Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca4bd739-0d4a-348a-a1fd-b7e57103a7cb.roa
File:                     ca4bd739-0d4a-348a-a1fd-b7e57103a7cb.roa (raw, json)
Hash identifier:          8FYYTUObig7TjC+5fhVr2ruqQspeCEQMQTOKr13wvoE=
Subject key identifier:   B1:73:8C:81:97:86:72:0C:2A:11:AB:F8:D2:B6:B3:4C:45:48:8F:4F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CA44EE1EB7425B8E12540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca4bd739-0d4a-348a-a1fd-b7e57103a7cb.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397239
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:a4:4e:e1:eb:74:25:b8:e1:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=37d209d2-7820-42d7-b91f-e8823c3e327c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:b2:f3:e6:e8:fa:a8:08:88:b0:fb:b9:a5:
                    e5:1a:f5:f5:b6:19:05:d7:ab:64:97:7e:a0:ee:3c:
                    79:de:0e:d1:23:b9:44:48:31:e6:52:45:70:77:40:
                    35:27:e3:40:70:3c:ad:bc:a6:31:fd:1a:9a:98:98:
                    5c:a8:af:97:32:f9:76:b4:09:b3:ff:8f:d6:ea:8b:
                    5b:a1:6e:28:e3:63:6f:d3:ba:88:62:dc:77:73:4b:
                    9c:24:64:c2:f8:33:ba:5f:79:09:76:32:fb:f1:2f:
                    70:31:f1:65:ae:dd:5e:61:09:33:f6:fd:e9:89:69:
                    4a:55:c3:14:81:c6:63:e5:1e:8d:10:07:24:37:53:
                    f4:61:bc:84:55:12:cf:93:1f:5c:73:78:f9:9b:bb:
                    75:78:64:74:3f:9f:f0:78:ec:03:33:d5:0b:14:6f:
                    f1:46:be:b2:09:55:47:b8:0b:22:71:8f:ef:ef:ea:
                    b3:fa:f9:20:5f:c5:21:02:37:0a:a6:0f:80:40:d6:
                    2b:19:95:64:b9:a4:03:2c:db:9b:f8:39:63:b2:49:
                    75:9c:9d:32:b3:b1:58:08:0d:d9:72:1f:5a:50:44:
                    94:72:37:f5:95:c3:b4:cb:96:dd:38:62:d1:7c:44:
                    12:80:f7:15:7a:b5:06:7f:4d:6b:97:50:f4:7c:ab:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:73:8C:81:97:86:72:0C:2A:11:AB:F8:D2:B6:B3:4C:45:48:8F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca4bd739-0d4a-348a-a1fd-b7e57103a7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:cf:ad:cc:7b:d3:44:c5:cf:ec:23:08:61:4b:43:b2:f8:
         5a:ff:67:38:7b:08:5f:87:41:f5:fa:34:db:db:66:97:2d:eb:
         88:d2:c3:ee:74:c7:ef:ee:23:bf:27:05:09:ae:56:2f:97:ec:
         7e:af:19:ca:7d:eb:fd:54:a4:83:21:db:c6:a3:2b:d9:14:64:
         7c:cc:d6:03:7f:e8:ee:54:fc:ec:ba:42:f2:c6:05:66:91:40:
         98:63:09:6d:69:93:c8:48:e7:0d:8a:14:f0:3b:a9:42:8b:78:
         da:c8:eb:84:a0:6d:88:1a:b9:0f:40:b0:00:16:f5:9e:74:0d:
         30:79:ae:00:9c:ea:02:b4:57:82:82:70:22:d2:64:7c:51:3c:
         15:52:4d:84:7b:d1:ac:e7:6f:a0:9b:b2:3b:d3:b9:bd:b2:ad:
         49:f4:50:ee:2c:72:d8:ab:cd:01:61:80:3a:29:91:fc:18:26:
         7b:a1:ac:b0:f2:a5:66:b5:40:6f:8a:29:53:64:d0:46:99:5c:
         f9:a8:59:ce:43:56:42:80:00:cb:f9:4e:ca:de:4b:3a:f1:14:
         0c:74:2a:ad:53:12:71:b6:0a:3b:30:1e:b2:d0:85:2d:ca:56:
         c9:00:e7:8b:a2:ab:fe:e0:da:78:99:a7:17:3b:b2:d2:80:fe:
         3a:6c:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:31 2025 by rpki-client