Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f2093a8-58cd-3e36-9024-12ef20226397.roa
File:                     7f2093a8-58cd-3e36-9024-12ef20226397.roa (raw, json)
Hash identifier:          dtgGF3QiBsCfvOhe2BKYu6ZKEWvkgFb25ZYlY8YbosA=
Subject key identifier:   38:D6:B0:F0:CC:5D:3B:22:08:0A:97:FE:33:5E:9B:D8:A1:5D:08:DD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CAFB35CB9DBC2F6AA2600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f2093a8-58cd-3e36-9024-12ef20226397.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397241
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:af:b3:5c:b9:db:c2:f6:aa:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=4274fd39-267c-43cf-9eb1-7e0fc0a65dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:1b:ab:c9:c6:18:97:07:e8:51:ef:f9:c8:
                    7d:8c:fd:dc:74:58:da:2d:cb:a6:b6:55:1a:18:6d:
                    8a:cf:e6:12:64:d0:e9:b8:8e:90:4c:37:be:8c:ae:
                    35:03:f5:b5:0e:9a:78:24:ef:d8:ee:10:c3:ac:9b:
                    97:21:97:91:d5:5e:46:dd:06:1b:6b:6d:6a:e2:43:
                    ea:0c:e8:79:a4:6a:f7:ad:5e:3e:75:94:39:91:18:
                    53:e2:a0:b4:53:c1:84:ad:51:cb:4d:a7:ff:94:5f:
                    80:b3:a4:c5:aa:1b:4c:aa:f0:6b:f1:c7:75:03:4f:
                    50:f5:db:9c:d7:e5:8b:24:23:e9:28:f0:07:c1:43:
                    e7:32:bd:1d:26:37:f9:9a:93:9b:2e:85:ad:b8:19:
                    50:4b:6c:24:71:99:73:9a:d8:3d:9c:88:fb:bb:ba:
                    11:54:96:a5:c2:47:63:07:1b:ef:b0:95:ae:b2:b6:
                    b0:36:67:6f:17:af:2d:0f:ad:38:ee:3e:f7:17:17:
                    5d:8f:c0:95:a2:43:be:5b:12:9e:fc:60:b8:97:ce:
                    e5:3a:03:57:a1:e0:48:34:31:26:25:4d:94:98:99:
                    46:2c:37:d6:c0:dd:22:cf:44:5c:b8:61:62:f1:18:
                    76:c9:45:43:ac:cc:40:71:f8:33:2c:26:d0:bc:80:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D6:B0:F0:CC:5D:3B:22:08:0A:97:FE:33:5E:9B:D8:A1:5D:08:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f2093a8-58cd-3e36-9024-12ef20226397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:71:30:83:0b:73:98:e0:f5:91:ef:93:26:d8:06:06:f0:a6:
         59:6f:d8:fb:d0:24:6b:c9:52:35:b4:83:af:a0:48:f9:c6:d2:
         3c:b8:53:75:17:80:8e:a2:b3:fc:94:71:bf:be:4d:41:86:b3:
         ea:4e:30:96:01:2f:eb:f6:0b:76:5f:8b:00:0c:17:d3:f1:28:
         fd:fb:b9:06:bc:19:26:d0:95:1c:c1:0c:c1:3a:5b:13:ac:f9:
         de:8d:b2:c9:8e:44:5b:70:ce:94:4d:5d:c9:62:a2:e2:02:54:
         84:2c:48:35:76:f4:8b:26:cb:3f:2e:49:27:a3:ff:6f:8d:d5:
         3d:cd:d1:e7:c7:ab:46:fa:16:ff:ff:bf:84:83:f0:d3:2b:d1:
         ea:fe:04:6c:81:18:ad:e2:c2:cc:d5:ed:da:cb:33:08:3e:c8:
         f7:b5:3b:78:2f:2d:c3:27:6e:22:33:cf:2e:71:05:37:4f:09:
         91:ac:29:7b:67:96:cc:32:6c:11:e2:62:ed:d1:43:cd:ba:e1:
         bc:ed:70:21:cf:85:43:dd:2a:19:c4:bc:57:eb:97:f5:ee:54:
         64:6a:4b:79:5b:88:a6:2d:51:1e:31:43:17:db:d4:10:7f:eb:
         e9:8f:7f:be:94:16:ef:00:50:bb:d3:c7:20:21:a8:3d:a0:02:
         d6:a7:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:32 2025 by rpki-client