Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa
File:                     0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa (raw, json)
Hash identifier:          D0Y6Vdmw1vMW/YbtHCoS1r4ZeLskB3RS5DmYkUS6Zf4=
Subject key identifier:   A5:FE:54:7D:70:27:11:FF:07:4F:76:74:82:9B:7D:1B:7F:66:0F:51
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BF1CD1C558061ED427B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397230
IP address blocks:        156.154.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:f1:cd:1c:55:80:61:ed:42:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=21f90a35-7190-4b70-844a-660583dfad14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:b4:72:ab:ff:86:63:a9:ec:b8:08:cc:01:
                    fc:38:58:79:b9:35:5a:d0:4d:79:8d:84:da:e6:1a:
                    34:f7:34:a0:3c:e2:f0:4a:1c:4e:b9:0f:3b:1b:34:
                    34:24:14:58:8c:bb:ec:32:4f:df:fc:c0:f7:57:85:
                    22:0d:35:33:bb:f0:37:0a:13:a1:6e:d2:24:e8:87:
                    09:73:80:b2:4c:7a:e9:e1:f1:16:22:e0:a9:e7:63:
                    f7:31:79:d3:c4:f4:4f:88:28:6a:55:6b:9c:b0:ed:
                    b9:36:c2:08:f9:f7:08:84:af:63:56:ee:6d:56:05:
                    fa:04:5d:22:6a:75:d0:41:47:99:b4:17:24:c8:ca:
                    bb:dc:4a:a5:62:f0:df:b3:4b:a7:a8:0c:39:36:2b:
                    87:c7:c7:21:03:4f:23:5e:f0:43:72:27:f0:7a:40:
                    af:21:1b:25:40:c8:f1:88:a2:1a:80:0f:2c:16:34:
                    a2:98:89:a8:d9:72:61:fb:b7:99:64:8c:cd:ba:ec:
                    40:4c:12:a2:ef:dd:bb:b4:02:4c:69:12:00:37:e3:
                    06:d6:1c:2a:42:38:7c:4e:91:60:80:ce:c5:80:be:
                    d2:74:ed:4c:f3:6c:65:d2:b5:48:bc:2a:e7:e9:b6:
                    2c:0e:cb:3e:f9:28:12:25:84:1f:cc:2b:71:fb:c1:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FE:54:7D:70:27:11:FF:07:4F:76:74:82:9B:7D:1B:7F:66:0F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:00:79:c3:e2:fa:a6:e5:bb:1d:82:4e:52:cd:0b:1c:b0:
         53:ff:40:1b:6f:ec:f2:5b:61:41:76:69:41:d6:c3:11:90:d4:
         3c:cc:8e:1d:67:ab:31:e3:35:45:e3:fb:21:b9:ca:fb:fe:fa:
         5c:da:93:62:0c:16:ba:76:e0:42:7f:d7:ea:8c:1d:5e:e3:a3:
         69:21:38:48:8f:a4:6c:fe:9b:e2:27:80:46:e8:29:1e:28:53:
         73:6a:f3:b0:aa:92:0d:12:24:42:c0:9b:a9:4a:60:ec:e3:07:
         bd:05:3f:a1:dd:6e:2a:3a:1a:03:5e:7d:b3:9b:48:7a:5f:40:
         89:94:0b:ce:63:b3:53:d5:5d:fe:67:38:a6:a6:f7:f5:98:46:
         fe:6d:23:d0:a0:30:c7:c5:af:1c:54:de:8c:dd:37:13:84:d3:
         fc:7d:5d:69:45:79:cc:0e:ad:e8:11:a9:31:cb:09:78:b6:40:
         00:d5:4c:a8:69:af:33:52:08:1e:db:13:0b:07:ac:31:ea:49:
         0a:08:11:91:24:eb:fa:1e:ae:e0:89:51:82:d9:8f:d4:75:d9:
         80:01:66:c7:00:4b:86:3e:e8:e7:64:8b:51:91:03:64:a4:4d:
         e8:fb:ab:e9:80:b4:28:25:c7:b0:4f:94:d8:a7:24:84:3b:c8:
         6b:8c:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:35 2025 by rpki-client