Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e639951-d047-37a6-9e60-61e9118500f8.roa
File:                     1e639951-d047-37a6-9e60-61e9118500f8.roa (raw, json)
Hash identifier:          PNgTBdqF/JDJBRUBx5V8Y9yY50edhCu8KvvK5dOL0Wo=
Subject key identifier:   E9:BC:FC:DD:83:85:A3:03:B7:93:35:8D:B1:A1:C8:CB:78:62:DF:EB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1D9C7DCA062818CB0D9EBBC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e639951-d047-37a6-9e60-61e9118500f8.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     16552
IP address blocks:        156.154.35.0/24 maxlen: 24
                          2610:a1:3008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:7d:ca:06:28:18:cb:0d:9e:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=f48306bb-e931-41f6-bc37-ba75aaac30ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:c2:ed:8b:e9:f8:1a:60:de:12:bf:32:4a:
                    16:b6:a0:a3:66:52:27:27:39:19:94:92:6f:c1:92:
                    15:31:fa:a6:a2:48:35:59:97:a2:28:97:74:f5:a1:
                    a6:df:37:2f:b0:dc:41:8a:1d:ce:fd:ba:bb:f4:97:
                    24:d4:76:90:75:6f:57:3f:55:fe:20:97:7d:75:04:
                    5c:91:7e:04:40:f9:4b:ca:83:77:2c:dc:45:44:ea:
                    bf:f5:11:1d:1a:b2:8d:ad:90:85:89:ec:c6:2a:9b:
                    5d:fd:fe:cf:e3:58:5e:d5:eb:e9:7d:06:c3:b2:ae:
                    d4:b2:47:64:25:d2:aa:41:09:80:cd:aa:86:c7:9a:
                    9e:56:68:54:81:58:12:00:1f:e0:03:7a:f5:e2:c1:
                    96:1a:90:90:79:bd:90:74:58:3b:9b:62:f8:00:24:
                    d3:4c:ff:c6:f5:fd:cf:87:34:91:83:70:5a:d6:bd:
                    ac:3f:5a:57:10:88:a9:64:90:4d:33:11:d4:ac:f7:
                    e9:0b:e3:47:3f:1f:4d:86:7b:bb:db:74:9d:a8:4a:
                    47:08:76:f7:ee:98:aa:b7:87:76:26:41:4f:f4:1c:
                    eb:f0:d9:d4:51:7b:82:c2:35:ec:fe:ed:6a:68:50:
                    47:5a:40:37:21:d2:4d:ed:db:50:4c:de:43:88:9c:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:FC:DD:83:85:A3:03:B7:93:35:8D:B1:A1:C8:CB:78:62:DF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1e639951-d047-37a6-9e60-61e9118500f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.35.0/24
                IPv6:
                  2610:a1:3008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:b4:cc:68:91:9f:cc:2b:58:e7:46:15:ba:15:e7:1e:d0:
         65:85:ee:02:58:29:d2:89:d3:e0:01:0f:de:3c:45:45:bb:15:
         4e:9b:7d:d2:03:97:f4:71:b5:e0:d1:76:70:4d:26:8d:71:e1:
         99:69:ab:e1:46:be:a6:8f:17:a9:76:27:e6:66:24:cf:91:e2:
         9a:34:be:d5:d4:11:b7:e8:c1:11:18:0a:2a:f0:c4:e5:c8:c7:
         33:32:6a:f3:2b:f9:e4:4c:b7:0a:05:d3:58:1b:6a:29:5f:34:
         80:f4:8f:a4:af:16:be:e3:6c:23:50:ba:35:ba:3e:8f:3b:71:
         f5:03:33:0a:8d:ab:9b:d9:05:80:fa:e2:ff:f6:d0:8c:6b:d3:
         1e:b4:6b:b4:76:03:f7:16:c2:49:2b:a9:2c:f4:b9:f0:ba:24:
         90:89:79:fc:88:74:44:93:34:01:0b:aa:db:1a:5b:db:52:cb:
         cb:2e:84:4f:88:ff:8d:d0:a7:b7:64:cb:2c:d8:5c:36:0d:4a:
         14:31:f5:f9:ff:0e:78:02:89:7a:f6:07:59:ed:7d:fa:3a:3e:
         be:59:c7:97:6e:a4:03:23:37:55:5f:9e:2f:f5:e5:07:da:e7:
         b6:7e:b1:a4:ee:3a:06:3f:49:d6:c5:ec:50:10:3c:58:83:d9:
         53:3d:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:15 2025 by rpki-client