Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2470b0ad-7c6e-39f3-bdb7-18b577f06470.roa
File:                     2470b0ad-7c6e-39f3-bdb7-18b577f06470.roa (raw, json)
Hash identifier:          rNmPlTQ1204qY1uAOz1LI2hWT7hC2o6y+Fvz6Tba37Y=
Subject key identifier:   2E:7B:EB:C6:4C:DA:45:0C:79:9A:E1:C2:04:F9:AA:7A:A6:3F:8C:F7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A6826324187D9AAC70966AB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2470b0ad-7c6e-39f3-bdb7-18b577f06470.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397218
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:32:41:87:d9:aa:c7:09:66:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=30882386-3340-417a-822b-3fbdff3bb14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5f:5d:58:39:13:e6:8a:4c:a9:9f:87:65:25:
                    c7:a4:a9:23:64:28:2e:69:c3:61:79:c0:50:ab:5b:
                    a1:e3:0a:5d:2a:59:dd:d0:3a:f2:8d:32:79:b3:e0:
                    d1:0d:d8:5d:96:df:ae:57:3a:0f:d8:82:3d:4b:74:
                    88:a5:89:2b:06:3a:ce:e3:c6:00:b7:2c:e8:e0:e7:
                    fe:81:46:f6:68:8e:1a:be:4e:d2:3e:ea:71:28:8d:
                    d8:5a:57:b7:c7:0d:d5:4a:3a:cd:18:7c:76:89:ff:
                    6a:c7:cf:cf:b8:ac:8a:cb:0c:bf:35:9f:19:c7:3e:
                    7f:59:be:5a:0f:ac:8b:96:9b:44:81:47:5d:0c:a7:
                    e2:b4:23:90:82:95:48:0c:cf:8b:65:e9:83:8c:5a:
                    44:a3:d7:c2:8d:d6:54:65:56:59:0f:2b:1d:7f:9a:
                    dc:78:73:e6:60:35:fd:f4:2e:86:cd:52:a7:d6:d9:
                    a3:16:1b:11:eb:5d:60:6c:37:bc:9e:27:55:72:6f:
                    f1:f8:13:26:af:f1:95:e2:65:c5:61:fb:01:c5:09:
                    12:c0:ea:f6:e5:cb:c6:2c:24:c5:a1:42:f0:fb:0f:
                    75:2a:df:b0:ba:d5:a3:02:0c:26:a3:24:2d:f7:fb:
                    84:c1:73:87:d1:9e:91:39:88:46:28:0e:de:4e:d3:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:EB:C6:4C:DA:45:0C:79:9A:E1:C2:04:F9:AA:7A:A6:3F:8C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2470b0ad-7c6e-39f3-bdb7-18b577f06470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4e:be:91:8e:8b:24:d9:a9:24:a4:6a:f8:83:12:e2:86:f0:
         92:e4:8c:16:82:f2:fd:da:e9:fe:80:f3:38:f4:b4:ee:c7:e5:
         89:5b:37:a8:c4:a7:d8:3b:04:2b:f0:04:48:3f:ae:33:23:c0:
         a2:e6:c8:fd:b6:f7:b4:09:e9:e8:75:60:a5:39:bb:3e:2c:7f:
         6f:24:d1:bd:c8:c4:98:2d:4f:cb:73:25:af:cf:7c:23:01:94:
         09:00:82:2d:e9:27:60:f2:c9:93:4d:c5:a2:cf:53:82:fe:27:
         19:8f:c6:f3:8c:11:bf:d2:df:87:b6:48:4f:18:12:7e:a2:94:
         d1:d7:23:64:e9:23:6a:7a:ff:80:cc:14:57:de:ca:de:db:fc:
         4d:98:2e:6f:7b:15:0d:25:f7:11:d5:0f:ce:53:5c:36:be:cd:
         cd:4f:c9:32:6b:22:1d:d1:ee:5f:f0:55:05:16:e6:dd:46:ad:
         ea:12:4b:e3:61:89:f4:a7:52:e1:33:b2:22:19:b1:6b:0f:19:
         fd:30:00:db:67:c6:62:7f:92:75:61:2d:f2:f1:8a:4a:33:48:
         d4:51:43:4e:34:91:c9:07:ff:29:42:bc:bc:42:4a:5c:35:c2:
         b6:bc:41:e3:0c:13:14:5f:91:c9:ac:84:d3:0c:ff:02:d5:d5:
         23:d7:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:01:34 2025 by rpki-client