Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0179b08-6586-3b8c-9a5c-900199d74a9a.roa
File:                     b0179b08-6586-3b8c-9a5c-900199d74a9a.roa (raw, json)
Hash identifier:          VOBwWp6c+JiTDR4nS8vQphC8Kbaw0XvTByjZsT/LlG4=
Subject key identifier:   30:AF:0C:D4:29:9F:D9:E7:DC:25:97:73:36:D3:5A:D3:1B:40:8C:11
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7FB07E10AE8A79EA36420
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0179b08-6586-3b8c-9a5c-900199d74a9a.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397227
IP address blocks:        156.154.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:fb:07:e1:0a:e8:a7:9e:a3:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=8d465238-994c-46d5-97b9-c48f2572f5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:40:7c:60:f2:4c:d3:dd:d6:8b:23:c1:c9:
                    71:98:34:af:31:7f:0c:99:52:da:1a:bb:4a:ac:f1:
                    15:f8:df:ab:65:c1:d9:77:5c:5b:10:6e:9d:63:5d:
                    5c:a9:7b:e5:9f:8f:2c:79:88:7b:56:9b:3c:17:78:
                    7b:54:f8:6a:0d:bf:1a:70:e9:38:0d:0f:ec:19:e3:
                    dc:a1:2f:33:b0:69:e5:31:e9:05:92:ce:f4:98:b1:
                    fd:03:8a:9e:5e:77:16:f7:07:07:99:5d:66:b2:b5:
                    3f:e1:eb:54:ba:0f:88:fa:7c:44:c8:c7:49:28:74:
                    28:d8:ec:59:7c:c4:ab:fc:1a:55:25:30:64:36:18:
                    73:ac:58:c5:f6:ef:b3:71:5e:11:81:d5:91:15:3a:
                    1d:03:7a:46:d1:ea:01:1a:01:4d:bf:bf:5f:16:b4:
                    26:45:6f:8c:a1:cd:73:35:bf:b3:4d:eb:2b:c6:aa:
                    f9:ca:54:ce:45:7a:12:67:5c:18:a7:1d:25:14:87:
                    15:dd:b0:c4:53:b6:bc:1f:be:c2:4e:c5:7c:6f:9f:
                    2c:3a:9a:ea:71:da:e3:a9:56:57:9e:22:aa:71:07:
                    c9:98:71:7f:47:0a:7e:15:ea:28:43:45:28:0c:e0:
                    c0:c9:48:4b:c9:9d:08:e3:25:5a:61:45:bb:a5:7c:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AF:0C:D4:29:9F:D9:E7:DC:25:97:73:36:D3:5A:D3:1B:40:8C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0179b08-6586-3b8c-9a5c-900199d74a9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:65:99:c8:d9:4f:51:73:be:c5:97:89:27:01:cf:b6:79:
         6d:df:0f:68:b4:7b:a6:c2:7f:c4:7a:f0:43:9d:02:a1:91:5a:
         d6:24:90:1a:c6:50:74:4e:ab:6f:43:c2:67:c0:e4:cd:57:d3:
         37:34:56:dc:26:96:a3:c3:66:13:c2:f2:e4:61:36:c2:ab:41:
         b4:b8:66:ec:ec:58:29:c4:67:e0:cd:45:92:d9:cc:57:ba:ac:
         e1:93:69:75:60:1d:af:26:75:ea:c9:f9:84:56:fd:1e:7a:c8:
         64:eb:5e:65:59:0e:a5:60:db:99:c3:07:68:8d:7d:65:41:35:
         75:1a:97:c0:5d:40:20:14:04:02:98:59:d3:4d:07:d0:03:5e:
         4a:e3:ce:f3:5b:4f:99:1a:e7:dc:0e:08:4a:f6:71:2a:12:fd:
         ea:1b:9b:86:f2:ba:f7:65:72:87:68:94:28:50:1c:7b:a9:d8:
         78:7c:e8:09:48:58:50:91:4c:89:4c:8d:3a:0f:2b:49:ee:66:
         32:34:0c:30:e8:4d:dd:7a:23:8d:ca:27:92:5a:f7:a4:06:86:
         8e:e6:3c:95:ce:49:6b:e9:e7:b9:54:fb:bd:14:1b:1d:a6:4f:
         a0:61:41:9a:7d:1d:6a:22:f0:3a:e2:00:ac:6c:95:c8:c4:a8:
         88:b6:fe:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/sH4Qrop56jZCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
OGQ0NjUyMzgtOTk0Yy00NmQ1LTk3YjktYzQ4ZjI1NzJmNWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyFAfGDyTNPd1osjwclxmDSvMX8MmVLaGrtK
rPEV+N+rZcHZd1xbEG6dY11cqXvln48seYh7Vps8F3h7VPhqDb8acOk4DQ/sGePc
oS8zsGnlMekFks70mLH9A4qeXncW9wcHmV1msrU/4etUug+I+nxEyMdJKHQo2OxZ
fMSr/BpVJTBkNhhzrFjF9u+zcV4RgdWRFTodA3pG0eoBGgFNv79fFrQmRW+Moc1z
Nb+zTesrxqr5ylTORXoSZ1wYpx0lFIcV3bDEU7a8H77CTsV8b58sOprqcdrjqVZX
niKqcQfJmHF/Rwp+FeooQ0UoDODAyUhLyZ0I4yVaYUW7pXxYDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCvDNQpn9nn3CWXczbTWtMbQIwRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjAxNzliMDgtNjU4Ni0z
YjhjLTlhNWMtOTAwMTk5ZDc0YTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXlZZnI2U9Rc77Fl4knAc+2eW3fD2i0e6bCf8R68EOdAqGRWtYkkBrG
UHROq29DwmfA5M1X0zc0VtwmlqPDZhPC8uRhNsKrQbS4ZuzsWCnEZ+DNRZLZzFe6
rOGTaXVgHa8mderJ+YRW/R56yGTrXmVZDqVg25nDB2iNfWVBNXUal8BdQCAUBAKY
WdNNB9ADXkrjzvNbT5ka59wOCEr2cSoS/eobm4byuvdlcodolChQHHup2Hh86AlI
WFCRTIlMjToPK0nuZjI0DDDoTd16I43KJ5Ja96QGho7mPJXOSWvp57lU+70UGx2m
T6BhQZp9HWoi8DriAKxslcjEqIi2/pc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:33:55 2025 by rpki-client