Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41370fae-ec3b-3376-85f9-830049c78723.roa
File:                     41370fae-ec3b-3376-85f9-830049c78723.roa (raw, json)
Hash identifier:          /hcU4eBE5LRHeeyS4F8aT2KneBME471cFQIs3RRc6WQ=
Subject key identifier:   1E:78:3F:DB:37:D7:4F:DC:C6:32:2C:0F:87:BE:B3:56:66:64:42:36
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B328C5FD9A1B771515CF55BC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41370fae-ec3b-3376-85f9-830049c78723.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     16552
IP address blocks:        156.154.76.0/24 maxlen: 24
                          2610:a1:3028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:5f:d9:a1:b7:71:51:5c:f5:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=f7ab8298-0db0-4e0d-bfa5-89eee6b34b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:74:b3:21:1e:b2:d3:c7:d2:77:fd:85:06:
                    84:55:0e:ce:ef:23:bf:4a:c8:93:1c:1f:b9:46:66:
                    63:83:8f:eb:6e:30:fa:c2:3e:e1:74:14:09:29:d6:
                    92:bf:1e:41:ab:aa:69:73:96:a1:c0:e2:c0:94:1f:
                    2d:f0:0b:4f:b4:96:c4:36:0c:fe:f4:a5:06:fe:97:
                    ce:fb:3a:84:53:d7:a3:6a:66:7d:b2:40:1a:15:34:
                    53:30:50:f8:5c:c9:ac:b4:72:c9:60:66:ae:ba:db:
                    f4:ef:57:70:ea:68:4b:85:f3:e0:4d:c7:1a:6e:4a:
                    f7:de:f9:11:61:22:8f:71:3d:9d:70:43:fb:d9:f1:
                    df:52:9b:94:b7:a2:40:4f:a0:55:34:be:3c:14:dd:
                    b7:15:74:48:cd:8e:16:7f:bb:b8:50:13:36:45:4c:
                    6d:1f:b4:4e:b5:f3:bf:1a:be:b5:75:96:01:d3:26:
                    52:45:b8:25:4c:81:9e:27:d1:0d:af:15:52:56:a2:
                    20:36:aa:21:bd:dc:5c:23:1c:ac:21:a9:19:23:a2:
                    89:34:4e:03:a8:8c:8e:bf:8e:0f:a6:29:f2:fe:52:
                    5f:d9:42:94:54:7b:89:9a:59:0e:cc:a9:5e:34:c0:
                    a5:52:bc:7e:b1:82:01:d7:6d:be:59:62:eb:15:13:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:3F:DB:37:D7:4F:DC:C6:32:2C:0F:87:BE:B3:56:66:64:42:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41370fae-ec3b-3376-85f9-830049c78723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.76.0/24
                IPv6:
                  2610:a1:3028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:90:dd:32:25:55:7d:0c:10:d9:e2:5b:0b:ae:67:e7:2d:98:
         9c:99:e9:08:be:0f:f4:c7:79:ae:5d:c1:91:54:8b:ee:2a:c2:
         c2:a3:49:80:c5:bb:9b:c3:d4:8b:05:e5:04:dc:b6:4d:38:6e:
         06:07:e2:ed:65:ee:6d:e2:57:c6:31:cc:37:ab:49:3a:fe:44:
         40:68:d7:4d:aa:f2:6c:17:b5:75:e1:07:6f:4b:8d:d4:12:ec:
         73:ab:b0:80:73:2a:66:4d:bb:21:62:08:f0:29:0c:82:cb:6f:
         ff:9b:9c:15:67:f1:5a:54:9e:e2:97:94:08:d7:13:6b:3d:56:
         c9:75:2f:1c:ff:29:bb:2a:cb:be:7f:13:25:c5:7f:f5:15:cd:
         d1:67:92:f0:e7:74:06:4d:36:bf:56:2b:ed:e2:20:04:3d:af:
         29:9f:bf:fe:7f:6b:97:3d:9c:08:1f:7d:00:ac:76:96:35:35:
         32:a1:ac:96:65:18:fe:13:6a:bc:be:31:70:ed:f7:58:46:00:
         b3:6b:81:97:9e:1d:16:f1:54:2e:cb:6c:92:e9:c1:64:e2:22:
         54:a4:ce:e9:83:1f:35:75:1a:4b:b3:48:75:7f:d1:59:e0:09:
         20:14:d2:b0:c4:15:00:60:01:eb:be:6b:25:70:bd:fb:a7:12:
         23:1d:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:02:59 2025 by rpki-client