Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1abee41-8717-3ff2-9f78-6dffe0b2a0e6.roa
File:                     a1abee41-8717-3ff2-9f78-6dffe0b2a0e6.roa (raw, json)
Hash identifier:          Xi9Sw7qU9/wJkF0lpIpcOBrRNniJejdjx0Nova3JvmY=
Subject key identifier:   14:1C:DA:D1:8F:5A:73:64:76:88:58:C1:1D:39:4F:E7:E0:AC:F3:81
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7ECE92EAACBD6C8273800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1abee41-8717-3ff2-9f78-6dffe0b2a0e6.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397235
IP address blocks:        156.154.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ec:e9:2e:aa:cb:d6:c8:27:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=467a7a59-3cc6-4318-896b-f534bace63eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:5f:ee:5b:69:f7:56:16:be:98:08:f6:cf:
                    29:3d:a7:94:a7:48:ab:2d:8b:0a:96:d2:ff:48:e2:
                    51:97:12:7d:54:ad:04:f8:93:6c:2b:a2:06:ee:35:
                    06:e0:06:b6:61:79:51:30:bf:02:0b:95:a6:ae:e3:
                    88:99:0b:25:02:3a:98:4a:80:d6:cc:7b:81:9a:38:
                    60:f3:a2:b2:09:2e:d7:e5:91:76:f4:28:27:44:db:
                    ef:39:30:70:20:41:a4:67:4a:12:c5:2c:1b:76:5b:
                    90:ed:5b:73:0b:e2:3d:ab:c7:9d:af:7a:98:ed:f6:
                    fe:c5:8a:bc:cf:05:3f:12:17:30:26:d3:fc:50:ff:
                    1d:4b:1f:7b:df:18:ff:1a:2d:2b:0f:97:45:82:0e:
                    e1:52:d9:ad:5d:ab:30:7c:14:ca:3b:d0:c0:b1:0c:
                    19:98:ee:22:39:71:d6:be:67:c2:2d:59:1b:66:ab:
                    2b:21:95:92:e3:79:24:33:17:d8:bf:81:82:c6:f5:
                    c9:ca:61:71:41:58:26:cf:7a:7d:36:0f:5b:cf:16:
                    ee:dc:8f:27:a9:37:44:6d:e4:44:8c:7e:eb:11:43:
                    f2:99:dd:54:bd:f9:f5:f4:2e:a7:1e:67:4a:6a:c5:
                    b9:26:de:db:83:31:8f:85:81:43:59:25:1d:35:0e:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:DA:D1:8F:5A:73:64:76:88:58:C1:1D:39:4F:E7:E0:AC:F3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1abee41-8717-3ff2-9f78-6dffe0b2a0e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ba:7a:4d:28:71:d1:a8:df:7c:20:77:fb:d3:6a:8e:fc:3a:
         d1:33:ac:aa:eb:25:5a:f2:37:7d:28:40:b9:7b:51:c9:3a:32:
         69:d9:69:79:ac:94:cb:82:d2:9e:b7:33:9a:6b:f6:31:a5:b0:
         e2:16:46:c6:97:9e:69:81:27:57:80:a2:4e:86:c7:8e:db:51:
         6d:76:ed:34:6e:36:85:77:4b:88:65:94:d2:d2:e1:fc:b0:9d:
         39:8b:0e:09:f9:e5:10:19:7c:23:46:37:19:e6:fd:55:da:31:
         70:1f:35:ad:c1:26:c2:63:4f:eb:77:20:40:2c:2d:a7:eb:86:
         81:02:a0:2d:6d:5d:8d:23:26:34:93:77:b9:8f:66:ff:5a:fb:
         5c:c1:5e:5f:ff:63:a0:8a:a2:af:da:c3:ac:4c:62:e3:b7:3e:
         da:61:b5:2d:a1:98:57:48:af:02:bf:04:ab:aa:a2:c6:e2:d8:
         a8:60:99:8a:17:6b:02:aa:f9:69:19:e8:84:34:0e:58:93:dc:
         e4:d9:57:c8:19:4f:38:33:dc:9a:f7:43:55:ce:f4:62:42:dc:
         b4:f6:a8:7c:9f:41:27:f7:d3:ff:8e:35:5a:e0:b7:b1:cd:e8:
         b9:1a:13:54:74:f5:a9:c5:36:9a:d5:78:71:e2:6b:c6:b0:77:
         af:02:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:16:27 2025 by rpki-client