Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029ab985-b920-3da9-9694-32c80ea4af18.roa
File:                     029ab985-b920-3da9-9694-32c80ea4af18.roa (raw, json)
Hash identifier:          yaOSewVtPJeoxnRi1AVTtNiLTmmahZ1KhiEOQU4MAvo=
Subject key identifier:   FF:38:EC:4B:12:4C:CB:31:3D:FD:61:DD:C8:92:B2:F1:93:38:E7:05
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A3B7B2506DA86E81BD29E4140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029ab985-b920-3da9-9694-32c80ea4af18.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     397231
IP address blocks:        156.154.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:25:06:da:86:e8:1b:d2:9e:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=22a4c991-bc69-4ead-b5f4-7207674f6695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:af:84:00:a2:a5:ea:74:f1:ff:39:20:32:
                    23:7e:3e:fc:ce:e1:18:15:0d:37:60:e8:7c:f6:b8:
                    44:8d:bf:d1:f2:d1:8a:7a:cd:f8:e4:f4:88:85:f8:
                    a9:0c:65:3f:73:61:0d:d1:4e:5d:bd:a4:a0:08:7c:
                    d1:22:4c:77:ac:f2:ee:01:65:30:8b:67:a9:6e:0f:
                    ff:46:64:c1:f4:32:c8:03:a0:0b:11:08:6d:49:99:
                    d1:5d:0e:1d:15:e5:f4:43:5f:6b:d9:f2:15:31:ad:
                    a9:c4:0a:98:67:64:26:6e:67:2f:09:af:3e:39:41:
                    a4:15:01:a8:59:8d:c3:c6:98:ba:06:9f:f3:70:6f:
                    60:16:d9:9a:25:9c:6d:06:a7:b4:ca:cf:91:9d:b4:
                    28:2f:4c:38:ef:61:63:3d:7c:19:f8:0b:4e:79:c9:
                    3f:e9:83:8c:af:57:a6:3d:e8:3c:34:a4:84:e4:f9:
                    2c:e5:d0:54:1e:d6:00:d9:d2:e4:33:fe:ef:c9:83:
                    5a:a3:45:02:9f:ee:e1:6a:98:3c:51:af:48:bb:9a:
                    fb:1e:ca:b0:7a:f5:98:c4:45:22:7c:46:a9:55:9f:
                    3e:5c:df:46:8c:98:54:2c:2a:69:45:fe:d2:1a:90:
                    ab:a9:33:45:1b:b3:82:74:23:28:a8:a2:37:82:05:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:38:EC:4B:12:4C:CB:31:3D:FD:61:DD:C8:92:B2:F1:93:38:E7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/029ab985-b920-3da9-9694-32c80ea4af18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8e:5a:ed:d0:c0:93:d3:e6:4a:df:ff:31:4e:0b:0b:b4:b5:
         47:1e:38:fe:2b:69:dd:de:86:9a:e4:bc:69:86:a2:7b:ef:43:
         0f:1b:59:16:f5:be:69:0c:d1:f8:a2:c7:0e:f8:47:cc:ca:c3:
         59:16:f7:15:dd:70:08:ae:ee:f8:7c:9f:32:10:84:e3:77:fa:
         9e:ad:bf:ff:e4:77:81:86:36:95:43:b8:84:c5:e5:23:4f:c2:
         95:65:9f:7d:fd:cd:b5:0f:d9:65:c4:a7:c8:e3:30:24:13:28:
         45:d8:fb:e3:73:2e:91:35:5a:8e:31:b5:20:8c:9d:e8:a3:7b:
         e7:19:bc:45:f9:8d:5b:0c:2b:7e:8a:ff:35:66:ac:98:08:cc:
         ad:49:55:64:53:0e:08:c9:a2:c2:10:87:35:b9:9d:08:8d:25:
         d1:75:6b:2a:53:ba:36:31:25:7c:83:c1:0e:3e:e9:d1:06:bf:
         61:18:3a:65:88:97:fa:bf:07:01:bc:2b:78:b2:41:36:8b:53:
         60:9e:32:71:33:38:f8:7c:02:8f:a1:3d:59:84:2b:d7:42:55:
         ca:56:36:ce:1e:58:36:a5:d2:af:d4:94:61:58:d8:f6:38:64:
         b9:61:c3:22:92:c7:3e:05:84:e0:17:43:75:36:95:41:b1:10:
         f3:56:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:21:16 2025 by rpki-client