Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe74c02a-bb72-3732-945a-eb4391a13010.roa
File:                     fe74c02a-bb72-3732-945a-eb4391a13010.roa (raw, json)
Hash identifier:          Ea9Vsd1fmsx+aybpQn6O5JWwt+MW5UfoAVa8+75L1jU=
Subject key identifier:   A3:BF:2A:14:B2:65:21:76:6C:C6:7A:00:E4:11:55:2F:8F:71:4F:FD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F800414002EBD020B3AD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe74c02a-bb72-3732-945a-eb4391a13010.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397240
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:00:41:40:02:eb:d0:20:b3:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=f7efc554-332b-4765-ba77-978d32c11928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:23:c2:47:30:75:7d:20:d9:29:09:d6:a5:
                    e2:66:ef:cf:14:e4:91:74:8c:3a:7a:ab:b7:34:c8:
                    d0:19:4b:bd:74:07:1f:c4:a0:ff:db:cf:d4:ef:38:
                    eb:b0:c3:68:fd:77:94:da:1a:39:12:9a:7f:c9:20:
                    8b:da:46:42:7c:7f:dc:63:0e:9d:fc:4f:93:92:78:
                    e6:dc:f0:4a:f1:49:73:85:76:96:39:66:13:af:c6:
                    27:c8:b1:31:2a:03:f9:79:34:a6:b9:a4:95:b5:21:
                    4f:b1:e0:3d:8d:ba:24:ed:0f:3e:25:27:6c:4b:79:
                    55:af:5a:8f:da:8f:d5:f9:ad:a5:ba:57:b8:e3:c5:
                    d9:a9:9b:66:e3:b6:34:c6:09:cf:ac:1f:90:d6:6f:
                    d3:85:82:9d:28:54:28:1f:0f:96:2b:b7:d8:fe:be:
                    20:b7:8b:ca:d5:d0:6a:a1:81:b9:3f:6f:49:26:9d:
                    c0:97:e6:f3:13:4f:6f:0e:a0:37:f0:9f:38:42:59:
                    d2:5e:26:4c:3a:fc:ea:25:61:58:62:a9:e3:5a:ab:
                    e7:bf:02:46:82:63:7f:32:f5:8e:59:92:9f:69:e6:
                    f0:49:5d:70:a7:9c:a8:6d:f6:d2:5d:52:4e:90:14:
                    e1:a9:53:a2:83:49:5d:f9:c3:fc:20:af:0a:33:0f:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BF:2A:14:B2:65:21:76:6C:C6:7A:00:E4:11:55:2F:8F:71:4F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe74c02a-bb72-3732-945a-eb4391a13010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:e6:08:09:e5:ec:a7:a4:6f:d3:bc:4e:ac:c3:03:a6:56:
         7a:6c:2c:33:db:9c:70:50:2e:8d:c7:ba:2f:85:f9:cc:37:89:
         50:f2:f8:cc:88:33:0b:8a:77:fe:6c:34:76:8a:08:44:b3:44:
         31:a1:6e:c4:6f:9b:59:98:14:a8:4e:02:58:80:b2:b6:07:92:
         52:31:6f:54:a7:09:72:4b:e5:a8:a0:c3:e7:c2:b5:54:6e:9e:
         6c:2a:1b:10:f3:3d:10:3b:47:8e:b8:3a:31:00:07:b2:85:49:
         07:9c:74:a4:8b:2c:df:d3:22:8a:a1:43:31:7d:47:85:49:8c:
         12:fc:5d:71:f8:d6:53:92:9f:7e:2f:02:83:9c:bf:57:16:02:
         fc:6c:0e:6c:a6:c8:40:11:82:9e:ee:52:d0:b7:35:66:c7:0f:
         46:8f:45:af:25:47:4e:96:6e:6f:df:21:06:6a:64:ea:32:69:
         8b:4e:69:4e:bf:1b:18:de:c4:f9:4d:d4:5a:f9:51:1a:91:37:
         b0:3f:cf:3a:10:75:53:cd:23:e5:bf:1c:3e:44:36:33:9e:81:
         94:36:ac:d7:10:4e:b6:5f:bb:6c:18:2b:31:61:55:ea:24:bc:
         e5:c9:c0:04:08:fd:f4:37:48:4e:1f:cd:44:1e:3a:af:61:17:
         46:1e:ab:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:05:21 2025 by rpki-client