Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf0b52b-b4f8-368e-89ae-45870a5f3a76.roa
File:                     fdf0b52b-b4f8-368e-89ae-45870a5f3a76.roa (raw, json)
Hash identifier:          mijbRH6H+DoW2uE/1M8rB47FY9HrxK2xW+9Yj+GW/Q0=
Subject key identifier:   8A:F8:3B:D5:E9:00:B1:C1:F6:25:D6:A2:51:25:15:61:EA:CB:8B:48
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23BFCAEEF295A165B61AEE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf0b52b-b4f8-368e-89ae-45870a5f3a76.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397220
IP address blocks:        156.154.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:fc:ae:ef:29:5a:16:5b:61:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=d77b98d9-5c00-4c20-a223-01a35a902fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:23:de:39:ee:f6:95:ef:6c:23:ca:89:da:
                    40:ec:6d:dc:a9:dc:14:6d:ac:e8:b0:72:8c:1a:99:
                    a6:2f:ae:4f:a3:53:57:9f:17:8b:be:a6:15:84:e3:
                    f2:8f:d1:d6:8a:9d:bb:11:cd:c9:e1:aa:c6:9a:f1:
                    f8:dd:06:6b:9f:d3:64:09:9b:28:46:78:5e:68:d7:
                    2f:2e:9f:14:6c:8f:54:a4:75:7c:79:dd:56:76:8d:
                    ed:12:1e:cd:39:1f:d9:38:74:08:f2:79:da:5d:c4:
                    9c:a0:93:9c:c9:b3:4f:bd:9d:28:94:d7:4c:f3:a9:
                    39:25:60:c5:5a:53:ac:fe:10:d4:6c:a5:f6:84:3a:
                    ba:26:9e:eb:58:00:d4:b9:08:41:09:fd:5b:c3:bb:
                    28:35:56:c1:c5:97:75:68:31:9e:6c:09:9e:cd:7a:
                    1d:35:74:97:9c:32:c4:58:0b:ae:d2:d8:35:ac:c1:
                    bf:c0:ed:74:c1:d2:cc:d4:b8:bb:10:f3:4e:81:81:
                    4f:b7:f4:c2:02:cc:67:24:28:11:06:16:b2:ba:aa:
                    d8:df:f9:45:70:77:fb:0e:cd:36:b1:e4:22:f1:a7:
                    ce:eb:79:60:33:42:a7:ef:89:17:44:54:64:8d:d0:
                    75:06:d7:e5:f5:4f:f7:71:3b:32:24:76:23:61:bc:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F8:3B:D5:E9:00:B1:C1:F6:25:D6:A2:51:25:15:61:EA:CB:8B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdf0b52b-b4f8-368e-89ae-45870a5f3a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5f:1e:42:84:72:2b:7f:7a:4c:b8:d4:99:a4:00:4f:bb:a2:
         09:ad:fa:ee:a0:8f:c3:0b:d4:76:34:cd:6b:29:1f:a0:f5:85:
         51:1a:ca:5c:76:9b:de:bd:49:c0:27:a0:d4:44:94:a5:d9:94:
         82:d0:6e:4e:ca:f4:40:b8:0b:82:36:d0:1b:49:e1:b5:39:2f:
         e3:9b:2d:93:74:5a:b2:5c:c1:8f:46:38:b2:cc:ed:40:69:0e:
         1e:1c:5b:8b:02:12:0f:f2:53:1d:17:c1:e4:cf:a5:87:a3:81:
         d9:2e:73:4d:c2:57:68:fd:8f:f8:64:79:43:3d:74:cb:79:e8:
         b4:6c:bb:ef:5e:d0:2e:27:0c:ea:9a:4a:14:d0:bc:c9:54:e5:
         76:12:91:8b:6c:eb:6b:76:b7:33:3a:f8:8b:57:97:74:96:62:
         46:bb:74:4d:90:4f:73:71:e3:83:6c:64:1a:c5:8a:db:3f:ea:
         4a:38:dc:a7:51:7c:9e:0d:2f:fa:6d:29:06:f1:08:cd:ff:b8:
         a0:1d:7e:45:5d:8f:0d:81:87:54:b1:1d:f0:9e:91:da:f1:9c:
         ff:8c:3c:ed:a9:70:cc:2c:e6:02:ab:46:eb:0a:0e:dd:44:e0:
         d8:ae:ce:0f:04:bb:6a:c9:3b:10:9c:83:db:72:08:91:91:64:
         1a:05:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:13 2025 by rpki-client