Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88cbc73f-6883-3a6b-bc7b-e7ba27c03176.roa
File:                     88cbc73f-6883-3a6b-bc7b-e7ba27c03176.roa (raw, json)
Hash identifier:          ShJrffLhjLjDjHo39iO1Zy0DE59ssCIz5PnBzXb03L0=
Subject key identifier:   01:AC:AA:B2:FC:55:90:E2:67:D8:42:43:4A:AF:D8:B2:82:7F:EE:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BEE91DA72DBBA0B06EBC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88cbc73f-6883-3a6b-bc7b-e7ba27c03176.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397217
IP address blocks:        156.154.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:ee:91:da:72:db:ba:0b:06:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=dc5e6992-5bbd-43a9-8556-9f151ce2b126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:eb:4f:17:a9:c5:8d:65:12:0f:3d:c6:bb:3c:
                    14:ce:5d:1a:3c:c7:7d:8c:a5:38:fd:ec:52:eb:a6:
                    73:53:a6:15:80:4d:f4:ee:cc:a7:1f:5f:fb:a5:00:
                    53:07:1f:10:f4:a3:77:28:98:1f:2e:22:f7:de:6c:
                    3f:ee:32:50:bc:bf:b4:7d:60:7f:f1:11:72:bb:9d:
                    f6:03:25:ac:e2:22:6f:58:87:d4:5f:9a:4e:02:b7:
                    69:ad:08:af:11:22:0e:d0:d3:50:e3:ea:fb:d8:d8:
                    28:7d:fd:bd:78:c0:31:ca:f0:fa:f6:d7:76:1a:92:
                    0e:bd:bc:61:68:ec:8b:f2:3f:d1:33:62:d3:f6:06:
                    89:ea:8f:47:bd:b9:76:65:a1:9b:9a:5d:4d:72:f0:
                    bb:3f:a0:aa:bb:83:85:87:5a:70:87:3c:69:fa:1b:
                    46:ea:1b:ee:63:a8:7d:6f:76:4e:bf:f7:79:58:99:
                    e0:c2:82:a9:f6:1f:42:7e:f9:5c:7a:78:43:c8:5c:
                    52:eb:a5:86:06:c3:ba:26:9c:d7:5c:29:88:38:4a:
                    7e:ad:57:55:70:e6:52:4f:ed:51:b2:48:ad:3f:69:
                    68:01:cd:1c:c7:af:22:e2:b2:81:71:88:23:2e:33:
                    25:fc:c2:56:a4:8d:fe:b7:2f:dc:b1:ae:69:7b:93:
                    4b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:AA:B2:FC:55:90:E2:67:D8:42:43:4A:AF:D8:B2:82:7F:EE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88cbc73f-6883-3a6b-bc7b-e7ba27c03176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:40:a6:62:76:a3:c2:17:24:56:f5:23:c2:49:70:b6:33:15:
         9f:25:1f:48:ae:a1:9e:86:6f:35:db:ee:97:95:c2:e7:2b:8e:
         da:50:1c:b4:d4:ab:8f:3c:84:a5:20:62:79:ea:5d:6a:52:bd:
         00:be:3c:db:1b:3c:39:ac:f5:13:81:8e:aa:f9:e5:4d:b8:75:
         37:dd:b1:7e:86:11:04:a6:99:c7:c2:89:6a:d3:f0:10:67:17:
         9b:48:84:60:d6:86:69:9a:5c:e5:d0:24:51:89:a3:5b:c9:59:
         f0:94:5e:1c:15:de:a0:55:cd:43:ff:7c:29:16:88:a7:50:84:
         26:96:2e:58:0e:ed:b5:e4:75:5f:a0:dd:7b:17:02:45:07:86:
         17:65:80:47:d3:be:f8:b4:21:ed:71:eb:59:24:cb:4e:0f:7b:
         70:a5:b4:39:f0:d1:47:66:b0:93:d2:0d:2a:fc:09:a5:01:b6:
         e9:7c:f9:69:6b:9e:ca:57:21:77:e9:43:16:48:af:3b:9b:1f:
         ca:20:99:ac:b4:7d:51:e6:6e:57:41:7e:9a:91:10:19:94:bb:
         81:87:75:11:f5:b7:1a:cd:32:d6:17:4f:c6:d6:2a:5e:1b:ff:
         d2:89:97:53:2e:8f:d4:51:53:d6:3e:87:06:47:cc:58:16:8d:
         5a:6c:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:11 2025 by rpki-client