Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deaeedb9-fc83-34ab-be9f-bc7672acae8d.roa
File:                     deaeedb9-fc83-34ab-be9f-bc7672acae8d.roa (raw, json)
Hash identifier:          181MkcKJI/euyij9Z0uMzjwfb564wg6fjGWYsJX4tDQ=
Subject key identifier:   87:E7:46:68:63:DB:AF:95:D0:43:1D:A5:9D:C2:89:7E:DC:64:9B:36
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C817F42304EBDDA574D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deaeedb9-fc83-34ab-be9f-bc7672acae8d.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397221
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:81:7f:42:30:4e:bd:da:57:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=3e8924f9-d488-4bde-8256-a07fe1b9921b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:cc:05:4b:85:5d:c0:2c:00:55:de:14:40:
                    6f:a5:f9:56:88:98:85:00:36:dd:7c:a4:1d:85:e4:
                    21:df:30:90:54:e2:99:22:16:e3:a8:dc:bf:4d:58:
                    d4:43:ed:71:d1:87:76:8a:a9:fb:03:69:4e:ad:15:
                    16:0d:85:dc:ae:3c:62:c0:fe:c2:4f:62:0b:a6:26:
                    b9:e7:d3:44:fa:2f:d4:92:be:c1:d6:e6:ba:73:f8:
                    1f:f1:6c:4b:29:40:ff:5a:88:29:0a:8b:14:67:26:
                    9e:40:c3:0a:01:ec:1f:52:80:e9:a5:38:ed:70:39:
                    db:4b:50:40:38:3d:b4:ca:1c:83:ae:7d:e1:7b:01:
                    14:76:db:a7:af:a1:46:45:dd:a9:74:49:d9:32:98:
                    2c:57:ab:47:67:7b:b9:34:0c:00:63:10:ce:12:0d:
                    11:9d:6a:a0:82:93:e9:85:ee:6d:15:fc:8f:5b:15:
                    ba:4c:38:38:32:9f:78:d7:99:48:ac:2a:85:85:c9:
                    bc:c3:d9:77:73:af:ff:7f:5d:7f:c9:68:b9:a6:50:
                    74:27:4a:cf:c5:96:01:76:35:c5:51:54:6a:fb:f1:
                    da:74:f5:4f:30:b2:8d:6a:22:f8:6a:91:b0:a7:62:
                    f9:54:1a:cd:0b:76:75:f8:84:7c:e5:e7:c9:83:d5:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E7:46:68:63:DB:AF:95:D0:43:1D:A5:9D:C2:89:7E:DC:64:9B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deaeedb9-fc83-34ab-be9f-bc7672acae8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:c6:1e:46:59:3e:a2:a9:67:2c:81:b0:0c:f9:6a:20:14:
         e5:08:78:3e:07:bd:d7:34:17:2e:75:87:ef:5b:9f:0f:10:81:
         3d:33:5e:c1:d4:97:df:74:fc:3c:26:21:24:93:24:ad:18:c0:
         db:b3:90:5b:36:b1:7a:5f:85:39:07:f2:6a:26:5e:67:7c:b9:
         54:72:b8:92:72:11:bb:d3:03:0f:fc:fc:5c:29:e0:55:8f:47:
         37:fe:25:67:ab:d4:57:b5:c6:71:a8:82:a8:b3:fc:42:d0:82:
         b9:81:e8:4f:d6:bf:81:a3:69:c6:db:49:95:ee:26:3b:0b:20:
         55:c4:44:b8:57:12:b4:fc:6b:a7:8d:db:7f:10:86:5f:96:c1:
         68:f8:ed:10:fa:86:64:a9:ef:07:51:94:7f:f5:1a:fd:1a:fe:
         05:ae:56:43:13:e6:44:08:b6:0c:f9:1b:a5:62:e4:e3:3d:4f:
         3f:0c:6d:bd:dc:11:23:13:fb:ef:90:d8:7e:1a:1d:c4:0c:0a:
         48:55:82:86:f8:62:47:44:82:c0:b3:7f:fc:32:15:f1:ff:a6:
         df:7d:80:ab:88:3c:dc:98:93:ff:4d:39:53:e9:6f:de:c3:a6:
         1f:12:d7:1a:f8:28:45:8d:24:dd:2c:a8:ee:6a:8e:a4:34:c7:
         6f:9e:04:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIF/QjBOvdpXTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
M2U4OTI0ZjktZDQ4OC00YmRlLTgyNTYtYTA3ZmUxYjk5MjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDrMBUuFXcAsAFXeFEBvpflWiJiFADbdfKQd
heQh3zCQVOKZIhbjqNy/TVjUQ+1x0Yd2iqn7A2lOrRUWDYXcrjxiwP7CT2ILpia5
59NE+i/Ukr7B1ua6c/gf8WxLKUD/WogpCosUZyaeQMMKAewfUoDppTjtcDnbS1BA
OD20yhyDrn3hewEUdtunr6FGRd2pdEnZMpgsV6tHZ3u5NAwAYxDOEg0RnWqggpPp
he5tFfyPWxW6TDg4Mp9415lIrCqFhcm8w9l3c6//f11/yWi5plB0J0rPxZYBdjXF
UVRq+/HadPVPMLKNaiL4apGwp2L5VBrNC3Z1+IR85efJg9WdGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfnRmhj26+V0EMdpZ3CiX7cZJs2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGVhZWVkYjktZmM4My0z
NGFiLWJlOWYtYmM3NjcyYWNhZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvmxh5GWT6iqWcsgbAM+WogFOUIeD4Hvdc0Fy51h+9bnw8QgT0zXsHU
l990/DwmISSTJK0YwNuzkFs2sXpfhTkH8momXmd8uVRyuJJyEbvTAw/8/Fwp4FWP
Rzf+JWer1Fe1xnGogqiz/ELQgrmB6E/Wv4GjacbbSZXuJjsLIFXERLhXErT8a6eN
238Qhl+WwWj47RD6hmSp7wdRlH/1Gv0a/gWuVkMT5kQItgz5G6Vi5OM9Tz8Mbb3c
ESMT+++Q2H4aHcQMCkhVgob4YkdEgsCzf/wyFfH/pt99gKuIPNyYk/9NOVPpb97D
ph8S1xr4KEWNJN0sqO5qjqQ0x2+eBOM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:33:46 2025 by rpki-client