Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63fbe542-1563-3556-a39b-7065c5271cf3.roa
File:                     63fbe542-1563-3556-a39b-7065c5271cf3.roa (raw, json)
Hash identifier:          G307rmImeS/TLcDf80E0Ie1r8oWV8P23sTxXAleNCOI=
Subject key identifier:   F9:FE:39:7B:AF:36:66:B0:B4:EE:80:35:EC:01:7D:14:61:53:A1:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D129570957DD525EF4C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63fbe542-1563-3556-a39b-7065c5271cf3.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397242
IP address blocks:        156.154.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d1:29:57:09:57:dd:52:5e:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=0bd9a17b-b58e-4224-ac1b-e3129fa80924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:76:fb:7e:a8:07:e0:d4:f0:3a:c8:39:88:
                    da:9d:e3:03:56:49:53:d6:c9:60:2d:14:d8:2c:5e:
                    36:59:ca:02:3b:fa:73:51:b4:a6:1d:92:f7:e1:e0:
                    4f:ed:c5:b8:e5:86:3b:21:fd:0d:ca:50:36:e9:ec:
                    db:48:64:66:6c:bb:d2:27:1a:fa:25:92:cc:ad:37:
                    2b:4e:68:14:01:fb:f4:fd:e3:c1:83:5c:ca:c4:fe:
                    ba:fa:55:84:8e:7e:d0:a9:ab:35:ed:5d:24:f5:36:
                    14:10:7d:1d:24:8f:93:f0:07:f9:8f:16:c8:8a:88:
                    fd:0f:ab:31:d6:c9:16:91:98:d6:7c:e3:a7:6e:da:
                    7e:26:c8:28:14:16:f7:4e:71:3b:8a:3e:31:93:b3:
                    2b:25:42:32:66:db:f6:2b:33:a8:94:d3:2e:6b:95:
                    31:de:e4:38:d4:de:c6:78:eb:2a:87:53:bd:4b:a4:
                    a9:6e:a9:a9:6c:fa:d8:bd:92:8a:fe:e2:14:d4:4c:
                    d3:6e:50:57:3e:77:bb:8a:85:41:43:b7:23:37:64:
                    cb:cb:46:3b:9f:b9:7b:2f:ea:0a:99:80:a0:c9:a0:
                    ae:51:61:f2:1e:48:b6:58:56:23:c6:a2:09:95:a5:
                    39:bc:da:b4:9a:34:a7:7e:b8:fe:26:7f:82:21:b7:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FE:39:7B:AF:36:66:B0:B4:EE:80:35:EC:01:7D:14:61:53:A1:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63fbe542-1563-3556-a39b-7065c5271cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0c:91:65:f0:19:de:89:74:97:93:d4:84:a0:5a:5a:e9:0f:
         c3:6d:e1:dd:9c:96:85:ea:89:8f:0c:b4:81:46:9e:34:d6:96:
         67:93:7a:9b:91:b5:06:1a:8b:35:45:3a:11:44:45:07:92:16:
         88:bc:6a:44:29:df:7a:64:a8:75:99:cc:0d:74:bc:0b:1b:c1:
         da:33:6e:d8:3a:35:9f:ce:65:4d:a4:a5:35:b2:46:3e:de:b0:
         5c:d2:50:3d:0e:23:51:c1:26:2d:c0:ec:f9:07:90:56:01:a7:
         e7:24:70:c6:24:98:d3:3e:d7:af:aa:0e:ff:f1:ea:57:be:3c:
         a0:a9:14:83:1f:c8:7e:6a:0c:2a:fb:48:b2:2a:ba:ad:24:68:
         0e:c0:63:83:b1:fd:e0:ce:01:38:05:a4:f3:b3:59:72:e4:e6:
         08:b2:44:61:64:c5:5f:09:14:64:45:e1:19:b9:0b:32:2e:ad:
         61:ee:03:de:7c:b4:f4:61:35:c0:ae:94:a1:8e:6c:82:c8:18:
         8b:2f:3e:38:ab:dd:80:7e:f4:7e:f9:ca:cb:05:d2:1b:30:f4:
         05:da:f6:15:71:d2:a5:7b:f4:7e:e9:09:ea:b2:27:f9:ba:46:
         d1:c4:78:39:49:f9:c1:a4:f7:e1:a2:b7:44:fa:93:fc:e8:9e:
         47:41:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:39 2025 by rpki-client