Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa
File:                     29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa (raw, json)
Hash identifier:          WcfQq7yvOyIAp5vQxq/fMSMDEk0Uk4jXSwFjk/2TFqc=
Subject key identifier:   6F:2D:91:2B:22:F4:FE:4D:00:C4:F5:7E:67:01:05:76:97:AA:A1:34
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF69FAA11481B458E83C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397213
IP address blocks:        156.154.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f6:9f:aa:11:48:1b:45:8e:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=222d8507-b9ad-4f69-9d88-930de8a2a6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:84:58:65:ae:2c:a0:37:0d:61:6f:b7:f7:4b:
                    c2:79:09:1c:3c:39:cd:80:2d:af:00:84:49:41:19:
                    19:ea:27:71:2d:c2:27:8b:99:ea:6c:13:36:ec:43:
                    69:bf:5b:a2:46:db:2e:a5:b8:ee:09:c3:25:62:b7:
                    92:c5:1d:5a:5e:ef:29:c8:f3:c7:e7:bd:4c:52:bd:
                    89:be:07:70:13:e9:62:ef:28:98:2a:01:61:ed:04:
                    8b:a2:19:87:b6:d2:98:d3:f7:c0:67:d3:95:be:cc:
                    bb:9e:f5:f1:d4:a8:c7:28:7b:f2:cb:c3:3f:f0:7e:
                    89:00:b7:8a:bb:51:e6:50:a3:0c:77:a6:ba:88:f3:
                    50:e8:4f:36:a9:f0:3b:88:7c:0f:a2:06:ac:b6:ad:
                    ec:30:30:60:01:b6:da:18:fc:96:26:9c:f3:0f:7f:
                    72:3c:7e:93:d4:c8:b9:fb:3b:c3:e6:ac:9f:3f:ed:
                    7b:fd:9d:1f:25:27:a2:b6:f8:0b:fb:2f:ab:96:51:
                    b6:b0:c4:f9:91:c4:af:e4:32:fd:f3:27:63:d1:4c:
                    7f:15:f4:22:d1:59:b4:47:56:4a:cd:d1:da:32:7c:
                    cb:3f:fb:4a:fe:93:5c:12:ae:5f:63:22:52:a5:e2:
                    73:af:59:f1:b1:c1:f1:48:1b:c6:03:ef:3a:c2:60:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2D:91:2B:22:F4:FE:4D:00:C4:F5:7E:67:01:05:76:97:AA:A1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:31:14:b5:a4:59:fe:30:47:09:ab:d9:1c:f9:10:10:3a:7b:
         a1:25:9d:a6:9a:c1:38:1c:0d:9d:27:25:9a:df:2c:2c:1d:17:
         f4:1e:9d:3f:c2:0e:42:d2:de:ec:f1:c8:ad:76:f9:c4:eb:10:
         9f:21:5d:23:96:c9:95:0e:32:32:db:a2:ad:b8:a9:7b:43:5b:
         72:df:3c:25:34:2b:3e:a2:21:23:9c:a1:5d:ee:76:02:21:5b:
         c5:23:0c:29:1c:1a:e1:99:7c:d1:58:94:b0:ab:fa:d3:21:23:
         b8:9c:41:74:49:02:af:59:e7:72:cc:f4:ff:ec:e6:a3:5e:b3:
         62:7c:ad:2f:60:4f:04:d1:d4:d8:78:36:05:ef:ea:1d:cf:03:
         fc:44:d0:5c:01:88:8c:5d:a3:f4:b6:d7:7b:37:d0:46:f8:cb:
         90:b3:21:16:e8:5f:a8:9c:26:06:25:ed:bb:a7:76:b5:fe:fe:
         f8:79:be:88:da:79:b3:91:4c:fa:48:1c:6f:6d:26:7f:4e:7c:
         12:3d:d6:fb:97:e1:11:f3:a8:29:80:f0:04:0d:27:f0:6f:1a:
         37:b5:6f:03:46:93:97:53:ae:1e:f8:db:e3:e9:6b:36:5a:b6:
         79:06:d7:ac:25:72:35:ca:81:91:15:65:b2:1a:6c:e5:68:9a:
         92:ad:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:25:52 2025 by rpki-client