Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad73951-d963-31e3-9ea4-11f3c3ac6b99.roa
File:                     0ad73951-d963-31e3-9ea4-11f3c3ac6b99.roa (raw, json)
Hash identifier:          ktiN7k8CDl66HQbsDr0ApdlkH11RBoYE6oW8wg1YUMY=
Subject key identifier:   58:1D:A8:E6:36:BE:05:B5:52:E3:C6:7A:83:AC:D8:C7:FB:43:7B:09
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D9F053E93DB20523A314
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad73951-d963-31e3-9ea4-11f3c3ac6b99.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397229
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d9:f0:53:e9:3d:b2:05:23:a3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=0883680d-2f0e-4934-a7d8-873f18e8d2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:f2:92:22:0d:84:46:c5:a6:7d:49:69:40:
                    c8:30:57:ed:0a:56:8b:33:3b:23:96:6f:68:c4:cb:
                    4d:c5:8b:90:80:45:a8:1b:2d:42:7e:7e:86:d6:31:
                    06:51:c6:54:ca:54:56:f4:bb:3e:9b:96:0f:b3:6b:
                    bf:4e:14:b3:7b:e7:a4:92:e8:04:65:61:ed:09:1c:
                    3e:eb:29:87:bb:b0:36:11:7b:ce:2b:ff:f4:d7:ea:
                    7c:b5:6e:c3:08:92:78:23:d3:ce:56:38:fc:07:39:
                    27:ea:12:5d:b7:f5:88:68:42:08:04:e1:a6:cb:5c:
                    6b:63:67:86:12:f5:bd:d7:d4:d2:03:21:52:8d:b6:
                    f6:e1:85:39:14:b0:47:a0:82:6c:c8:10:0d:b5:8b:
                    60:54:f9:14:4f:37:4b:ee:61:c3:7c:d0:b9:41:72:
                    df:1d:89:47:f6:9f:64:d0:3b:5a:cb:11:69:7f:6d:
                    9d:07:30:f5:db:6d:16:48:fb:16:41:eb:d2:f0:7b:
                    27:3c:e7:fd:da:dd:a9:f9:ad:1a:12:c6:a9:d0:a4:
                    27:f9:1f:77:66:f9:73:55:46:ec:42:85:c9:81:ff:
                    10:54:69:a5:0a:23:c7:13:80:7f:f3:4f:da:f8:72:
                    7f:13:a8:27:f4:e4:b3:03:6f:38:d7:3e:21:2d:f4:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:A8:E6:36:BE:05:B5:52:E3:C6:7A:83:AC:D8:C7:FB:43:7B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad73951-d963-31e3-9ea4-11f3c3ac6b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:27:cf:35:14:9a:4d:8c:d8:6f:3c:78:5a:8e:00:68:87:
         19:99:09:dc:11:65:67:d1:e4:a8:10:6e:69:ab:07:36:48:39:
         aa:cb:f5:3f:3f:05:da:63:02:4d:10:49:6f:7d:21:58:59:04:
         00:5d:1f:f8:7b:e1:73:3b:a8:cc:74:1b:6f:d1:9e:77:ce:7c:
         01:b3:89:36:ca:1a:a7:3c:ba:a5:f8:d6:d6:40:5d:87:41:1b:
         72:45:38:3a:bd:23:a3:e8:26:57:da:a0:2d:a4:8d:50:c5:31:
         43:20:49:c5:00:5e:2d:77:82:c1:e4:93:a2:3d:2f:60:15:4e:
         82:65:e6:aa:7b:40:69:3b:07:9b:55:87:23:5a:c4:cf:20:d8:
         1e:92:68:41:51:f2:5c:0c:08:92:e7:6e:82:05:39:e1:6b:dc:
         ab:d1:af:f4:54:41:fd:a1:37:d6:fb:98:73:cc:ae:3f:b8:7f:
         4e:cb:39:dc:cf:93:2f:8b:84:5d:86:e6:d7:ef:9b:ad:20:30:
         e0:10:6b:9c:5e:80:80:c5:61:44:81:33:fe:e8:3b:16:cb:aa:
         48:1b:0b:1b:02:24:73:aa:15:9e:53:a1:1b:b8:b5:52:54:6c:
         a0:29:45:de:fe:d7:84:b5:7e:33:4f:d9:92:28:ba:6c:68:36:
         0d:bf:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:20:38 2025 by rpki-client