Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad36e6ab-8357-38fa-9b2f-e9d34229b9ff.roa
File:                     ad36e6ab-8357-38fa-9b2f-e9d34229b9ff.roa (raw, json)
Hash identifier:          b+ZQBOlojnxgOczKWc6DRRyc1935Lh1Lcx3sub44RiE=
Subject key identifier:   BF:25:07:21:BA:1C:71:69:BB:37:DF:B7:BF:F1:E6:D7:B6:ED:6D:42
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A682635E07F3F62BF9269FF40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad36e6ab-8357-38fa-9b2f-e9d34229b9ff.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397217
IP address blocks:        156.154.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:35:e0:7f:3f:62:bf:92:69:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d53ac91f-6e45-4e07-9511-4670ad880f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:aa:38:39:31:bf:d3:d0:d7:88:ca:7f:ef:
                    fa:bf:70:37:c9:61:11:30:79:df:64:bb:82:ce:ab:
                    64:36:5b:8f:bb:48:8e:1c:8f:a5:38:a9:9e:04:96:
                    53:2b:24:85:28:10:ff:ad:45:10:d5:a9:67:03:4b:
                    88:40:f2:89:f3:6d:b1:5f:79:f0:99:4b:b1:e0:f7:
                    96:96:c1:0d:12:c5:eb:06:98:3e:e6:5a:24:aa:a3:
                    b9:6a:5d:26:71:84:4c:0d:0d:c2:b6:b3:1e:8e:1e:
                    0f:fb:dc:22:f5:e5:7f:e2:56:1d:f2:7e:df:81:11:
                    01:a2:bd:91:95:51:3b:40:75:da:b0:38:2f:b8:2f:
                    94:10:9d:6b:7a:b2:26:cf:d4:2e:86:46:d8:ce:77:
                    19:14:ae:25:dc:95:01:13:d7:79:b9:fd:ae:21:81:
                    83:81:ab:45:a9:5e:95:f4:ed:d6:bb:48:51:3d:f4:
                    55:ab:14:41:80:05:32:36:75:83:e3:67:b4:a0:cb:
                    2d:c8:e6:dc:5d:e8:57:7d:de:41:b4:a5:d7:8d:d2:
                    bf:69:5a:62:7a:68:d7:01:f5:52:f5:da:19:03:20:
                    e4:fc:7d:d0:4a:32:d4:f7:ca:51:68:ac:d0:91:ad:
                    3a:7e:4e:b8:fe:fe:93:52:cd:5e:a9:7f:c3:7d:eb:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:25:07:21:BA:1C:71:69:BB:37:DF:B7:BF:F1:E6:D7:B6:ED:6D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ad36e6ab-8357-38fa-9b2f-e9d34229b9ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:f4:d0:94:32:dd:d1:dc:65:8b:35:ee:ea:e5:23:cf:e4:
         d3:50:bb:6e:e1:22:45:5b:13:b0:d3:d6:15:63:98:76:fb:5c:
         a5:13:b5:93:70:5d:ec:ce:51:e7:e6:60:eb:bc:f4:59:82:e6:
         9d:1e:43:a4:21:5f:b4:dc:0c:6a:d8:24:72:d4:82:c0:8e:74:
         36:7a:13:7d:46:24:b2:a6:f6:86:b7:4a:9d:56:53:7c:ca:6a:
         2f:ec:f3:b2:dc:e9:4b:3b:12:f4:53:10:d3:35:bd:38:fb:84:
         02:e1:28:ba:d8:0a:be:9c:ef:ab:ea:b8:7e:44:0a:8c:fb:4a:
         bf:44:4d:a5:f7:0d:c5:51:de:5b:dc:6f:b1:8a:65:9f:b9:80:
         e3:43:d4:bd:c2:b2:49:ce:f4:c2:09:10:e9:52:2d:0c:d7:a6:
         18:10:bb:ac:b5:75:be:19:f1:19:6d:a5:ca:dd:8e:f5:2a:ff:
         90:f4:09:83:50:0f:bf:19:75:29:30:8f:93:93:84:02:d5:9c:
         55:86:da:bc:63:8a:2d:c6:bc:9b:de:6b:d8:67:55:61:6b:4c:
         ba:7f:05:99:44:42:0c:c2:b5:98:87:3f:a5:03:e2:0e:e3:ab:
         b4:b5:ec:35:df:79:1f:d2:b6:9b:76:f2:cc:68:ac:98:55:02:
         9b:24:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:15:23 2025 by rpki-client