Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/200e4e14-dc6e-3ab9-adc5-7eb2da9510f3.roa
File:                     200e4e14-dc6e-3ab9-adc5-7eb2da9510f3.roa (raw, json)
Hash identifier:          4YSKJQHoU9ZxTWy/eJt6a9Armi1pmc1Hk4v6R+scwJ4=
Subject key identifier:   AE:47:42:78:0B:41:63:FD:AD:45:50:6D:55:75:05:A4:66:B8:96:4C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A6826135A1B9C5DB3D24EE400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/200e4e14-dc6e-3ab9-adc5-7eb2da9510f3.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397229
IP address blocks:        156.154.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:13:5a:1b:9c:5d:b3:d2:4e:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=27e1111b-7450-4e79-85a9-923fd9db5dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:c2:cc:57:f6:06:e2:6e:3c:4f:3e:11:84:
                    31:c9:77:04:b4:0c:cb:66:40:b4:eb:b8:c8:67:d1:
                    ff:25:6e:5a:1d:e3:30:b2:40:39:c1:db:df:7a:61:
                    fa:40:0f:3a:e7:0e:f1:13:c2:9a:f8:70:f1:36:4b:
                    85:54:2b:d4:8e:45:8b:05:3e:e1:fa:85:e1:f4:dc:
                    a7:a4:7f:76:25:1a:c9:e3:64:b3:ee:78:f0:0e:3b:
                    62:ce:06:33:c2:75:80:16:4e:00:41:b8:16:ab:87:
                    bd:24:aa:8d:3e:17:9e:e2:72:f7:53:47:3e:ac:4b:
                    e0:75:f3:de:c0:af:5d:ee:2a:d6:67:47:d2:d1:7c:
                    0a:80:90:ba:fe:fb:04:3c:f0:43:df:8f:6a:24:bd:
                    fe:a2:48:d3:7c:48:43:9d:cc:b1:3a:09:06:6b:47:
                    da:63:8e:8a:50:50:4c:a8:56:b2:1e:e6:f6:5f:67:
                    32:22:c5:52:f5:c5:e4:56:69:20:69:64:8a:6b:ae:
                    28:c6:e0:29:a9:ab:dd:64:92:b4:d4:3f:09:d4:9e:
                    d5:cb:50:34:4b:2d:db:c7:37:cc:77:e5:50:58:7f:
                    e5:c5:a0:68:27:63:dd:9a:16:56:7f:21:b5:2f:6e:
                    d3:d6:a2:31:db:a6:18:db:9d:84:2a:36:be:c8:26:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:47:42:78:0B:41:63:FD:AD:45:50:6D:55:75:05:A4:66:B8:96:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/200e4e14-dc6e-3ab9-adc5-7eb2da9510f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:31:ee:42:3f:aa:60:04:6e:b1:44:9c:ed:6a:92:dc:c4:51:
         e8:54:02:0a:ca:6b:7e:f8:33:77:2d:86:75:da:40:7f:e3:11:
         f2:53:eb:cf:eb:52:e7:65:17:ee:42:53:2d:0e:10:8a:c4:11:
         3d:7d:9d:cb:bf:a7:cf:09:53:24:7c:96:3e:63:41:cc:2c:d2:
         0c:6d:27:f8:42:2a:c6:c5:91:7e:17:b6:54:bf:74:04:36:2a:
         47:0f:9a:5a:3e:07:23:60:b1:43:bf:19:ee:07:3d:8f:9b:26:
         70:4e:c2:fe:1d:7b:4e:c1:3f:e7:95:a8:d5:73:7d:4b:81:2d:
         49:23:64:c0:34:b6:06:3a:9f:3c:4a:a5:36:c1:72:0d:1e:88:
         5f:58:c6:3f:32:2d:1e:82:52:6b:46:e9:76:31:99:11:7d:dc:
         cb:24:58:26:2f:1a:33:03:a4:a0:35:0c:60:0c:90:ca:54:1f:
         b2:13:78:22:a2:3d:34:7c:c6:86:74:95:d1:e8:66:5c:9c:90:
         fa:45:0e:e9:c6:f4:24:30:74:bf:80:16:64:84:c0:86:05:57:
         2a:d7:64:bc:d0:ef:ec:b4:b7:51:78:a4:8d:fe:ff:b0:f6:aa:
         90:fe:a6:cf:39:ce:b9:47:ca:3b:8a:68:8c:6c:94:90:60:14:
         31:49:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:47 2025 by rpki-client