Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c617f6-eff6-30a6-8ecc-742537d4d899.roa
File:                     b4c617f6-eff6-30a6-8ecc-742537d4d899.roa (raw, json)
Hash identifier:          6aVMIPFDZEsJjQuhFb82eeWA4h7ED//S+KFJaAv/9xg=
Subject key identifier:   3D:84:F0:9E:E7:91:E3:0D:CB:BC:45:83:37:A4:0D:C5:F2:DB:D6:E3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7EB0B92BEBABE0E6D9280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c617f6-eff6-30a6-8ecc-742537d4d899.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397237
IP address blocks:        156.154.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:eb:0b:92:be:ba:be:0e:6d:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=d19fb781-1804-4ade-af18-e70a195e55a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:09:f4:f1:08:4d:d8:1c:0e:77:ca:68:30:
                    59:6d:df:1e:4f:24:aa:ea:11:e8:b0:25:17:27:51:
                    30:ac:b5:6e:f4:77:1f:3d:82:42:a3:52:0d:15:73:
                    13:4e:7a:8c:bc:79:fb:b9:79:80:5a:47:0a:0e:82:
                    51:27:21:57:73:aa:eb:11:85:cc:9a:60:dc:36:fe:
                    c8:67:d7:36:0d:0f:ac:83:61:44:42:33:64:4e:d8:
                    cd:e0:73:84:97:3f:bf:4d:f0:0c:4e:ce:d1:49:48:
                    42:20:9a:33:6d:9f:7d:05:e0:d9:80:af:66:8d:3c:
                    d5:a9:87:f7:0a:8a:88:48:85:1e:8b:80:12:f0:bf:
                    09:ee:0d:8d:6b:18:85:42:11:89:13:de:21:ed:61:
                    98:4b:32:1b:d5:5d:52:17:bc:9a:5c:93:33:18:dc:
                    a3:6a:57:79:c4:76:f8:69:30:c9:81:a9:c7:7d:09:
                    30:d6:36:b5:9f:07:19:6d:45:25:61:f8:c6:a6:00:
                    66:c9:d2:d0:52:e7:6f:81:82:28:a1:c7:0c:94:02:
                    75:36:73:37:7b:53:da:7b:fe:4a:24:6b:3a:2f:aa:
                    13:ba:bb:df:0c:e4:9f:86:2c:bf:df:8e:e6:e3:a6:
                    d3:3a:13:0c:f4:3e:23:b0:24:8f:5d:f6:16:ee:82:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:84:F0:9E:E7:91:E3:0D:CB:BC:45:83:37:A4:0D:C5:F2:DB:D6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4c617f6-eff6-30a6-8ecc-742537d4d899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:15:aa:3a:9e:f1:8a:6e:a0:fe:62:a7:3c:4b:20:36:c4:94:
         c6:73:06:27:fd:32:ec:d8:6a:b4:6f:3a:60:ec:69:d3:35:2e:
         54:89:ea:3b:43:99:e2:16:51:17:d2:8e:47:17:dd:94:9f:bf:
         ad:c0:fd:4f:ea:e4:19:95:79:1f:f9:45:3e:29:88:b2:77:4c:
         28:04:ca:70:1b:09:a9:2b:88:b0:0b:e9:da:8d:28:00:78:8d:
         c3:fd:ab:86:39:4a:f2:72:68:45:48:c9:1e:71:89:0a:81:de:
         c0:4c:ed:7e:6a:64:eb:09:f7:09:f7:66:9f:1c:ac:04:34:f4:
         43:d0:46:65:33:79:88:5a:cf:05:d4:f7:99:8a:6e:65:ea:5c:
         44:9b:c5:c5:e0:f5:03:c4:f3:f5:8b:80:c4:b1:4c:e7:3e:44:
         09:ca:04:4d:26:c0:06:1f:e8:a9:ec:76:6c:c2:ef:3c:d2:14:
         bb:c9:48:b8:c5:38:d6:8f:98:cf:1a:dd:9b:3b:1a:e8:8e:8e:
         0e:c6:9a:c8:69:d4:13:b4:d2:eb:ab:44:f7:83:8f:4e:97:ba:
         bc:a5:99:60:19:cc:5f:9d:cd:f0:82:63:72:95:1d:ba:c2:66:
         e4:0c:91:19:5a:2d:0d:47:57:e2:9b:e0:9f:77:35:09:9f:20:
         7d:c5:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:16:24 2025 by rpki-client