Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e87fb15-0e3e-393e-aff8-b8f399b3999f.roa
File:                     6e87fb15-0e3e-393e-aff8-b8f399b3999f.roa (raw, json)
Hash identifier:          HUwBOn6buCRHdgUXxVEFvXdw67cN0//wUToLo87SOew=
Subject key identifier:   72:74:08:C3:DA:E9:95:18:36:D5:72:2A:3E:31:33:6B:E5:DE:E0:C9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1FC6BFE1CC1CFA19E4E40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e87fb15-0e3e-393e-aff8-b8f399b3999f.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397235
IP address blocks:        156.154.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:fc:6b:fe:1c:c1:cf:a1:9e:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=c8f22217-f659-439b-ab47-d44f04aaf838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:ad:21:c0:93:fc:47:ac:93:63:e8:b9:fa:
                    5b:41:91:f5:0b:aa:36:1c:57:a7:50:48:ff:0b:f0:
                    c5:25:49:2f:0c:87:5b:a9:4d:53:3e:1d:4e:35:3f:
                    56:ec:ca:11:a4:3b:d6:5e:c0:4b:7b:e0:bb:e9:65:
                    f5:f2:d1:35:ad:e7:5d:42:02:cd:c5:fa:26:b4:39:
                    7f:ff:5f:1c:94:a5:97:2b:f1:bc:ad:86:86:fe:c7:
                    da:00:b5:c7:1d:09:c4:b9:56:ff:54:3f:b8:38:b7:
                    35:9b:59:98:d1:b3:23:43:e6:1a:1e:ac:07:93:a2:
                    2a:29:04:4f:cf:ea:18:c1:69:63:8d:c4:87:da:00:
                    26:7d:c8:f8:ac:16:b3:51:28:e0:cd:8c:ad:53:26:
                    d0:69:c3:18:b9:39:8e:75:7d:4b:4b:0a:e5:2e:8e:
                    ae:be:72:ff:b2:a6:2e:5b:ce:36:18:8b:44:f3:2a:
                    e4:8b:0b:47:23:99:9a:e4:56:f1:34:2a:a6:3a:12:
                    b0:dc:1b:28:8c:32:40:b3:4c:1f:61:23:f5:fd:22:
                    03:d5:15:20:fb:c2:1a:e5:24:a3:d7:d8:f7:d4:de:
                    a3:e0:08:ee:0b:1f:20:b5:d0:85:ef:fd:3d:b2:1a:
                    e9:03:08:ab:2d:bb:71:05:bd:a1:6e:94:b7:ec:00:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:74:08:C3:DA:E9:95:18:36:D5:72:2A:3E:31:33:6B:E5:DE:E0:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e87fb15-0e3e-393e-aff8-b8f399b3999f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:c4:04:23:ef:e5:ca:16:88:53:06:9f:c1:9d:26:81:3a:
         ad:fb:1f:f2:63:29:80:0c:bb:e6:d3:e1:11:07:e9:f4:35:f0:
         20:83:5a:6e:11:10:b9:2e:8f:d6:f9:f4:d1:6c:72:5b:f1:50:
         6b:68:80:ca:11:a5:67:6d:da:f7:30:1e:91:e4:b0:2e:47:85:
         f0:d3:04:70:d6:d2:12:70:d6:ee:32:ac:5e:be:f1:64:aa:ab:
         59:e1:26:6f:c0:77:03:40:ab:3e:ca:77:b3:c6:12:b7:c3:ca:
         34:cd:21:15:c0:aa:a4:e0:b9:bd:3a:02:90:d9:79:01:5f:5c:
         6d:83:02:41:67:84:74:0d:31:ee:4a:68:a1:0b:0a:d4:9f:7b:
         ea:c6:38:15:ed:9c:5b:20:d1:47:d3:92:33:2a:0c:db:70:07:
         ba:2e:a0:e7:2f:e1:9b:97:82:2a:d5:7d:d7:97:63:e8:70:0d:
         3e:24:17:2a:da:5c:69:96:70:ab:1c:b0:43:f4:e7:fe:4b:f4:
         b6:72:f6:f0:74:dd:3f:d7:39:52:dd:b2:b4:49:aa:f0:11:f2:
         80:8a:6c:bc:f8:d0:b5:5c:79:26:4a:08:cb:74:54:d5:13:44:
         b5:b4:16:51:74:90:6a:50:34:68:3c:2f:47:9b:a3:cb:ca:69:
         ed:1e:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:25 2025 by rpki-client