Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d63e445-c74e-3a20-afa9-23efefffd922.roa
File:                     1d63e445-c74e-3a20-afa9-23efefffd922.roa (raw, json)
Hash identifier:          aeJBqo7f9OieM59zYqjlp9U3YiVeNW4eOKDeJG8yiCg=
Subject key identifier:   B4:7C:2A:49:7D:1E:9E:4B:C4:9A:5A:63:BF:73:56:C0:9C:98:FB:03
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7E7CAEED452548D33CC80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d63e445-c74e-3a20-afa9-23efefffd922.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397215
IP address blocks:        156.154.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e7:ca:ee:d4:52:54:8d:33:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=225e34bb-cefa-4ed3-807e-d7a24ec0845d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:41:2d:82:a6:17:96:38:f3:b6:f1:06:1b:
                    7b:b5:e9:18:97:4f:15:00:00:43:b2:96:4c:4f:9d:
                    9d:aa:a4:c0:30:8a:66:52:ae:0a:5b:76:fa:52:6a:
                    7b:77:39:b0:55:8b:ea:0a:b6:b8:02:18:af:ce:40:
                    a8:c4:cc:6d:23:9a:5f:49:31:81:2d:71:71:ae:a7:
                    68:c7:cc:48:20:c0:d0:df:4b:57:e0:e4:df:84:21:
                    23:4c:a8:4f:93:1a:4a:86:20:cb:04:78:33:41:2b:
                    76:fb:46:1b:a5:3b:34:16:bf:d0:11:16:26:c5:02:
                    c0:cf:97:fa:60:43:cf:a4:7e:af:ae:59:89:f2:50:
                    70:55:4b:f0:12:50:fc:bd:f0:73:7e:56:91:8c:0f:
                    09:8f:2b:17:b8:62:da:1e:ed:7e:9e:74:b8:80:fe:
                    3b:9d:24:af:97:94:a2:41:32:ae:c4:24:14:bd:ff:
                    ec:7a:43:2f:72:8c:18:d4:d5:ff:4b:b7:5d:c6:e6:
                    b0:b0:34:bc:88:63:79:1b:74:7a:65:a6:8d:a4:15:
                    e0:c4:11:c5:0b:46:fd:b6:57:91:f7:39:79:94:c5:
                    0f:ec:70:de:ba:a7:b9:6d:8d:07:6d:28:2f:d6:cb:
                    1e:f1:c7:62:e1:25:f2:61:4c:ff:23:91:d8:7e:b7:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7C:2A:49:7D:1E:9E:4B:C4:9A:5A:63:BF:73:56:C0:9C:98:FB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d63e445-c74e-3a20-afa9-23efefffd922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:27:94:ad:65:32:25:d6:df:db:46:9f:19:01:72:af:51:60:
         37:35:78:24:31:83:15:5a:83:a1:e5:89:46:64:bb:6d:aa:b9:
         e5:df:77:31:42:1b:cc:ce:40:a5:95:0f:8a:17:95:ee:75:34:
         4e:83:a4:ed:1b:52:9a:94:01:6c:14:28:41:c8:24:7b:79:e8:
         37:78:11:32:35:df:d4:04:89:e1:52:bf:17:85:83:80:f3:7e:
         7e:4a:b5:58:cb:36:c5:04:0f:25:93:ed:02:a3:ae:f1:dd:d4:
         04:fa:86:55:0b:ec:94:59:72:02:42:47:ca:1e:4d:93:c8:c5:
         1e:6f:49:db:72:85:be:b1:9c:0d:40:48:98:33:a9:44:e3:18:
         87:6f:20:57:83:b0:4e:1d:59:38:6b:83:bb:e5:db:d3:8f:be:
         dc:63:e7:ee:f4:5d:6f:b0:e1:75:a2:a2:77:4e:1c:82:2f:5c:
         6c:f6:15:ce:a2:90:55:bc:de:c5:1e:7e:6d:12:0d:a6:00:fa:
         d0:12:2e:47:d0:1f:58:e9:6e:11:1a:3e:bb:e2:aa:90:e6:bd:
         86:b3:5f:e0:24:6b:e4:8e:62:2f:ab:4c:a1:aa:d8:0a:60:1e:
         f2:f4:e2:b8:e5:d8:82:54:ef:3d:34:bb:ec:ac:7f:49:a2:45:
         f6:f7:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:02:39 2025 by rpki-client