54:bf:f7:97:77:ad:f7:ca:2e:ca:
         9e:fd:58:c1:f1:c8:4c:20:cf:b2:17:bd:69:27:6c:bf:32:3e:
         1e:79:4f:07:d4:81:86:63:8a:16:bb:0b:00:f1:a9:f2:f8:df:
         9c:b4:0b:43:bc:7b:f5:48:45:b9:5c:1f:a1:93:42:55:81:6a:
         53:7b:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:46:58 2025 by rpki-client