Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fc38b8f2-f5aa-380e-8b00-16ee87308811.roa
File:                     fc38b8f2-f5aa-380e-8b00-16ee87308811.roa (raw, json)
Hash identifier:          norc8iQMmJlFaIniGhVc/Sb97AaCcwb6izq/chxrons=
Subject key identifier:   31:4B:94:A8:8A:7C:A0:EE:44:85:B8:47:53:A2:8D:91:1A:43:47:E7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BE81C74F8715F641BA600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fc38b8f2-f5aa-380e-8b00-16ee87308811.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397218
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e8:1c:74:f8:71:5f:64:1b:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=7c327872-8408-4af5-94b8-1b4a770fba81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:36:1c:b3:f7:3a:89:33:08:e7:b5:2c:70:
                    43:d5:ee:11:9a:e8:b4:4e:54:92:b4:8e:ee:71:f2:
                    e8:ce:b3:5a:68:f1:49:f9:77:99:3e:9f:4c:f6:a6:
                    e0:a3:d2:a4:6e:60:98:af:fe:44:61:c7:7c:cd:3d:
                    1b:99:fe:53:5b:b3:94:dc:8e:ab:62:50:50:bb:d5:
                    5c:ca:54:2a:d5:de:9a:5e:26:5a:d2:5b:03:35:f4:
                    ce:e0:a0:71:1a:36:b0:d2:c4:14:29:33:0d:dc:76:
                    09:fe:e8:a0:31:82:e6:da:83:ab:0b:b6:74:02:8b:
                    bd:a8:ef:29:fd:33:b7:a5:38:1a:95:15:2a:f8:eb:
                    b4:c6:6b:b4:2f:c3:69:07:b7:ee:fb:65:9c:36:2b:
                    1d:81:96:91:4e:7e:18:e8:a2:26:b4:1f:07:36:d2:
                    26:6e:fd:a9:9a:6b:30:6c:d3:b9:25:a5:d6:d6:ac:
                    94:3c:43:ed:18:0e:7c:25:bf:08:36:ed:16:a2:c2:
                    92:a1:f0:a1:78:b5:81:52:eb:92:52:4d:81:6f:6f:
                    c5:68:e2:44:36:8c:7c:5d:42:e2:e0:ec:3e:ed:67:
                    66:5e:bd:14:cb:77:46:c8:7a:22:e5:d0:03:2c:62:
                    9d:51:55:83:43:d4:a1:95:94:d5:79:e2:17:9e:69:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4B:94:A8:8A:7C:A0:EE:44:85:B8:47:53:A2:8D:91:1A:43:47:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fc38b8f2-f5aa-380e-8b00-16ee87308811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b6:98:b1:aa:77:72:73:97:84:21:e2:f7:ea:5f:ce:d4:c2:
         40:74:64:43:3c:24:15:7d:1f:87:a8:d2:d5:6e:a6:95:c0:7c:
         43:c9:29:df:32:f3:21:b1:f0:4e:ed:d2:d6:c6:da:2c:85:61:
         81:7a:72:a4:bd:25:70:80:ab:57:03:f6:6d:e6:52:f0:59:44:
         3e:34:64:cc:0e:53:a2:47:78:10:8c:4f:46:a9:23:84:a9:a8:
         79:e0:36:a8:9c:3a:13:c0:16:44:d2:f6:2e:64:5f:cf:0c:98:
         9e:96:70:c8:cf:f9:9e:8d:b1:39:7a:2c:fe:f0:31:b7:11:55:
         52:aa:77:4e:0c:56:e3:91:a7:ef:8b:97:d1:f0:8a:4c:36:fa:
         4f:ae:ee:ce:22:81:3b:be:86:d9:e0:d8:1c:bc:0b:0c:67:ad:
         cb:41:6d:6c:c5:e6:9f:df:49:d0:ac:4e:95:5a:83:61:81:cd:
         ad:ce:0b:7f:a1:be:de:64:0d:c1:a4:f7:86:5c:44:ee:70:cd:
         85:5f:06:93:a3:5f:b4:86:32:18:b2:59:ed:c2:6c:e2:d1:e6:
         64:eb:58:cf:8c:af:43:ab:f0:bb:8a:be:0e:10:eb:3b:ed:97:
         a3:dd:b6:b6:88:fa:6e:21:3f:10:4d:13:85:bb:36:1e:45:31:
         43:12:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:08:16 2025 by rpki-client