Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec90a02b-d6a8-3b00-9bed-73dbbf4cb097.roa
File:                     ec90a02b-d6a8-3b00-9bed-73dbbf4cb097.roa (raw, json)
Hash identifier:          2uQgMDb2vBcuAK9GV9R/73bcZM063gLlcDPxnJSeOus=
Subject key identifier:   4A:65:19:AD:F9:63:D7:6D:2A:D3:1E:7A:4E:90:58:E5:8C:6F:11:C4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1E88076B103714F1CE640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec90a02b-d6a8-3b00-9bed-73dbbf4cb097.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397238
IP address blocks:        156.154.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:e8:80:76:b1:03:71:4f:1c:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=6eb617fe-d3a4-4427-b94d-76b9c08f1ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:3f:54:db:81:66:4f:6d:e0:93:79:0a:a3:
                    ea:e3:eb:45:a4:20:0a:77:f1:38:65:7e:b3:b2:75:
                    e3:44:be:d0:58:9a:cb:b7:7b:24:99:fb:fa:34:a0:
                    51:3c:11:9f:4a:06:69:75:73:19:87:4c:79:3a:1d:
                    fe:d5:f4:65:c1:1f:fd:b0:ea:fe:d8:22:7f:04:5f:
                    4b:ee:f3:7a:29:87:b3:bd:7e:c8:7c:76:93:ec:a2:
                    dd:c5:20:2a:a6:14:57:cc:d8:25:33:5c:12:98:6e:
                    ec:e8:78:f4:4b:92:90:da:25:84:99:76:48:13:46:
                    98:ca:dc:0f:2d:66:7e:2f:2f:17:07:80:b6:98:81:
                    e8:2e:08:f7:7f:79:75:b1:9a:af:90:da:0d:52:83:
                    79:fa:21:61:67:1c:9a:d9:72:39:5f:54:5e:7a:73:
                    fb:cf:fc:d7:42:52:71:2e:e7:0b:c9:bf:0f:39:7a:
                    cb:99:22:3d:1a:ab:cb:90:23:e1:4d:fd:f8:d9:f9:
                    fd:de:b0:f1:d3:78:8d:f3:38:81:af:b3:c0:48:a6:
                    f4:3a:8f:0e:a8:9a:fc:92:84:f7:29:ec:fc:a2:62:
                    8d:62:c3:b5:23:b5:51:41:cf:17:fb:52:3c:4b:6f:
                    72:ed:30:c7:7f:e7:03:8b:81:27:5f:bf:3c:c6:b4:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:65:19:AD:F9:63:D7:6D:2A:D3:1E:7A:4E:90:58:E5:8C:6F:11:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec90a02b-d6a8-3b00-9bed-73dbbf4cb097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:45:d4:e3:32:ce:0f:ce:05:5b:f5:54:78:22:0e:db:b9:
         28:95:94:c8:dc:4c:20:6e:c3:db:51:8e:64:25:90:2e:77:34:
         b7:66:47:e9:71:c8:3e:cc:4e:3d:17:43:24:2f:fe:1b:50:66:
         50:80:d4:44:56:06:ec:da:e8:95:73:5e:a7:ce:55:15:20:58:
         3a:16:22:a1:4e:64:35:9b:ee:fa:03:da:53:83:a0:be:02:dc:
         91:10:60:0b:48:37:85:1c:2d:ac:20:a8:cb:9a:3b:fb:16:23:
         1a:09:49:fe:37:0d:cb:77:bd:79:0d:81:cc:8e:7a:f5:09:3e:
         65:50:90:d8:11:ff:18:81:32:b1:36:28:f6:0b:f8:8a:e4:07:
         c7:fe:70:27:62:10:99:86:20:66:18:a6:8d:a6:23:ff:84:09:
         c6:7a:56:78:72:ae:11:fc:e9:57:b8:13:7d:b8:ce:78:80:af:
         36:fe:01:26:e0:fd:8e:0f:6a:b2:d1:54:65:67:42:8e:af:b4:
         a3:a7:7c:63:e5:79:7f:40:95:2a:a2:2f:bf:b6:6f:4f:f3:3d:
         63:9f:03:0e:97:17:c4:6b:6c:cc:07:54:4d:c4:7d:00:38:19:
         74:b9:e0:93:af:72:d6:36:39:2c:05:b4:f6:a0:fb:48:72:e9:
         cb:a3:d6:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eiAdrEDcU8c5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NmViNjE3ZmUtZDNhNC00NDI3LWI5NGQtNzZiOWMwOGYxYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY0/VNuBZk9t4JN5CqPq4+tFpCAKd/E4ZX6z
snXjRL7QWJrLt3skmfv6NKBRPBGfSgZpdXMZh0x5Oh3+1fRlwR/9sOr+2CJ/BF9L
7vN6KYezvX7IfHaT7KLdxSAqphRXzNglM1wSmG7s6Hj0S5KQ2iWEmXZIE0aYytwP
LWZ+Ly8XB4C2mIHoLgj3f3l1sZqvkNoNUoN5+iFhZxya2XI5X1ReenP7z/zXQlJx
LucLyb8POXrLmSI9GqvLkCPhTf342fn93rDx03iN8ziBr7PASKb0Oo8OqJr8koT3
Kez8omKNYsO1I7VRQc8X+1I8S29y7TDHf+cDi4EnX788xrT9iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEplGa35Y9dtKtMeek6QWOWMbxHEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWM5MGEwMmItZDZhOC0z
YjAwLTliZWQtNzNkYmJmNGNiMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmzRdTjMs4PzgVb9VR4Ig7buSiVlMjcTCBuw9tRjmQlkC53NLdmR+lx
yD7MTj0XQyQv/htQZlCA1ERWBuza6JVzXqfOVRUgWDoWIqFOZDWb7voD2lODoL4C
3JEQYAtIN4UcLawgqMuaO/sWIxoJSf43Dct3vXkNgcyOevUJPmVQkNgR/xiBMrE2
KPYL+IrkB8f+cCdiEJmGIGYYpo2mI/+ECcZ6VnhyrhH86Ve4E324zniArzb+ASbg
/Y4ParLRVGVnQo6vtKOnfGPleX9AlSqiL7+2b0/zPWOfAw6XF8RrbMwHVE3EfQA4
GXS54JOvctY2OSwFtPag+0hy6cuj1mM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:17:04 2025 by rpki-client