Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cfe6b9e-8067-3914-aa6e-08ea05cf49f0.roa
File:                     7cfe6b9e-8067-3914-aa6e-08ea05cf49f0.roa (raw, json)
Hash identifier:          EdJA8SFxW9/gUrH6OouOmJpVKNsBH69pzKfTRLXoOZQ=
Subject key identifier:   80:4C:2D:73:16:37:A4:C8:F8:D6:63:E1:04:D0:89:91:2F:FF:A1:FF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68262469CFFA9B29D02B8300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cfe6b9e-8067-3914-aa6e-08ea05cf49f0.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397219
IP address blocks:        156.154.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:24:69:cf:fa:9b:29:d0:2b:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=a6879a81-4877-463a-b78a-22920454e686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:cf:69:02:83:29:2f:a7:90:bb:99:c3:fa:
                    00:a3:e2:f3:2e:4f:a2:5d:11:47:c9:47:99:ee:42:
                    c8:57:45:f0:52:2d:86:79:5e:cf:e7:46:6a:3d:1e:
                    59:ae:a4:cf:8b:eb:d2:84:36:b3:93:5d:1b:78:e7:
                    52:d0:f2:43:05:58:47:68:8c:b9:7c:00:68:46:51:
                    c5:13:6f:8b:39:43:a6:9c:2b:9e:5d:43:f4:f3:3b:
                    75:e0:54:42:05:b7:e7:42:a2:b1:6c:29:19:78:42:
                    ed:23:f9:74:eb:95:a4:e0:c5:a4:6b:5d:34:3e:d1:
                    3d:26:6c:2a:eb:c6:93:e4:55:16:e2:bf:8d:2c:b1:
                    28:49:d6:7a:ac:3b:6e:c7:43:b2:82:d3:a7:60:92:
                    3f:6e:b5:d8:2a:3c:e5:8a:39:dc:67:56:3f:a4:48:
                    c2:91:05:0f:c7:8f:7d:c4:1a:fd:7d:a0:8e:46:c6:
                    7d:14:7c:7a:f6:69:cf:35:bd:ae:b8:4a:18:72:d8:
                    67:27:61:86:2f:c1:81:a5:c4:b7:a7:66:79:1d:e6:
                    7e:12:ef:46:3f:a6:53:bc:3b:b7:46:77:bb:ba:d2:
                    50:1a:ff:5f:de:7b:ef:b3:d3:d4:30:10:a1:30:66:
                    3f:1c:92:74:f2:7c:dc:90:ba:65:df:9e:1b:66:aa:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4C:2D:73:16:37:A4:C8:F8:D6:63:E1:04:D0:89:91:2F:FF:A1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cfe6b9e-8067-3914-aa6e-08ea05cf49f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:2e:93:7e:d9:f4:6b:93:54:6a:ae:f2:fa:c2:ae:cd:f3:e2:
         19:b2:cf:67:51:5f:b7:e7:18:7b:cd:06:7d:d7:66:2a:a3:53:
         b5:7d:89:de:6e:88:0e:9f:71:ca:a5:ec:ad:d2:88:6b:76:9e:
         d8:e5:b2:6a:34:fa:95:1f:bc:2b:1c:4e:d0:71:27:dd:be:d2:
         c1:2c:57:b7:96:63:a5:f2:87:b7:10:e1:ea:68:98:42:8d:0d:
         84:ce:f9:6a:ba:3a:4b:10:2e:30:c7:fa:98:3c:1e:18:2f:0d:
         06:57:94:f8:79:8b:0b:3a:b5:50:63:0a:3a:ef:ec:e4:b4:b8:
         57:07:4c:c3:03:da:14:9e:3f:38:0e:11:99:b7:3d:bd:c5:cb:
         1a:4d:9a:35:2e:2b:7c:b2:22:7c:d2:15:f6:3e:b0:6a:0d:1e:
         ad:65:08:e3:02:39:da:ef:b4:cd:a1:52:a7:72:f8:a0:bb:db:
         cf:bd:3a:5e:47:83:e2:11:41:d1:fd:5c:68:57:2f:0d:43:cd:
         51:26:85:2c:36:34:ce:40:a9:25:17:99:42:41:b4:2d:d2:d4:
         42:45:04:ff:d9:76:30:4b:8f:32:f4:8a:7a:35:91:44:1a:3b:
         73:5e:42:2c:c4:ec:e8:36:f3:d6:68:5f:33:ad:d6:44:bb:c9:
         1f:8e:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:55 2025 by rpki-client