Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1887667d-e164-3449-aeb0-56f886f89f80.roa
File:                     1887667d-e164-3449-aeb0-56f886f89f80.roa (raw, json)
Hash identifier:          sk+Z9Z4eWOwtg25l8vT49Jdw2JV61j2jB1oYmH1xbmY=
Subject key identifier:   AF:52:8F:B7:1F:C3:46:94:7E:49:A1:47:6C:EC:37:52:CE:E2:E5:EC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1CE31F05201FEB7D81340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1887667d-e164-3449-aeb0-56f886f89f80.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397222
IP address blocks:        156.154.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:ce:31:f0:52:01:fe:b7:d8:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=a1686043-51e0-4855-9646-4304166bdc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:54:e9:fa:e5:89:6e:d9:96:b3:9e:1e:16:
                    8e:95:95:80:a0:f1:65:83:2e:fe:4f:82:f8:a2:52:
                    61:6d:59:5d:14:d0:80:00:fa:b6:49:86:ad:db:85:
                    45:37:f0:1a:6b:30:7d:99:94:c1:9d:75:64:ed:3e:
                    44:76:ab:f5:04:16:98:6a:73:0d:45:6c:c7:12:8e:
                    be:5e:5a:c8:e5:9b:46:3b:25:1b:d6:e8:08:2b:9f:
                    91:3f:54:4f:18:93:18:20:0d:d4:83:81:29:12:03:
                    88:e2:e5:96:a1:49:b8:11:d6:38:0f:30:21:03:63:
                    4a:e4:f9:7d:41:69:eb:5b:eb:74:1c:54:b4:7e:39:
                    9b:d0:50:67:cf:4d:91:16:9f:bd:26:be:4f:8a:e7:
                    d3:8c:b0:01:97:8c:47:59:19:2c:16:fe:36:45:aa:
                    66:98:c2:5b:c2:e0:73:7e:89:63:f5:52:18:ea:6b:
                    8e:23:d7:e7:34:b6:7a:b1:16:b4:40:a7:da:87:0e:
                    60:d0:e1:0d:66:38:b2:db:ad:ab:49:ef:34:cb:54:
                    c1:90:ba:82:31:ec:92:6e:68:b0:15:46:aa:61:98:
                    b4:0f:ee:e3:e5:19:3a:a0:6f:ac:56:20:61:de:75:
                    cc:8b:d9:76:ef:b9:e2:1b:e4:b6:7a:80:74:b1:87:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:52:8F:B7:1F:C3:46:94:7E:49:A1:47:6C:EC:37:52:CE:E2:E5:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1887667d-e164-3449-aeb0-56f886f89f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6e:d7:6d:fb:55:48:5e:b1:82:0e:4d:a9:ef:58:b7:47:71:
         ad:b6:7e:72:ba:48:78:dd:0e:22:bb:25:53:6f:54:e5:85:9e:
         25:fa:5f:67:0b:b2:6b:68:dc:87:04:c5:19:30:11:5e:08:4d:
         fb:34:6d:80:9c:cc:1e:bc:9b:5c:b7:ef:54:2f:79:1c:b8:f0:
         30:d9:4e:c1:e6:09:89:c0:3a:8e:78:56:19:17:dd:a6:23:91:
         a0:7d:d0:0b:d1:ff:e1:6e:0a:5d:ff:31:ff:f4:b5:43:03:b2:
         fa:18:e9:60:db:d3:b8:db:23:61:d5:3f:04:c8:d8:04:4d:23:
         de:be:dc:87:e5:e4:f8:ab:1c:cf:1e:4f:ef:e4:21:7a:39:d2:
         73:b2:ad:55:dc:6f:20:bf:8d:f1:f2:98:a0:2e:ff:35:0a:bc:
         22:f8:6f:fe:d5:ec:26:a6:9c:ce:f4:dd:c9:ce:b2:19:3b:53:
         2c:97:f0:2d:65:2a:2e:75:d1:d7:ba:2b:b6:54:f3:86:4b:ae:
         5e:7a:5d:42:85:e0:c5:be:54:9d:95:6f:15:ce:06:bd:fe:5d:
         58:5d:71:ea:ee:fc:75:a3:fa:1b:dd:d5:4b:fd:2d:52:cc:8c:
         8e:17:ff:7f:65:c3:88:e5:72:65:26:bb:a4:4d:59:3a:7c:1f:
         d5:97:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:52 2025 by rpki-client