Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72b7d748-fb2f-31d5-b361-b3ba9ff2be23.roa
File:                     72b7d748-fb2f-31d5-b361-b3ba9ff2be23.roa (raw, json)
Hash identifier:          pEK0EBU7ZlHtAz94fNcnW//QmViKOSPMDT9mIYa7v7w=
Subject key identifier:   75:BA:1D:DA:98:B5:09:52:28:A8:83:77:12:11:59:EE:ED:55:30:4A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D66681441BF693B1D800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72b7d748-fb2f-31d5-b361-b3ba9ff2be23.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397231
IP address blocks:        156.154.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d6:66:81:44:1b:f6:93:b1:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=e5ab8acf-a05e-4888-b6aa-605d66cccb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:69:ec:8c:52:d3:4f:75:3c:e0:d3:33:c6:
                    be:dd:91:37:7c:e4:55:ca:63:87:49:17:53:94:fa:
                    5f:ef:30:23:c0:00:3f:85:cd:ed:c7:b8:f0:0f:f1:
                    53:a2:e5:2e:aa:43:5b:c5:d4:57:08:e7:ca:1e:cf:
                    12:ab:4e:c5:4b:37:37:0f:73:f5:87:1e:59:82:ad:
                    ab:70:a3:0c:6e:fb:bd:58:8e:8c:11:09:69:20:60:
                    31:b0:67:12:c5:cf:83:f1:12:6f:af:98:08:f8:ae:
                    b7:04:b0:62:a9:39:84:0d:f4:82:02:f0:15:33:e0:
                    a2:a9:12:35:5c:49:92:7f:e8:0d:44:43:9b:08:8f:
                    c9:d9:65:53:95:43:02:d2:59:b1:a7:01:77:eb:dc:
                    84:29:2f:1c:11:1f:04:5d:95:ac:9a:bc:73:8b:a8:
                    02:a6:98:73:1d:ed:c2:18:95:be:ce:41:8d:86:02:
                    90:a0:f0:c9:6b:18:9f:3c:6c:b7:c5:d8:83:34:ac:
                    bb:4f:7b:4d:c5:2c:9a:9f:45:b9:ca:f9:3a:7a:17:
                    9e:f5:ca:b3:13:8c:a8:83:bd:99:33:4a:2c:4b:cf:
                    19:ee:28:6b:7a:d9:67:04:46:3c:4d:48:3d:dd:bb:
                    cd:05:c2:6b:88:05:22:b7:53:66:db:ed:b5:7f:10:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:1D:DA:98:B5:09:52:28:A8:83:77:12:11:59:EE:ED:55:30:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72b7d748-fb2f-31d5-b361-b3ba9ff2be23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5e:e9:e4:3b:c9:55:60:be:1a:d1:49:6a:5c:2a:02:d7:7b:
         28:5b:7a:b2:cc:06:91:3d:ee:ae:bc:d1:9b:d1:e0:14:e8:ac:
         82:83:a5:ab:bf:f2:af:81:6d:cf:6a:2a:79:e1:de:da:a5:fc:
         5b:4a:d3:90:6a:77:29:d0:f6:0a:c3:6e:59:43:c2:8f:9b:d0:
         4a:d2:01:27:48:3c:de:9d:6d:52:3b:ba:35:38:c4:da:20:27:
         be:89:06:fa:28:d9:db:ef:2b:c6:cc:d9:9f:da:c6:d0:db:73:
         71:8d:13:e7:79:0f:70:5a:f4:92:b4:7f:a8:3c:51:c9:b3:01:
         3f:89:61:bb:a9:37:f5:0a:06:d2:b6:b5:db:c4:f5:cc:c6:96:
         6e:bf:cd:77:45:e2:7c:87:32:01:b5:e6:96:f3:17:ce:c4:b0:
         2d:8c:6c:11:f7:f1:ad:09:3b:3c:d9:13:15:22:de:d2:74:c2:
         6a:cf:1b:55:0b:48:f6:ba:41:2e:d7:b5:39:fe:1a:fd:b1:53:
         71:97:21:a3:ae:4c:a2:c0:1f:a2:10:96:90:dd:5a:95:0c:48:
         9e:90:8c:c1:c0:da:da:44:8f:98:07:89:35:f8:8e:fc:d5:75:
         c2:5f:4c:44:6a:78:f8:60:97:8a:c1:40:57:6f:a8:4f:cb:d0:
         96:2a:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:41 2025 by rpki-client