Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d3d4f28-da0c-32de-b04b-1f1212c4e337.roa
File:                     1d3d4f28-da0c-32de-b04b-1f1212c4e337.roa (raw, json)
Hash identifier:          483eoGO08m0FGLqmUU8lObRRm/f4xylETCZj3XzybLU=
Subject key identifier:   55:85:CA:F7:4E:AE:7A:E1:64:A7:D3:3A:E3:12:4A:6E:B2:CC:D2:BB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7FF2EF5DD61E71BA9AF00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d3d4f28-da0c-32de-b04b-1f1212c4e337.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397224
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ff:2e:f5:dd:61:e7:1b:a9:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=cff89005-328f-42b8-9902-b9c2c0d80f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:cc:76:ea:98:3d:38:68:f8:ee:19:fc:32:
                    72:74:a0:28:07:db:42:a0:4d:dd:02:71:24:40:70:
                    25:e3:3e:49:2e:c8:61:81:96:d5:70:4a:5e:6e:eb:
                    4d:1c:a2:fa:67:3d:9f:e0:16:d3:29:dc:7b:37:70:
                    1a:08:99:37:ba:0b:cc:9c:10:40:e8:8b:31:c0:55:
                    79:96:9e:99:c6:e5:18:90:4f:da:3e:aa:51:04:9a:
                    5f:51:58:43:5c:94:2a:3a:11:a2:b0:4f:b8:c7:d7:
                    df:56:2f:26:23:b5:98:1d:61:16:aa:49:10:0b:3e:
                    22:17:19:fc:8b:5f:65:4a:50:82:ff:be:00:1e:f3:
                    56:88:26:c2:3b:9e:ba:45:09:1d:b3:61:3d:55:01:
                    d7:5d:44:61:2b:68:5d:47:da:81:ec:c2:6d:b4:ab:
                    70:f1:35:77:56:d1:b8:a7:b2:28:e7:43:c0:43:13:
                    20:46:92:c5:0a:c6:32:22:fe:06:cb:1f:8a:5a:39:
                    fd:a8:23:ae:4e:6e:e6:ff:4c:4d:b2:f2:f1:82:94:
                    3a:73:c5:67:fa:73:b4:0e:08:8a:58:3f:84:db:7b:
                    0d:e3:6b:a4:dc:21:8f:cf:6d:d2:83:30:0c:d6:cf:
                    ad:12:57:b9:0f:db:5a:2b:10:16:b5:cf:1c:75:a9:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:85:CA:F7:4E:AE:7A:E1:64:A7:D3:3A:E3:12:4A:6E:B2:CC:D2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d3d4f28-da0c-32de-b04b-1f1212c4e337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:31:ff:b9:86:40:92:d2:2d:f5:19:f0:99:6b:cc:3a:11:d1:
         34:0a:e9:a4:09:29:2c:a4:e1:3e:83:da:04:09:bb:7d:bd:57:
         f6:d5:46:6d:14:39:ae:61:60:43:87:fb:26:fd:84:f2:ab:dd:
         b0:6b:bb:ea:e6:1a:2c:f6:63:c1:a4:0b:ca:34:70:a5:d4:6c:
         da:a0:6c:a8:ec:2f:20:86:0a:13:e7:52:62:13:3c:ff:ea:4f:
         17:2e:a9:1c:a6:4a:47:95:1c:4b:54:1c:86:e0:8c:52:cb:c4:
         6f:a8:63:5b:39:31:80:d5:e8:ad:00:e0:ce:b8:be:d0:84:d1:
         bf:ab:a2:88:16:80:72:dd:9d:77:a5:f3:27:6b:fd:4d:5d:73:
         82:b2:20:df:b9:db:a5:c3:20:e1:c6:30:98:01:d0:80:aa:af:
         a8:57:d1:91:ac:1b:34:80:9e:b7:ad:e8:73:e5:59:50:27:f7:
         78:64:03:0a:3b:03:0e:c1:ee:42:2a:81:1a:0a:b2:7e:39:bd:
         82:27:b2:e5:7b:01:47:b4:e4:f4:1c:27:a1:71:b8:02:ad:1f:
         91:c3:38:bc:a8:54:8f:97:46:d6:e5:3e:27:1d:e9:ae:46:a3:
         24:cf:4a:7d:b2:15:0b:7b:8d:0f:90:8c:b3:66:08:a0:1b:98:
         0c:50:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:14:17 2025 by rpki-client