Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/44541f16-af53-30d8-b0b6-0d2759c1c5ec.roa
File:                     44541f16-af53-30d8-b0b6-0d2759c1c5ec.roa (raw, json)
Hash identifier:          aU0VLPPXn83C65TzMw4FM/BsunH75u+xhcZ6pWwuHDc=
Subject key identifier:   DE:96:53:AE:41:54:33:30:E3:97:19:80:92:1C:E5:2C:B4:8C:2E:E1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A9E966709D516955160214700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/44541f16-af53-30d8-b0b6-0d2759c1c5ec.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     12008
IP address blocks:        156.154.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:67:09:d5:16:95:51:60:21:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=a89cd190-f9f0-45af-9702-99f5e13b1d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:d2:dc:a8:85:b5:ab:74:bd:1d:cc:88:66:
                    ac:80:0d:7d:25:5b:2c:19:d4:b1:84:22:c1:9a:6e:
                    c2:17:56:71:48:ac:06:72:8e:88:80:23:43:1c:b7:
                    7c:52:84:14:8e:73:0d:fd:d1:7e:93:ae:4f:69:e3:
                    30:14:ca:be:84:85:4c:f0:7a:64:d4:fb:1d:aa:6b:
                    8f:ae:79:34:bb:6f:31:7e:96:91:66:e2:8f:ba:40:
                    92:0e:8d:2b:b3:1e:70:a4:3f:73:b8:d0:1d:db:17:
                    a9:c7:2e:e5:33:6f:39:64:9c:f8:ea:24:34:53:b0:
                    05:d6:30:07:c2:a5:8c:5b:e1:33:5c:5e:29:a9:ee:
                    a2:65:00:40:eb:9b:bc:e6:49:87:a4:e0:4e:6d:43:
                    55:45:60:59:de:8a:54:3c:16:39:77:00:04:94:9f:
                    8e:b2:ff:4a:45:58:dc:12:9a:f5:72:8a:af:d7:db:
                    96:57:ed:a0:9b:50:af:c9:68:aa:17:54:05:a0:ed:
                    6f:18:8e:0f:c8:be:ec:81:61:ed:1e:a6:5d:10:d8:
                    1e:a2:cf:7b:92:00:3b:69:a8:fc:7c:0f:c1:a0:0b:
                    e7:cb:7a:2b:8d:92:a6:1f:f1:2e:98:bc:f6:27:e4:
                    22:8b:4e:5d:23:af:4c:97:c4:33:e5:6f:7b:a6:c5:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:96:53:AE:41:54:33:30:E3:97:19:80:92:1C:E5:2C:B4:8C:2E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/44541f16-af53-30d8-b0b6-0d2759c1c5ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:8b:7e:80:7d:7a:cd:61:6b:1e:96:08:da:fa:64:3b:3b:
         f9:fe:3d:af:a9:9f:0b:8c:b5:9e:d8:d4:a6:18:f9:51:a6:9e:
         74:4c:79:e2:55:0a:fa:1a:28:5c:44:f8:d8:41:db:bf:a7:2b:
         26:99:a8:82:a1:29:71:8e:b0:84:9f:91:c9:f5:1c:98:c0:b9:
         b1:da:a5:b4:b4:b3:56:01:68:44:f5:8f:96:1c:5f:44:e9:e5:
         1c:c6:8c:d3:af:18:d9:9d:f0:28:f7:14:ac:a9:e7:91:91:24:
         43:cc:07:f1:3b:10:ac:79:a9:50:c8:5a:24:80:57:54:e4:c9:
         30:8f:40:64:e3:f5:35:b5:4e:a6:4d:ad:eb:d1:f0:d1:e5:bc:
         65:08:e3:a5:93:ba:be:3e:a2:de:86:1d:ec:5c:26:ed:d1:d3:
         fa:a3:32:b9:7f:e6:f5:30:60:54:5f:78:b4:07:91:d7:e3:b1:
         88:ec:94:ea:85:fe:7b:a5:26:9b:41:96:02:fe:a5:bb:94:f2:
         8e:e8:6b:46:2e:18:c4:15:74:a3:14:5f:68:30:81:ac:8e:79:
         a4:55:ec:4e:43:78:69:d6:78:78:f6:ce:bd:7a:e2:66:ed:9b:
         5c:4c:21:f0:bf:a8:3d:ca:b5:6e:14:69:e2:f9:b4:40:b3:1a:
         2c:3a:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:29:46 2025 by rpki-client