Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74693368-ec46-36a5-8c65-a13852359521.roa
File:                     74693368-ec46-36a5-8c65-a13852359521.roa (raw, json)
Hash identifier:          EJQ29j6FDVkuwjO8ArbwM+XEZ+GxrkbI3z+w9ODqFL4=
Subject key identifier:   42:35:00:57:06:BA:C1:93:12:96:DC:20:F7:11:EE:57:C1:5D:BE:DB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1EE38A9EB925999C281A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74693368-ec46-36a5-8c65-a13852359521.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397225
IP address blocks:        156.154.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:ee:38:a9:eb:92:59:99:c2:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=27fcc696-c318-47b0-8374-e84ebe2deedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:99:c5:e0:09:81:63:39:d1:1e:a5:ce:10:
                    24:19:36:66:b3:e7:0b:06:fe:f7:cc:02:4c:06:4a:
                    ef:25:6f:b3:c2:9f:ca:94:00:e7:e7:0a:73:fc:f6:
                    26:4f:83:2e:59:7f:3b:e9:ef:ed:b4:00:a6:77:f6:
                    7c:cb:47:4e:65:08:ee:84:ee:79:44:2e:6e:23:e5:
                    ce:a0:26:6f:09:27:18:9c:a7:3f:2b:cb:aa:f3:62:
                    44:ad:2b:2b:20:30:06:0d:1f:05:1c:c0:53:6a:5b:
                    bf:dc:b4:22:d6:59:2b:40:76:12:4b:cc:3f:fc:40:
                    3d:89:17:67:7f:79:e6:85:2d:52:33:29:83:18:ae:
                    fc:5b:aa:06:7e:08:4b:87:80:aa:bc:76:a0:c8:ab:
                    aa:56:d8:53:49:9e:dc:13:d0:76:23:54:a7:23:a4:
                    3c:4f:54:41:4a:63:9f:fd:4b:a9:2e:fa:25:b2:3c:
                    40:af:32:b7:f8:fb:92:ef:12:5b:7d:18:bb:ea:70:
                    b1:4a:5f:b4:e3:0a:8c:cc:a2:77:27:48:48:2e:3f:
                    27:e3:bd:4e:a0:56:ea:c5:19:fd:e3:e1:89:e1:99:
                    ff:e7:24:4c:0d:01:6e:09:a2:44:1e:25:41:ee:95:
                    fa:28:67:ce:29:bc:86:9f:3d:51:98:8d:a3:6a:d2:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:35:00:57:06:BA:C1:93:12:96:DC:20:F7:11:EE:57:C1:5D:BE:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74693368-ec46-36a5-8c65-a13852359521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:1f:d3:71:91:35:ab:6f:75:e3:26:04:f4:1c:11:e8:93:
         9a:72:86:ed:93:a5:a5:48:64:48:4b:33:97:09:b5:10:00:45:
         e6:e1:ea:85:0c:94:09:1f:b3:2c:91:13:9b:ec:ed:e9:d9:dc:
         de:18:f0:ef:a3:1a:13:59:70:d9:3d:70:9a:4c:4b:27:2b:24:
         68:64:0e:4c:0c:1f:2f:d3:c7:9e:72:2c:a0:e6:8d:2d:c6:52:
         8b:b8:2f:d8:24:98:d0:1d:57:f0:54:a5:4e:e4:13:f1:e5:ce:
         6b:9f:c0:bd:c2:39:26:c8:93:ad:c8:92:28:4c:a2:eb:cf:69:
         dc:d8:f0:5a:9e:25:76:70:98:ae:43:d2:d7:c8:31:6b:3d:d1:
         fc:89:81:00:54:53:1e:e7:88:5d:b9:c0:7a:36:06:3c:ab:94:
         fc:4c:ca:8d:60:28:5c:cb:eb:bb:54:08:24:ab:42:7f:64:05:
         fe:54:f5:5e:95:b9:45:75:e0:29:ec:e3:6c:29:90:27:d7:72:
         31:8e:47:3c:1e:d9:04:d5:bd:6e:56:94:05:60:60:1b:e2:dd:
         b8:16:50:eb:c9:0d:83:9e:0b:64:d5:17:04:bf:bd:54:b6:a4:
         11:c9:11:2b:51:9c:a5:79:2f:f4:44:3e:37:eb:bc:d1:c6:d8:
         37:41:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:46:35 2025 by rpki-client