Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39527bec-e973-36c1-958e-c89f56571710.roa
File:                     39527bec-e973-36c1-958e-c89f56571710.roa (raw, json)
Hash identifier:          50SypRA88uVG2o679z9cq3ZavdZXY5SBG9Qg5cA4TU0=
Subject key identifier:   C5:2F:B8:B9:C5:58:28:3F:EC:75:38:D0:2C:52:83:B0:19:5D:98:FB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CAB05DCBC00957C385CF0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39527bec-e973-36c1-958e-c89f56571710.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397236
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:ab:05:dc:bc:00:95:7c:38:5c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=39c9f144-b42f-49a7-8e88-054b1de10971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:d7:83:0f:8a:83:29:cd:90:57:8a:8e:01:
                    47:e6:0d:d7:8f:2a:ba:7e:b2:57:7c:c5:2a:cd:8e:
                    2e:7e:5b:8b:c7:82:9a:90:0b:ff:e7:d9:8a:09:31:
                    82:2f:3d:d4:9a:d5:71:66:d5:32:79:fc:cd:dc:3b:
                    24:4b:d0:be:40:cd:3e:e3:1b:2c:76:01:06:b3:af:
                    cd:87:fb:f3:a7:4f:41:1c:72:5d:d0:6f:17:d6:bc:
                    2b:8b:99:1f:90:9f:0f:60:33:ea:97:eb:1e:5d:9c:
                    5f:14:09:11:36:a9:48:35:61:9f:28:7a:5b:74:79:
                    7b:03:85:78:0d:31:42:d4:a4:1b:ac:46:fb:b5:0f:
                    75:fe:05:ac:b4:32:6b:b5:49:b7:f1:be:f9:92:c1:
                    44:12:38:98:24:6a:94:df:53:c1:09:fc:11:a9:fe:
                    f5:b9:78:25:5f:c9:7c:33:f9:c2:c8:5d:b7:6e:86:
                    d0:36:bc:6b:b3:ad:29:32:d4:31:d7:34:68:64:99:
                    07:fe:df:7a:14:0c:e4:fe:aa:e2:da:13:31:0a:b3:
                    2f:ec:48:d8:0e:af:6c:18:02:3c:db:c9:7d:f4:e8:
                    fe:88:85:af:60:2a:03:d7:be:85:d5:ec:1d:25:00:
                    27:7d:c6:62:4a:63:99:dd:92:5b:b7:b7:b2:73:e1:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2F:B8:B9:C5:58:28:3F:EC:75:38:D0:2C:52:83:B0:19:5D:98:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/39527bec-e973-36c1-958e-c89f56571710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:c9:34:f6:59:83:fc:12:43:49:0b:8d:e3:2d:d5:70:48:
         d8:21:1f:f4:73:94:5e:a3:e3:59:08:0f:24:ef:fb:3e:96:d7:
         0f:d9:f4:59:9b:00:a5:27:75:c4:9d:78:30:6f:ed:86:47:19:
         3d:01:f2:19:08:ff:32:60:4a:1f:a6:22:ce:db:40:e6:22:c8:
         e0:7d:dd:ce:92:6e:a0:0e:b8:af:36:7e:68:77:d0:a9:39:1f:
         17:ec:d8:22:27:7e:2e:07:6c:1b:e1:59:ca:53:f6:7a:fe:9a:
         4e:57:7c:d3:02:34:93:1c:46:98:fc:e4:72:71:71:60:28:11:
         31:f3:8b:d7:c2:68:bb:2a:46:98:7c:f8:32:c6:00:a1:37:03:
         38:1e:94:24:f5:38:35:8e:f2:b7:5b:66:98:0d:eb:86:02:fa:
         68:8f:7b:e0:de:0e:13:30:4b:59:02:45:ea:bc:01:84:15:78:
         16:fc:ad:65:d0:4e:00:a5:34:17:b9:a8:bf:81:d6:b2:2c:30:
         5d:c7:43:57:c1:aa:72:e9:9a:b9:72:e2:1a:48:56:63:96:41:
         ce:52:54:01:5b:cb:3c:86:eb:6e:ab:79:1d:e1:b6:dd:8f:25:
         5f:37:30:3c:3a:51:aa:5f:72:66:22:eb:68:26:84:23:63:bd:
         a0:7b:cb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:28 2025 by rpki-client