Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d294543c-1353-3304-98c2-a58b379eee27.roa
File:                     d294543c-1353-3304-98c2-a58b379eee27.roa (raw, json)
Hash identifier:          HabpG40Ow+EC9/1iZ7Rq/XDvXaj81Zw4rap3dNy8bRU=
Subject key identifier:   3A:A7:B6:4A:8A:46:5B:CF:27:BF:D4:A2:D7:27:69:F2:48:C0:66:81
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7E76C96EA45BE290B5900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d294543c-1353-3304-98c2-a58b379eee27.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397243
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e7:6c:96:ea:45:be:29:0b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=e2882851-6ab1-426e-bf17-989c46a56896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9a:94:ed:7c:4f:70:a1:29:49:f2:40:50:de:
                    a9:15:e4:11:37:ef:ea:20:07:3b:52:2f:3b:49:cb:
                    ca:bd:71:fc:65:79:18:ae:92:7d:7b:b4:94:2c:4e:
                    97:e2:a3:3b:12:f8:12:0a:a7:fa:e3:e8:15:75:7a:
                    a3:a1:03:a2:a1:6d:64:5e:92:22:ad:50:f8:c8:4f:
                    21:2f:8f:97:27:30:09:95:f3:9e:37:b6:0f:ee:f8:
                    3d:db:71:f7:3d:26:66:49:ef:57:b4:c1:ea:73:14:
                    8f:04:68:df:35:80:90:7f:9d:89:7f:14:47:e8:05:
                    74:b6:ab:fa:df:fc:8a:5a:e2:af:26:35:24:97:7c:
                    b3:9a:fe:cc:a5:19:d3:18:d4:91:18:c5:42:8d:cc:
                    f7:d6:74:5d:6f:23:ff:7a:8a:ed:bb:ca:53:68:47:
                    3f:22:bd:33:d6:28:e2:bd:c3:b2:6b:91:e4:d7:ba:
                    0c:d8:d5:9c:0a:93:22:7c:f5:21:04:12:cc:f4:ff:
                    ff:8b:96:d5:c7:17:27:46:b0:b6:41:eb:61:65:77:
                    a1:80:2d:c0:2b:8e:8d:d6:81:16:3f:8a:94:ae:1c:
                    19:e7:d9:44:cf:69:36:68:fd:71:bf:25:52:be:7f:
                    63:fb:f2:5a:87:b8:45:75:f2:e4:1a:d6:dc:ee:c5:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A7:B6:4A:8A:46:5B:CF:27:BF:D4:A2:D7:27:69:F2:48:C0:66:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d294543c-1353-3304-98c2-a58b379eee27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b5:09:db:8f:fd:18:da:9d:84:81:ae:ce:e1:f7:e9:99:cc:
         62:b6:dc:f5:ec:fc:a5:0d:16:a0:ec:ff:55:68:e8:e8:7a:72:
         31:a2:74:64:04:78:d1:14:2a:e6:b6:64:8a:3a:6d:8b:2d:4d:
         78:3e:71:1e:1e:26:11:68:03:05:b2:38:63:fb:3d:f8:81:ab:
         35:97:80:5a:6e:d0:fd:80:5a:58:80:ee:0f:fe:5e:8c:f0:6a:
         33:03:5e:af:48:ff:e9:45:29:fa:fd:d8:72:0d:9e:95:25:2c:
         c1:4e:46:24:4b:b3:12:59:1f:d4:ff:55:a4:ab:e2:f1:6a:ac:
         d7:3e:b9:08:af:0c:c3:18:f5:1c:0e:84:6b:5c:84:90:2f:a8:
         a5:d7:dd:c0:8e:7a:d6:1a:84:27:4e:9b:9c:f3:ba:60:cf:15:
         e9:2a:93:be:60:42:af:ed:46:7b:61:9e:e4:e3:e5:4a:b4:b8:
         05:f7:f8:30:e8:1e:b6:09:31:00:df:c0:69:72:d3:79:e2:13:
         28:ef:2a:b9:6d:79:72:b5:b8:42:dd:8c:b0:b6:8b:26:48:72:
         c0:43:b4:36:66:dc:11:9d:c5:e9:01:a7:2b:f5:25:63:86:16:
         d0:c4:f6:b5:ba:c2:97:c6:7e:d9:19:be:a8:a9:c9:33:ae:20:
         9c:2a:93:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 14:51:06 2025 by rpki-client