Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5688210f-0b5c-3bfe-9fc1-a17223ec8f60.roa
File:                     5688210f-0b5c-3bfe-9fc1-a17223ec8f60.roa (raw, json)
Hash identifier:          r49fzNMED2K6DG03s4JbexA3s1fGdHucTEVXMmdtBQQ=
Subject key identifier:   13:75:D5:53:C3:3F:9D:51:C6:49:C1:24:1F:95:39:B2:12:48:54:CD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CAEA70E1B04638B4FFE80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5688210f-0b5c-3bfe-9fc1-a17223ec8f60.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397225
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:ae:a7:0e:1b:04:63:8b:4f:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=b9eba190-6404-4f43-8b90-500bd25c3b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:99:98:cb:e9:76:96:53:af:ec:a1:7d:2a:
                    32:ea:5e:a4:59:ec:7d:cf:4d:00:f5:83:5c:11:2e:
                    fd:9f:08:fd:39:63:9e:5b:fc:d2:a9:ce:de:f4:6a:
                    a8:ed:22:f7:f7:fe:be:fd:c9:0d:d6:ca:d8:ce:ab:
                    0b:8b:89:94:17:05:2e:9d:8a:b0:87:5e:f5:1e:cb:
                    de:0f:c5:6c:ae:b2:c4:a1:10:3b:ab:7f:8f:e2:33:
                    fd:81:16:e2:0b:f2:c2:95:b7:b8:d6:d2:b7:d0:0c:
                    d4:b8:ec:84:f8:e4:9d:1b:cd:84:5f:1e:2e:bd:f8:
                    9d:37:95:37:08:f1:52:03:99:a8:62:19:5d:f0:8b:
                    ee:8b:c0:23:e2:f8:02:28:40:f0:9e:a8:a1:a0:7b:
                    96:15:64:0c:86:4c:27:52:4e:74:ca:ad:d6:06:16:
                    f2:3d:6f:42:c3:11:f2:b3:4b:27:bc:fe:82:45:92:
                    97:b8:b7:6a:e2:97:d0:c9:58:2b:30:8f:8d:d7:e3:
                    32:4a:99:ce:d8:3d:5d:d1:13:ef:80:df:f7:2e:9a:
                    5a:d8:3d:09:5b:09:72:18:34:b4:b7:2a:49:30:f9:
                    48:fc:a2:cf:f9:1d:19:c5:1f:2f:41:0a:50:89:c3:
                    2f:ac:ee:33:42:94:6b:76:9a:93:fc:c8:59:4b:35:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:75:D5:53:C3:3F:9D:51:C6:49:C1:24:1F:95:39:B2:12:48:54:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5688210f-0b5c-3bfe-9fc1-a17223ec8f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:88:2b:8f:6d:47:29:94:21:f7:07:c5:e2:8d:d9:97:ba:4b:
         c1:82:84:b0:38:07:e0:b2:e9:1c:77:0b:f2:e6:dd:ca:c3:fd:
         e7:54:97:d5:58:8f:76:9d:37:53:35:db:41:9f:43:0f:db:ec:
         58:f6:13:f9:52:c4:a6:5f:e0:3f:29:61:10:95:8a:12:7b:7f:
         3f:c8:37:6c:5f:8d:b5:c4:69:dc:17:6c:2a:fa:a6:6c:fb:22:
         83:a0:1e:14:cb:e3:f1:b5:7e:5f:5c:ea:5c:77:f2:39:32:01:
         60:0a:3e:41:0e:5f:fd:05:b9:34:6f:cb:bb:3d:b0:a4:0a:b0:
         cb:3b:49:87:96:af:6a:10:19:8b:77:ea:00:d5:f5:2b:5e:7e:
         a6:29:6e:3d:c8:f2:68:ec:3b:5a:65:8e:d5:c9:55:8d:66:75:
         35:97:1d:44:81:03:cf:14:af:12:69:cb:38:d9:1b:9d:41:b5:
         09:14:66:76:2d:e8:25:4f:76:b8:db:63:ac:ad:2c:c7:cf:ea:
         84:a5:e2:f7:dc:25:51:a9:1a:1e:e2:c6:76:3a:86:15:1b:54:
         b8:f2:5a:56:96:cf:41:ec:f2:8b:2b:28:4b:14:f7:09:22:79:
         eb:50:52:7a:d7:b1:16:af:08:7a:36:c2:01:af:ed:48:d7:d2:
         c9:2d:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:56 2025 by rpki-client