Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8ec97c6-9b2e-3f2c-a5c8-b5fa561323cf.roa
File:                     f8ec97c6-9b2e-3f2c-a5c8-b5fa561323cf.roa (raw, json)
Hash identifier:          C8XRlyzB+ZyayXYCIqKV2wCrsTaVuvQq86bARwAS5x8=
Subject key identifier:   40:91:C4:E7:7C:26:4A:00:4A:C1:58:77:BE:10:74:A4:2F:D3:C8:08
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BF68BF3C264CFD1E30580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8ec97c6-9b2e-3f2c-a5c8-b5fa561323cf.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397231
IP address blocks:        156.154.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:f6:8b:f3:c2:64:cf:d1:e3:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=2dd43568-56c8-444f-95cd-2cadd0870d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:77:fa:71:76:12:32:d0:6c:e4:d7:04:de:
                    0d:a1:c7:50:3e:f3:29:c6:6a:a6:d6:b5:be:b8:65:
                    2e:43:01:dc:dc:2d:ee:7d:db:a8:96:73:d0:b8:f7:
                    af:01:38:08:d5:e8:17:45:4c:1d:2f:8a:d5:11:aa:
                    cb:9e:39:10:1f:18:b2:c6:31:de:68:a4:af:0c:26:
                    b4:e5:a3:88:22:4b:a5:6f:9f:63:69:13:bf:8d:53:
                    7d:c5:ba:d5:4b:4c:b6:ef:8e:a3:43:e7:3d:fd:cb:
                    01:45:a3:e7:cc:98:97:84:30:9c:a6:ed:f5:47:1d:
                    49:93:c5:15:9b:75:01:61:02:55:49:3d:ed:4a:9c:
                    99:0b:8a:97:07:aa:d2:92:12:87:46:cc:44:d3:34:
                    5c:93:26:b5:25:c7:b4:a9:2e:b5:b0:53:81:86:74:
                    7f:12:dc:73:60:47:85:1f:c2:a3:15:dc:db:b8:dd:
                    d4:4a:a0:13:d1:34:cc:77:21:04:aa:0a:05:ae:3a:
                    b2:d4:96:07:55:8c:f4:eb:f6:a1:fa:aa:11:cd:11:
                    64:b0:9a:0a:54:24:87:bb:be:6b:ac:15:24:95:46:
                    d6:77:a6:34:71:b2:33:8a:78:23:f1:e2:05:00:06:
                    73:28:6d:13:eb:19:a8:77:db:81:7d:42:38:f1:30:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:91:C4:E7:7C:26:4A:00:4A:C1:58:77:BE:10:74:A4:2F:D3:C8:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8ec97c6-9b2e-3f2c-a5c8-b5fa561323cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:08:39:9b:63:89:10:5d:92:c9:28:dd:0e:aa:7f:9d:0a:
         4b:ba:1b:e7:9c:e3:17:45:ef:c9:fa:09:91:15:3f:53:c0:f7:
         a0:cb:b2:b7:7a:93:1f:0f:45:dd:c7:00:67:61:26:0f:0b:99:
         30:69:12:12:ca:db:59:06:fb:10:6f:71:07:fb:b0:dc:35:96:
         3d:a1:54:83:dc:a7:c5:cb:b6:af:89:61:93:52:8e:40:41:14:
         69:97:e1:6b:8c:12:bf:a6:f9:91:a0:ec:7c:cd:09:e9:3d:12:
         02:24:78:24:9e:0e:b8:d9:6a:fe:68:48:38:09:bc:c5:80:85:
         71:8e:17:13:13:cb:6c:db:c9:b4:b1:d5:34:cc:b9:5f:5b:0f:
         8a:13:81:a6:7a:8c:bb:b7:6f:85:37:56:cc:8d:8f:b3:d0:7a:
         28:94:77:56:77:74:d9:17:df:c8:eb:01:f2:80:e0:9a:8b:7a:
         19:11:e9:8a:14:8f:60:5d:0c:d1:f0:51:ba:3b:3a:71:4c:b1:
         b0:b2:24:b5:2e:5f:bd:e6:e2:02:dc:28:85:97:7d:83:e2:41:
         a5:4a:54:0d:bf:c4:11:f0:c9:42:30:d5:91:7b:b7:c2:ab:3f:
         30:ac:35:5f:16:84:76:4b:c6:73:2e:e6:d9:8e:cd:2e:a8:17:
         ef:38:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:35 2025 by rpki-client