Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa
File:                     23644723-5bc3-300f-bf32-56fdc1bfe903.roa (raw, json)
Hash identifier:          kdRhopJD0xviQAg166gizeTnbM7w7SSUPFBtVv/UKYQ=
Subject key identifier:   A5:B5:DE:D9:A5:D1:2F:A1:C4:A7:F6:BA:B4:F0:87:E9:73:80:EC:B2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D42FFC9BBF6E79B89130
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397226
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d4:2f:fc:9b:bf:6e:79:b8:91:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=92653399-1dae-45b0-aa4f-721d0c78542d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:e9:93:8c:a6:c0:bf:0e:71:98:58:cc:33:
                    5c:a5:02:9a:fb:f3:ae:ad:05:5b:2f:6b:21:24:2f:
                    09:03:e5:91:d3:4e:c6:70:46:78:64:51:fb:0a:7c:
                    bf:56:5e:9f:cb:93:f6:29:09:e5:18:86:b3:d0:3e:
                    60:15:e4:9f:b5:a0:0f:48:82:a9:a7:02:ee:0a:0b:
                    43:fc:80:cd:29:bd:b4:7f:8d:8b:61:a2:9d:84:4d:
                    32:4f:ff:5a:75:01:ef:18:b1:b7:6c:ae:7a:a6:67:
                    8a:12:5d:75:77:62:94:b6:a7:db:46:00:ab:88:22:
                    c6:67:57:4f:e1:64:47:c2:f6:48:b3:e4:92:04:67:
                    96:7f:0a:3c:b5:95:ae:89:ac:34:d0:fb:88:cc:13:
                    21:f5:7e:e4:38:de:51:d4:32:b0:73:1b:d3:df:12:
                    63:2e:99:8e:11:da:dd:fc:4a:80:de:b1:d6:e1:5e:
                    4c:63:9e:94:f4:99:1b:a9:a8:ec:20:33:3d:01:77:
                    c6:81:32:84:a0:18:00:f1:7c:41:29:71:19:96:ea:
                    cc:f0:69:7c:d3:2e:6e:ad:27:4e:01:3c:34:8b:66:
                    0b:7c:20:c0:b4:8f:4d:0c:bb:44:db:67:8f:d2:25:
                    e5:d2:48:b4:04:9a:ea:c5:a2:36:72:d5:69:ef:1f:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B5:DE:D9:A5:D1:2F:A1:C4:A7:F6:BA:B4:F0:87:E9:73:80:EC:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:53:62:58:8b:22:9c:61:63:a6:26:0b:d0:62:32:00:4a:ea:
         c7:5d:65:8d:76:9e:af:96:dc:9b:a8:8b:58:07:3f:1d:5f:76:
         4a:40:89:10:22:be:d5:dd:c1:f1:ae:81:6d:22:68:23:d2:ed:
         29:c8:4d:e4:06:26:45:09:dc:86:54:ba:fa:aa:c8:25:b3:70:
         08:02:8e:c1:bc:fc:ef:6d:7f:fc:05:91:e1:fc:d2:ff:dc:17:
         21:5b:64:95:5d:66:41:4b:6f:13:3e:18:ef:09:f4:d2:b6:ea:
         b6:db:be:5a:d7:dd:ef:d4:f4:b9:8f:fe:74:7a:16:15:4a:10:
         96:f1:94:1b:2a:02:ea:cf:5f:1b:80:0c:08:8e:74:47:e0:a6:
         13:b8:c9:15:82:d1:ea:2f:a6:0a:0a:5e:68:8c:cd:6e:e8:8a:
         d6:17:7e:19:91:64:5e:cf:fa:39:74:be:1e:d5:82:28:99:03:
         24:30:3c:10:c7:31:b1:fd:72:65:39:2a:92:2f:44:d8:6e:fe:
         7c:90:89:97:28:25:d5:e3:54:b3:0f:5c:15:41:a1:b7:06:60:
         4b:14:f8:a2:3d:16:8f:cf:64:cd:f4:64:91:c4:7d:3d:36:78:
         1f:1d:ef:a3:13:e6:92:94:ea:99:d9:5f:43:34:0e:5a:28:3a:
         50:38:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:21 2025 by rpki-client