Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9430b751-01dd-31d7-8b6b-addcb4d92efb.roa
File:                     9430b751-01dd-31d7-8b6b-addcb4d92efb.roa (raw, json)
Hash identifier:          BL7xx3Qv2l+gS2RmqG1gLJw840yxIblkRAjd1EcjybY=
Subject key identifier:   CC:33:97:CC:A5:B9:A1:54:DE:DB:EB:6A:17:C6:61:BE:DC:8B:75:4D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D523F3A81132BC838780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9430b751-01dd-31d7-8b6b-addcb4d92efb.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397243
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d5:23:f3:a8:11:32:bc:83:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=f1c544a6-2350-46b7-b9cc-d472beb5782f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:fb:e6:92:03:d8:03:c2:df:db:c5:53:54:
                    26:fd:5c:ca:85:56:e4:da:00:53:99:08:88:a7:df:
                    f6:42:78:34:16:10:a0:ae:ba:ab:8a:11:b0:d5:5e:
                    cf:74:9d:38:a9:f3:f2:10:36:39:66:75:a5:db:f8:
                    47:f4:b6:e2:2d:98:22:45:81:89:e6:57:3c:b7:56:
                    e3:20:50:0f:a2:0f:17:be:e7:ed:28:4f:16:97:eb:
                    31:db:01:f3:89:e7:9c:61:05:c4:47:f8:fe:98:f5:
                    75:a1:31:ec:f4:49:55:ee:6e:7a:bc:e4:28:f5:47:
                    7d:3c:29:5a:df:0c:58:17:6e:26:79:aa:db:88:46:
                    4b:89:71:ea:4e:1f:65:12:6c:26:5a:48:4f:55:47:
                    a9:a6:5b:22:a9:54:c2:75:eb:fe:b6:14:db:7e:ac:
                    46:90:93:24:99:13:7e:23:ca:5b:67:3e:93:19:5c:
                    2b:c5:ad:c0:e0:c4:37:f6:30:aa:9a:df:e7:77:78:
                    2e:97:57:95:1e:9a:d0:d6:27:bd:ac:f8:9b:af:79:
                    58:77:4b:f0:60:7a:9d:a6:93:56:8d:c1:2c:2d:48:
                    96:b5:54:85:8c:f7:40:27:06:2b:d3:b0:51:47:39:
                    c9:94:ae:94:26:de:f4:3a:5c:73:f1:30:d0:d1:71:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:33:97:CC:A5:B9:A1:54:DE:DB:EB:6A:17:C6:61:BE:DC:8B:75:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9430b751-01dd-31d7-8b6b-addcb4d92efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:23:4c:0f:2b:0c:48:68:a8:87:0e:22:52:52:ea:00:4e:6d:
         56:23:2e:a3:71:5c:60:12:09:ea:a1:2a:11:bb:cb:e8:29:ef:
         6c:43:57:85:59:47:73:19:19:28:b1:3a:f6:13:31:0a:40:8b:
         15:a3:56:e3:a3:8b:78:71:a0:82:99:90:90:15:a7:8c:06:e8:
         15:ca:04:98:91:c3:a5:20:f0:4a:9e:d0:1b:4f:c5:a0:77:b8:
         03:ee:d9:4b:dc:b3:dc:f5:3e:48:74:93:19:f5:43:bf:25:47:
         f0:7f:c5:b3:6a:fd:81:50:43:e7:32:3a:c8:96:c9:fb:cc:81:
         fd:77:d2:2e:07:db:16:c7:3d:81:f1:58:7a:be:fb:59:33:83:
         c7:d2:b7:54:c6:2b:21:3a:77:e6:2a:f9:fd:96:24:0f:3e:34:
         24:01:b7:6b:db:de:26:0b:01:35:42:2e:02:40:b9:68:38:de:
         6f:90:c0:c2:62:62:1a:b2:17:00:7e:6a:fe:43:e5:9e:16:3f:
         8e:9d:80:18:a7:73:e6:3d:1f:c3:83:8e:3b:8b:fc:c8:8a:f4:
         1c:2e:4a:93:0b:00:dc:09:8c:39:fb:c0:fd:33:a8:2d:34:c9:
         f0:e9:88:17:61:a4:dd:02:95:14:21:e5:9f:d0:26:95:91:fc:
         01:f9:dd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:56 2025 by rpki-client