Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3b2b540-35b7-3e3c-bd31-5c0ea212841a.roa
File:                     b3b2b540-35b7-3e3c-bd31-5c0ea212841a.roa (raw, json)
Hash identifier:          hKvTpAPD33XEDyd6Uj163H1F+v05RFh028RK+fo0xqY=
Subject key identifier:   84:23:10:E0:25:0E:87:BB:45:0E:86:14:F6:E0:20:C8:3E:00:CA:9B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CAAC446146605849DE6C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3b2b540-35b7-3e3c-bd31-5c0ea212841a.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397232
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:aa:c4:46:14:66:05:84:9d:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=bacc4049-80e7-411a-9171-e497f26ab253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:a9:c9:a7:78:4c:a0:55:d1:c6:a3:36:60:
                    93:1d:df:de:2f:40:0e:1b:54:d4:1f:bc:29:e8:27:
                    0e:c5:c8:ef:5f:e1:5b:fd:44:78:aa:48:f8:ea:db:
                    bb:7a:c2:18:78:d4:6c:8e:8c:3d:de:ba:e9:41:05:
                    7e:f1:76:81:fd:fd:43:28:26:f1:92:65:ea:ba:dc:
                    da:b4:55:27:15:e3:49:a6:15:63:52:a0:af:57:30:
                    53:94:c9:91:01:aa:86:66:04:28:bf:fb:f8:54:07:
                    bc:27:53:c7:38:8d:51:43:20:46:cb:17:5e:1f:26:
                    30:14:f0:67:63:56:d8:bc:c1:f8:08:88:d0:07:41:
                    83:3a:a3:1b:d1:a7:e1:99:39:fc:b0:e5:0d:bb:bd:
                    57:fa:49:46:98:e1:8d:01:c7:a8:a3:48:49:99:49:
                    4f:a5:74:aa:00:68:b2:f9:5f:15:de:f6:db:5f:7b:
                    db:36:28:3d:ce:48:8c:1a:9a:bc:37:88:5b:a5:5c:
                    5e:f1:bd:40:e2:ce:32:73:64:04:1b:d1:cb:bc:1e:
                    e3:d4:93:d2:e2:bb:e5:54:61:e8:65:09:b2:57:90:
                    36:fb:72:df:2c:b5:85:02:cb:c9:4d:51:50:2a:67:
                    d9:fe:e8:bb:df:12:38:b5:09:f9:82:36:b1:3e:4f:
                    b8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:23:10:E0:25:0E:87:BB:45:0E:86:14:F6:E0:20:C8:3E:00:CA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3b2b540-35b7-3e3c-bd31-5c0ea212841a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b9:23:00:77:89:f0:5c:72:0e:95:29:75:36:37:65:99:a4:
         d8:c4:3c:a7:4f:40:7d:5e:b6:2e:51:24:9b:ce:00:31:21:10:
         1c:ac:ab:4c:76:fa:24:86:a8:3d:de:cc:80:d0:fc:1c:f7:6d:
         3b:9c:9e:08:a9:1f:98:51:33:95:47:d2:c5:a6:1b:56:07:d3:
         f7:b6:00:a5:21:d1:01:ea:56:81:12:f7:38:ed:97:34:a3:a6:
         99:c5:6c:b9:92:d4:d7:a8:dd:16:54:4f:f0:de:80:70:e7:e9:
         0a:03:1f:37:7f:70:25:81:a2:4b:5d:bc:de:e4:04:93:e9:14:
         a8:43:f0:b4:fd:e3:05:49:ce:bb:4b:2d:18:18:a4:02:90:16:
         f3:a9:2c:76:f4:91:f5:31:11:6f:ea:5a:ce:56:6f:0b:99:25:
         4d:a0:99:26:d5:ed:98:92:a9:f7:b8:17:89:63:04:54:05:92:
         95:f1:c1:13:6f:13:09:4e:1f:23:b5:81:aa:df:82:62:cf:97:
         fd:67:51:a5:ea:ca:da:b5:ca:fd:96:b9:c9:2d:e7:0b:bb:4b:
         a9:92:6a:38:1b:6f:1e:13:f0:34:d0:e0:51:61:81:d0:70:fe:
         98:68:ef:db:cf:6c:2a:cc:d1:66:a9:6e:30:8f:ce:8e:f2:54:
         4f:c6:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:35 2025 by rpki-client