Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2535f03a-5d52-346f-bac6-69ed59adfe66.roa
File:                     2535f03a-5d52-346f-bac6-69ed59adfe66.roa (raw, json)
Hash identifier:          3J5L+FiEIFV0FOB1HW92XSQxKetRYJCChJteg7IX8oA=
Subject key identifier:   D2:DD:F6:9F:B7:E3:82:A5:EA:3A:86:B8:45:10:15:76:30:ED:C5:ED
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7ED1B087CBC81662D2D40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2535f03a-5d52-346f-bac6-69ed59adfe66.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397238
IP address blocks:        156.154.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ed:1b:08:7c:bc:81:66:2d:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=9ff45f9e-ca2c-4482-96bd-04ec534bc460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:c3:80:31:3b:33:29:a6:f3:b0:cc:2a:b8:
                    da:3c:11:3e:d7:0a:f6:42:4f:f8:13:71:64:28:62:
                    ec:7a:ef:85:27:b4:ec:f3:64:87:6d:dd:d0:38:50:
                    7f:9e:94:64:4b:dc:53:47:72:59:e4:84:e0:0c:12:
                    2d:cb:f8:d7:d7:f6:6a:b3:57:20:5e:76:5e:6a:3a:
                    5d:5b:09:76:f8:c9:d3:01:17:6f:5b:81:00:a9:3e:
                    91:dd:39:43:d4:dc:98:ed:6a:85:39:ba:28:e1:6e:
                    52:be:51:05:7d:f6:68:5c:2f:dc:35:cc:9a:55:f5:
                    7d:32:fe:5e:f9:94:9a:ed:03:50:f5:60:2f:18:04:
                    de:e4:36:3c:f7:68:cc:77:20:22:c0:84:9e:0d:8b:
                    f6:8c:ff:aa:ee:07:66:10:cf:87:eb:b7:e2:c7:ff:
                    4f:0f:12:f4:96:b7:40:77:52:56:aa:45:2d:da:5f:
                    e5:a5:4c:52:48:b2:0d:56:41:7a:18:e0:2d:20:68:
                    3d:6f:5e:7e:a1:87:09:f5:ec:c4:5d:f7:65:93:20:
                    47:c2:f8:00:8b:ea:24:3f:18:76:ae:8e:2d:ed:df:
                    06:8f:78:2d:f5:79:96:1e:75:9f:cb:e6:ed:60:51:
                    2e:c4:c8:21:14:b5:c2:09:0a:70:6d:72:4a:52:53:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DD:F6:9F:B7:E3:82:A5:EA:3A:86:B8:45:10:15:76:30:ED:C5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2535f03a-5d52-346f-bac6-69ed59adfe66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:f8:ab:e4:0f:fb:55:bc:f0:a1:84:ad:69:47:fa:9e:09:
         aa:cf:bd:e6:28:65:e8:21:eb:8b:74:4d:13:77:58:50:a3:84:
         aa:8d:fa:96:f9:12:ef:76:df:4e:85:8b:f7:13:de:1d:18:f8:
         24:cd:8f:14:ff:e2:a6:2c:25:6b:fe:d1:29:69:a9:7f:96:ee:
         2f:60:25:f0:ce:8f:72:65:5e:ea:18:6d:cd:f9:8e:14:d4:df:
         91:48:c2:20:7e:fc:73:ca:b2:16:26:05:52:ee:63:47:be:b3:
         43:78:18:7f:7a:34:6d:42:d2:ba:f9:97:20:7e:08:86:06:35:
         41:99:11:b4:84:f1:10:f9:96:c9:c4:dd:99:cd:72:b4:8f:93:
         57:ff:41:b7:ba:1c:3b:5f:85:8d:42:d2:bd:cc:69:0d:75:c3:
         c5:f3:77:fe:9d:10:d1:dd:7f:eb:ee:e4:1b:c6:41:59:4a:65:
         0c:61:81:6e:bf:7c:b2:1c:ff:bb:af:05:62:cc:d8:79:95:1e:
         36:4a:7b:aa:06:22:65:c4:28:e3:e7:a4:30:c3:f8:8e:80:97:
         da:69:8c:48:74:e1:03:b1:08:bf:0c:b8:a5:77:8e:71:de:13:
         a7:35:96:66:69:1d:ed:e2:1e:89:98:b3:db:71:35:1a:12:1b:
         27:76:d2:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+0bCHy8gWYtLUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
OWZmNDVmOWUtY2EyYy00NDgyLTk2YmQtMDRlYzUzNGJjNDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArznDgDE7Mymm87DMKrjaPBE+1wr2Qk/4E3Fk
KGLseu+FJ7Ts82SHbd3QOFB/npRkS9xTR3JZ5ITgDBIty/jX1/Zqs1cgXnZeajpd
Wwl2+MnTARdvW4EAqT6R3TlD1NyY7WqFOboo4W5SvlEFffZoXC/cNcyaVfV9Mv5e
+ZSa7QNQ9WAvGATe5DY892jMdyAiwISeDYv2jP+q7gdmEM+H67fix/9PDxL0lrdA
d1JWqkUt2l/lpUxSSLINVkF6GOAtIGg9b15+oYcJ9ezEXfdlkyBHwvgAi+okPxh2
ro4t7d8Gj3gt9XmWHnWfy+btYFEuxMghFLXCCQpwbXJKUlM1vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLd9p+344Kl6jqGuEUQFXYw7cXtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjUzNWYwM2EtNWQ1Mi0z
NDZmLWJhYzYtNjllZDU5YWRmZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACy3+KvkD/tVvPChhK1pR/qeCarPveYoZegh64t0TRN3WFCjhKqN+pb5
Eu92306Fi/cT3h0Y+CTNjxT/4qYsJWv+0SlpqX+W7i9gJfDOj3JlXuoYbc35jhTU
35FIwiB+/HPKshYmBVLuY0e+s0N4GH96NG1C0rr5lyB+CIYGNUGZEbSE8RD5lsnE
3ZnNcrSPk1f/Qbe6HDtfhY1C0r3MaQ11w8Xzd/6dENHdf+vu5BvGQVlKZQxhgW6/
fLIc/7uvBWLM2HmVHjZKe6oGImXEKOPnpDDD+I6Al9ppjEh04QOxCL8MuKV3jnHe
E6c1lmZpHe3iHomYs9txNRoSGyd20g0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:19 2025 by rpki-client