Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d3c104d4-a47c-3980-9220-9eca908dcc58.roa
File:                     d3c104d4-a47c-3980-9220-9eca908dcc58.roa (raw, json)
Hash identifier:          0ar/8Opzxnfdn8X+L0HO2BONiYqEFogr7woPnpqs5Nk=
Subject key identifier:   75:55:F9:6F:E5:43:3F:D3:E0:AE:87:3B:10:7C:70:86:48:E3:D5:AA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1D2FD3DCC1A596CFEC440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d3c104d4-a47c-3980-9220-9eca908dcc58.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397222
IP address blocks:        156.154.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:d2:fd:3d:cc:1a:59:6c:fe:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=24c6d0ec-ab42-4df0-b2b7-30cc3a92f008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:f0:f9:74:a5:83:e6:be:4a:92:85:e5:c4:
                    dc:12:1b:82:60:67:82:98:5c:62:7a:53:61:f7:31:
                    5c:9b:5b:6f:b8:88:b4:da:c3:1d:16:f2:c1:cd:64:
                    85:e4:84:7c:04:cd:46:45:11:e3:88:67:d6:75:9a:
                    cc:c4:90:da:8e:0b:80:ef:e7:19:f7:81:e9:a7:aa:
                    ef:7a:21:59:ce:4b:b0:3f:b6:3b:fd:b7:d4:50:09:
                    1b:20:51:61:23:b9:a2:e3:48:80:4a:9d:86:49:aa:
                    40:a7:bb:6a:5e:dd:7a:de:44:9f:ed:38:4b:79:0f:
                    37:a2:15:c1:10:7d:14:68:a5:a6:4c:3b:e1:9d:13:
                    a5:8a:ab:aa:53:18:08:ff:7f:7f:ee:b3:cd:5d:8f:
                    04:43:c7:22:b5:9d:f2:8e:2c:da:01:c5:e7:bc:26:
                    7b:d8:2b:2a:cf:37:c4:18:89:5e:fc:83:f1:cb:1d:
                    84:45:78:08:5d:9d:57:9f:e9:df:da:d2:83:c6:7e:
                    c9:e8:fa:9a:0e:37:a1:89:6e:6c:23:7f:09:be:20:
                    be:d1:d6:04:0e:b3:e2:98:84:8e:fb:f0:a7:ca:3c:
                    7b:c7:9e:95:24:20:97:f0:52:91:cf:71:aa:4d:d2:
                    e3:b6:d2:20:05:27:4f:4c:b1:6e:24:35:38:c7:64:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:F9:6F:E5:43:3F:D3:E0:AE:87:3B:10:7C:70:86:48:E3:D5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d3c104d4-a47c-3980-9220-9eca908dcc58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:de:83:c7:fe:6a:8a:87:d7:a3:44:53:f1:29:5f:dc:cc:
         2e:9f:cf:13:18:bd:e1:8a:e2:a9:4b:76:fd:c2:c6:e9:b9:16:
         ee:32:a9:73:0c:b0:c1:cb:53:72:37:78:58:f5:ac:5f:ee:a6:
         b6:bd:a9:00:3b:39:75:a6:35:11:6b:6c:b9:bf:05:c1:25:54:
         a1:49:c8:e7:78:7b:51:ab:03:30:9c:af:7f:26:96:fe:65:be:
         ad:95:06:88:c8:ca:1b:9b:dc:e3:42:bc:95:fc:77:2d:bf:55:
         3c:e4:02:00:b4:3b:f6:fc:54:8b:f7:7f:85:3d:ae:be:54:6f:
         68:35:78:33:c7:e3:b3:c8:79:b8:8a:5d:44:32:b5:60:b6:10:
         f9:6d:ba:89:98:97:80:0e:fa:2f:db:89:6c:57:a0:4d:c6:2d:
         75:c8:6c:13:08:b6:c1:c4:0d:a4:65:04:05:42:e3:7b:31:82:
         a5:13:ef:fe:14:13:12:d6:ea:37:de:b1:7c:84:a2:f2:cc:73:
         d8:44:c2:9e:9c:30:52:c0:f1:71:28:c5:0c:bb:53:3c:2c:40:
         a7:6b:38:13:eb:ad:f6:1e:32:6c:97:8a:17:85:bd:0d:2b:f1:
         9c:e0:40:d6:9a:04:a1:70:59:18:bf:db:c3:c6:23:16:af:1a:
         1c:fc:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:00 2025 by rpki-client