Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa
File:                     18d2d9b8-0747-31fe-86ef-f79b42318c54.roa (raw, json)
Hash identifier:          vxlIcaR6/evIfYcuU39nM1BuDyskIUFp0/SOH99gu3w=
Subject key identifier:   18:E9:6E:B2:55:F6:4E:CF:86:80:72:BB:49:0C:61:82:23:2E:F1:5C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0DFE205BC107567456300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397233
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:df:e2:05:bc:10:75:67:45:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=3a91c4fd-d657-4505-83eb-eca0f27da342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:2f:80:d5:74:0d:c5:0f:2d:92:3d:55:8a:
                    40:3c:5d:1b:91:5d:89:62:84:96:80:37:8e:0a:74:
                    36:dc:47:f8:8f:86:d3:06:de:e8:bb:26:6a:73:a2:
                    73:f1:70:58:1b:94:8e:ee:cc:02:0a:d1:c5:63:45:
                    e4:17:01:62:3b:41:5f:dc:86:87:5a:d4:8e:25:b1:
                    5a:be:d4:04:ec:ec:f8:cc:3c:6a:1d:45:42:ea:23:
                    08:83:a8:7c:8f:64:e3:7c:9b:27:b4:12:49:a4:19:
                    29:64:4b:63:f0:b5:2e:e8:1d:fb:ee:cd:1c:13:b8:
                    17:67:44:03:01:ad:e1:c4:73:48:6b:90:03:89:f0:
                    d9:a5:74:39:ac:ba:e9:69:3a:df:b6:db:c7:c4:3c:
                    83:e8:67:7e:18:52:48:1a:48:d1:e8:d5:7b:63:33:
                    f0:f8:9d:52:4e:74:af:f8:f4:5c:31:63:63:14:b7:
                    13:35:04:8d:e9:75:76:67:9a:b2:25:3f:57:0e:f7:
                    af:51:b2:89:f5:d0:3b:b3:bf:bf:d4:d9:8f:56:7e:
                    83:a8:c2:7d:c9:db:93:6b:ab:99:3e:1f:93:e3:28:
                    ed:13:02:f2:28:8f:55:97:3e:57:f0:b9:93:b2:ea:
                    90:65:33:5e:c2:b5:66:04:b9:cb:4a:54:a9:a5:45:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:6E:B2:55:F6:4E:CF:86:80:72:BB:49:0C:61:82:23:2E:F1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:4f:89:27:4e:86:ba:81:ad:58:22:b1:4b:21:5e:0d:9a:
         2b:bd:0b:31:f4:5d:6f:98:41:ee:7b:08:31:a4:5f:06:0d:0c:
         f2:62:41:2f:a2:be:ac:2e:3a:b6:49:cc:44:6e:24:07:c8:f2:
         4b:a6:9d:01:c1:cb:9c:44:93:60:d5:a5:09:1c:da:0d:5f:32:
         d6:53:5e:72:6c:ef:9f:aa:31:98:b4:0a:95:9e:77:d4:5f:4a:
         80:92:7d:bf:dd:56:1c:47:25:4d:5a:6e:d7:fe:f7:6e:59:4d:
         43:64:cb:c2:67:56:df:1a:16:bb:9d:20:d2:41:50:3e:ea:ca:
         b3:93:3c:ef:5a:08:ed:7e:74:eb:6c:8f:07:ea:c3:33:d5:84:
         ee:f3:5e:f0:b9:6c:3c:0f:20:cc:82:e9:38:e0:16:e2:a8:a5:
         7a:d4:a0:fd:e1:98:67:51:64:f0:fa:7f:4c:43:93:80:b2:3b:
         fb:9b:91:6f:35:1e:0b:f2:b3:a8:03:26:3d:07:2f:89:30:5f:
         03:1a:3f:34:44:08:0e:e4:4c:91:a4:85:69:4d:7a:78:b2:fb:
         df:38:a0:bf:b5:5f:e8:2a:2c:90:40:11:51:60:ff:0e:19:c4:
         3c:61:ab:cf:aa:96:0d:38:d9:c7:25:de:7c:a2:d7:bc:13:65:
         10:26:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:46 2025 by rpki-client