Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0186b51-8b67-32f3-b69d-d2c59e344238.roa
File:                     f0186b51-8b67-32f3-b69d-d2c59e344238.roa (raw, json)
Hash identifier:          +uXA71zuZYrlh2ym0RVT4BM/VYqJ3zpEeIh+zGVOGcQ=
Subject key identifier:   E0:71:35:9D:F1:68:09:68:A6:7C:85:0D:26:FD:BC:FF:C9:B2:92:34
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68263019AC68E55763DC5300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0186b51-8b67-32f3-b69d-d2c59e344238.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     19905
IP address blocks:        156.154.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:30:19:ac:68:e5:57:63:dc:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=1eed3eec-2584-42fa-be76-3d6391eeccc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:d4:dd:6a:bb:07:b0:98:86:d2:7d:bf:df:
                    df:a6:24:13:db:1b:93:73:63:16:21:0d:0e:a2:6e:
                    fd:44:eb:0b:02:b0:59:6d:3e:35:77:2c:74:06:2c:
                    cf:e1:4d:0b:f8:0e:70:c4:74:0c:bd:50:78:cc:0d:
                    71:96:de:81:d5:30:6a:0d:a5:a7:f1:cc:f2:7c:27:
                    1b:94:21:03:38:8e:55:ff:21:07:01:99:d2:24:50:
                    38:7a:c6:7d:c9:36:35:a3:89:71:dc:19:39:7d:33:
                    c9:ff:50:74:b7:e7:14:bd:3a:99:52:6e:ca:13:0a:
                    51:25:30:22:d5:44:75:4b:bf:8c:30:13:3d:46:6c:
                    8d:11:32:f3:91:38:4e:48:3f:97:c1:ca:62:85:9b:
                    d2:b8:91:47:69:2e:d1:4e:40:29:73:78:29:5d:77:
                    2e:4b:6a:46:f4:ae:f0:6c:b4:62:55:f9:e5:b9:dd:
                    b5:a4:c0:f2:ff:ca:3e:e2:f4:b8:f5:d1:f5:09:a6:
                    b5:2e:69:46:d6:11:70:11:78:e9:81:03:36:c2:1a:
                    8b:5c:0d:19:f0:22:3d:8c:03:bc:56:fd:06:07:46:
                    d8:50:16:4a:fc:4d:a3:c5:83:f6:19:61:c9:38:01:
                    06:6d:84:7a:cb:66:71:c0:ee:3f:eb:73:48:67:9d:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:71:35:9D:F1:68:09:68:A6:7C:85:0D:26:FD:BC:FF:C9:B2:92:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0186b51-8b67-32f3-b69d-d2c59e344238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:76:cc:3b:e8:f2:8e:a2:16:cc:29:80:8a:7a:ca:13:8e:2b:
         a5:c0:39:2a:ba:81:51:96:f1:7b:b1:f9:74:e5:c8:e9:4a:86:
         9a:c8:cc:5f:f2:44:6d:46:d1:da:c5:dd:86:fe:46:fe:b9:d5:
         5b:55:be:52:c9:e7:a5:d0:be:d5:fe:89:bd:8b:3f:23:da:b5:
         8d:ff:c8:19:8f:8e:12:0b:7a:95:ec:d3:f3:38:17:e6:d6:67:
         bd:16:bb:ec:c4:07:78:71:1c:9f:43:18:fd:78:21:ed:b7:09:
         81:8a:dc:14:0d:0a:06:6c:b7:17:89:02:c9:59:f3:99:a7:ad:
         7a:9d:d6:44:70:64:0b:45:cd:ea:15:c0:cf:b9:50:e0:fd:10:
         88:3f:8e:ed:5f:64:2b:1e:3e:ea:73:47:99:61:da:62:6e:9b:
         03:0e:3d:c4:a2:6c:ad:50:0f:d3:05:b1:c9:7a:8d:a0:ee:f0:
         96:79:91:91:3d:61:65:ba:78:dc:79:01:1d:ac:c1:06:2c:74:
         57:95:dd:58:c8:5a:85:92:4b:2e:d4:c5:0a:85:85:a0:6b:f4:
         1e:23:b3:5e:ed:c0:20:1d:91:62:5b:bf:43:b3:40:e2:d9:e9:
         1c:4c:c5:80:ab:e5:89:93:5b:76:19:92:8b:6b:56:40:71:26:
         63:ca:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:17:17 2025 by rpki-client