Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/734b32df-f21b-3ffb-8cfc-4d80ae68f217.roa
File:                     734b32df-f21b-3ffb-8cfc-4d80ae68f217.roa (raw, json)
Hash identifier:          qbtxIa+NlC9Zf7yLsw49XRVHlC4tJCTc34JFRAzjED4=
Subject key identifier:   77:3E:05:86:4B:60:7A:AC:6A:69:73:46:98:0D:8D:B4:B4:1D:05:1A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1F99B8DA3B89B1E3E05C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/734b32df-f21b-3ffb-8cfc-4d80ae68f217.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397227
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:f9:9b:8d:a3:b8:9b:1e:3e:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=d651b499-8745-4692-90a2-92bf9efdbef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:e7:e2:f7:0e:82:f4:50:9a:31:18:9b:1e:
                    20:be:fa:d4:bc:a2:44:4e:2d:df:f8:f3:d2:29:c0:
                    c6:cf:14:3f:35:a5:16:db:38:cf:03:8a:f2:c5:1b:
                    3d:22:59:82:55:ce:40:52:f1:e4:9d:43:c4:d2:37:
                    66:cd:35:90:48:19:43:be:49:5e:fb:fc:01:0f:2c:
                    a3:81:d1:97:0c:0e:81:b4:4d:38:48:f3:49:72:4a:
                    09:cd:ad:5f:9c:4c:19:27:c0:fa:5a:67:b1:d3:07:
                    99:78:1e:58:eb:cb:cb:37:b9:c1:b3:2f:d9:83:17:
                    c9:2f:33:9e:04:d8:9c:3a:14:e5:f6:d0:b5:39:6c:
                    24:c0:a6:96:82:f0:ff:12:07:0a:ba:34:94:67:a5:
                    10:d2:88:4d:6b:29:be:5d:15:95:9a:e0:82:64:1b:
                    6a:aa:a9:b5:fb:2a:9d:ec:51:f8:f1:7d:79:e3:60:
                    08:9d:cb:18:4b:9a:b7:33:7b:5e:fb:21:2f:5f:7b:
                    b6:e8:4a:5a:43:0e:cb:9a:bf:9b:e0:be:9a:e2:09:
                    55:4a:a9:1c:5a:22:ef:55:5f:7f:a7:f0:49:f4:a4:
                    ee:ad:d3:9c:36:79:ca:91:91:94:0f:34:bf:26:2d:
                    9c:ba:01:a7:e7:b5:4e:2d:52:f0:bb:99:d7:71:14:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3E:05:86:4B:60:7A:AC:6A:69:73:46:98:0D:8D:B4:B4:1D:05:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/734b32df-f21b-3ffb-8cfc-4d80ae68f217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:43:ff:16:4e:64:52:6b:f9:ad:7c:4d:e6:6e:91:03:bf:2d:
         ed:18:11:0f:9a:ba:94:75:09:bb:04:69:cc:75:bd:fa:f0:2d:
         f6:6d:54:45:4b:bb:84:b2:41:3c:da:2e:33:f7:85:15:f6:cc:
         bc:0b:05:cd:dd:a7:a5:c9:9d:8f:38:8a:21:68:ae:fb:03:09:
         54:b4:1b:7a:44:16:21:aa:68:c2:6e:b6:e2:54:d3:d1:d3:e8:
         5f:c8:86:40:94:32:37:17:c8:ba:4c:04:66:9c:37:6e:34:f2:
         98:49:d4:76:32:ff:55:24:2b:ad:8f:fe:c7:e3:79:12:5b:3c:
         17:9e:6a:94:18:0c:43:c6:0f:44:e7:18:1a:1a:93:36:38:6a:
         3f:3a:55:f1:fa:8d:a6:f2:8b:e9:d2:ad:9c:4c:ea:9d:42:81:
         9b:6a:40:dd:27:fc:cb:d8:1a:f8:d3:d9:34:fe:be:21:d9:ae:
         13:21:2d:48:15:ec:d1:79:bc:3c:3e:46:73:e0:a4:9d:48:ca:
         25:f0:42:2a:c7:a4:e1:7a:5c:c9:24:1e:ca:a1:ac:c4:de:1f:
         02:30:5a:4a:da:ad:ce:af:b3:d3:c9:99:fe:f6:a7:58:9e:63:
         21:4b:6d:4d:2e:4a:40:24:38:55:99:8f:0a:b4:56:80:94:c1:
         ce:70:51:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fmbjaO4mx4+BcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZDY1MWI0OTktODc0NS00NjkyLTkwYTItOTJiZjllZmRiZWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2jn4vcOgvRQmjEYmx4gvvrUvKJETi3f+PPS
KcDGzxQ/NaUW2zjPA4ryxRs9IlmCVc5AUvHknUPE0jdmzTWQSBlDvkle+/wBDyyj
gdGXDA6BtE04SPNJckoJza1fnEwZJ8D6Wmex0weZeB5Y68vLN7nBsy/ZgxfJLzOe
BNicOhTl9tC1OWwkwKaWgvD/EgcKujSUZ6UQ0ohNaym+XRWVmuCCZBtqqqm1+yqd
7FH48X1542AIncsYS5q3M3te+yEvX3u26EpaQw7Lmr+b4L6a4glVSqkcWiLvVV9/
p/BJ9KTurdOcNnnKkZGUDzS/Ji2cugGn57VOLVLwu5nXcRQ9OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHc+BYZLYHqsamlzRpgNjbS0HQUaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzM0YjMyZGYtZjIxYi0z
ZmZiLThjZmMtNGQ4MGFlNjhmMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHFD/xZOZFJr+a18TeZukQO/Le0YEQ+aupR1CbsEacx1vfrwLfZtVEVL
u4SyQTzaLjP3hRX2zLwLBc3dp6XJnY84iiForvsDCVS0G3pEFiGqaMJutuJU09HT
6F/IhkCUMjcXyLpMBGacN2408phJ1HYy/1UkK62P/sfjeRJbPBeeapQYDEPGD0Tn
GBoakzY4aj86VfH6jabyi+nSrZxM6p1CgZtqQN0n/MvYGvjT2TT+viHZrhMhLUgV
7NF5vDw+RnPgpJ1IyiXwQirHpOF6XMkkHsqhrMTeHwIwWkrarc6vs9PJmf72p1ie
YyFLbU0uSkAkOFWZjwq0VoCUwc5wUUA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:26 2025 by rpki-client