Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95ed5390-40ce-3526-99b4-3ae4568b22e9.roa
File:                     95ed5390-40ce-3526-99b4-3ae4568b22e9.roa (raw, json)
Hash identifier:          x89+Ks1jpZwuRjkIYtLybjJ1WIsn/dhOFVQ95XXLuLg=
Subject key identifier:   27:C2:9B:38:35:23:8B:09:4B:27:98:91:59:E9:F1:7E:AA:95:AD:78
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7FF3EB2FE7D39239A5600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95ed5390-40ce-3526-99b4-3ae4568b22e9.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397225
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ff:3e:b2:fe:7d:39:23:9a:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=892f7168-f3b0-4d3b-8149-bf7ed5f39a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:99:f5:73:a9:7c:67:4f:88:05:9e:43:f1:
                    55:f4:05:c5:c8:48:bb:6b:61:81:3a:5f:fa:34:27:
                    35:b7:ee:5a:63:f6:7e:53:82:2d:bf:df:fc:9d:8b:
                    de:78:7a:7f:44:5f:74:b6:ff:a5:e6:54:e6:03:ac:
                    be:eb:08:75:f5:fc:0b:a0:21:e3:b8:69:c6:a4:7a:
                    65:2d:68:d5:50:19:16:96:a8:32:93:0c:dd:d0:73:
                    14:71:b8:fe:e2:f7:5e:e1:33:d1:a9:18:b3:05:ec:
                    82:3c:85:20:64:ae:c2:f7:6f:9d:37:8b:dc:ae:2c:
                    b8:9f:6f:d3:fb:b0:85:1e:e3:17:af:87:e4:f8:65:
                    30:8e:17:6e:91:b4:c1:f4:01:ba:6b:01:c2:16:b5:
                    f3:00:b0:fe:34:1b:9d:58:08:c4:b9:b4:1d:f5:92:
                    f4:5a:03:70:87:65:bf:23:fd:3d:4d:92:b3:79:13:
                    20:8e:d0:00:01:cc:15:14:ff:ee:20:6c:73:18:b7:
                    59:cc:7e:82:43:83:0c:fa:f8:37:b8:08:99:65:24:
                    8a:31:6f:36:dc:3c:11:b2:bd:19:ec:38:93:d4:09:
                    8f:bf:b6:72:0c:b7:5b:0d:6f:96:0d:2a:65:20:06:
                    8f:44:41:e1:a5:95:bc:b4:d7:51:19:a6:c4:64:2c:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C2:9B:38:35:23:8B:09:4B:27:98:91:59:E9:F1:7E:AA:95:AD:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95ed5390-40ce-3526-99b4-3ae4568b22e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:b8:82:f5:5c:86:3f:a8:b6:87:0e:6b:0e:4d:bd:2a:3b:
         9e:8b:32:58:12:9e:42:de:ed:28:3d:d4:0c:b0:c0:b0:68:f0:
         ca:09:98:26:b3:27:ad:af:ab:4d:f5:54:cb:17:4e:e0:60:d2:
         38:a8:82:18:28:6b:e3:c9:5a:d6:fc:f1:9d:02:f4:cc:7e:8a:
         9c:e3:60:97:85:df:1a:c9:68:7a:f7:c5:14:ff:08:d5:c1:6b:
         33:c9:95:18:65:5e:dc:81:52:e2:51:47:91:c9:82:bd:bf:b6:
         e5:ec:a9:b4:95:cb:a3:7e:d9:eb:d3:c8:24:9c:3e:69:3c:c1:
         1d:b5:30:1b:a5:70:71:d2:da:d9:85:fc:34:a9:09:bb:35:fb:
         7f:da:41:88:04:00:bb:f0:d4:80:d1:d5:a4:98:09:a5:37:4f:
         d6:31:01:e9:bf:fa:42:7a:19:ab:90:c1:23:63:c5:70:83:e8:
         bd:91:48:74:68:10:b4:b4:12:70:f4:f8:42:e6:f8:24:74:4e:
         ea:02:b7:c0:ac:97:85:00:a0:c5:75:88:8d:f6:25:4b:54:51:
         d2:10:aa:d6:2e:b0:16:65:00:0e:c4:fb:1b:21:49:74:50:30:
         41:f0:5c:ba:22:9f:fc:4c:c0:c7:a0:a4:86:88:6d:f7:4a:fe:
         9e:36:ed:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:18:09 2025 by rpki-client