Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/647fb974-de33-313c-9559-90765cab085e.roa
File:                     647fb974-de33-313c-9559-90765cab085e.roa (raw, json)
Hash identifier:          rAL5Ua0Jwqg0feq8hB3qxu7nv4faJ1RpxK3ofLAx/N8=
Subject key identifier:   FB:7A:02:64:66:76:88:DA:DA:10:C6:67:CB:61:B8:62:94:52:2A:9C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B0B76C7419493733261213000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/647fb974-de33-313c-9559-90765cab085e.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     397239
IP address blocks:        156.154.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:c7:41:94:93:73:32:61:21:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=4e7e672f-5901-4d15-b114-ba6fcf1e7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:8b:39:5f:7f:a5:6e:70:ec:a8:04:e6:fc:
                    7e:74:08:36:07:a7:e4:72:7e:01:76:57:b8:9b:76:
                    2f:88:86:8d:ef:15:a8:3a:05:56:7e:f6:93:1e:a7:
                    9b:69:e0:ba:9b:ff:b4:34:98:6d:99:23:b1:d0:87:
                    99:41:e1:c1:0e:3f:06:11:ef:0f:22:ca:d0:91:b2:
                    18:cf:bd:90:2a:37:30:7c:0b:66:27:d5:f0:e6:9c:
                    b1:86:2a:99:d8:4c:da:9f:73:95:ef:56:66:92:4d:
                    fb:74:71:f9:d0:a5:ab:0d:b0:c0:99:83:3d:4d:a8:
                    27:40:ee:93:28:a2:30:66:7f:db:5e:c6:de:5d:52:
                    e9:d2:07:b2:eb:65:1c:83:58:d7:09:79:aa:6f:23:
                    84:a5:47:6f:4d:6f:27:6c:08:44:1c:c0:b2:80:15:
                    ee:28:0a:a4:fa:12:5f:b0:70:30:0e:32:c4:12:63:
                    c4:ac:c7:37:8c:a9:8f:ab:5d:7f:f3:fb:9c:40:25:
                    e9:3c:13:a9:aa:0f:57:48:13:cb:1d:65:a0:d8:1f:
                    4a:a6:d4:91:f1:38:36:82:43:03:bb:4c:46:4b:6b:
                    ba:b7:88:1c:5b:40:c6:4c:1e:68:0c:94:13:36:42:
                    6b:7e:61:ff:db:19:3a:e5:fb:f6:74:14:78:5f:45:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7A:02:64:66:76:88:DA:DA:10:C6:67:CB:61:B8:62:94:52:2A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/647fb974-de33-313c-9559-90765cab085e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:23:e8:dc:6b:87:03:ba:51:eb:34:b6:64:5a:c2:36:cb:
         29:96:a6:f8:64:2f:e4:8f:c9:93:73:07:36:3c:b6:e4:4d:2f:
         d4:f8:8e:c1:b6:e1:62:2f:8f:f8:4d:15:1b:d6:77:df:ab:a9:
         75:d7:c1:23:68:bc:f5:a8:c6:e1:ab:4d:74:9d:aa:80:9c:31:
         34:b0:aa:f7:ee:9b:f1:0b:21:14:03:bd:ee:68:ce:64:fc:8e:
         4e:65:cd:65:31:87:9f:09:fe:c4:5d:7f:c9:3d:59:07:df:ca:
         bb:b4:77:14:d1:05:ac:c9:de:54:bd:da:9c:81:a0:8e:93:29:
         d8:a2:13:7f:41:df:44:68:73:cf:81:ab:c1:34:0e:ff:bf:90:
         db:cb:8c:87:ec:b3:46:4b:68:f9:da:7f:13:ea:c0:e9:34:1a:
         e7:e6:eb:3a:78:78:74:5c:a8:81:fc:55:4d:18:35:5a:2e:aa:
         6e:ef:0f:e6:46:8a:12:eb:90:3d:71:68:50:d9:be:be:83:e1:
         2a:aa:09:44:ed:b9:dc:05:b0:f0:88:f2:f7:34:cb:22:7f:97:
         ee:eb:67:85:c5:93:63:03:23:f7:14:1a:ad:47:4f:a2:3b:42:
         27:2d:2a:58:74:7c:90:28:18:60:75:ae:c9:62:d6:65:06:31:
         ec:2d:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:24:02 2025 by rpki-client