Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04ff7131-4541-334b-ba77-46d5a531cbd6.roa
File:                     04ff7131-4541-334b-ba77-46d5a531cbd6.roa (raw, json)
Hash identifier:          fZFDcHu/mRwAJ4Z1vwNFJKB028TOZldcQWNa8aY1D3s=
Subject key identifier:   2E:A7:AE:03:A3:46:23:EE:6E:B7:80:03:EC:5B:C1:E1:33:66:05:EB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0DFEDF854329E2071CC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04ff7131-4541-334b-ba77-46d5a531cbd6.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397234
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:df:ed:f8:54:32:9e:20:71:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=8a1ed3b4-1fed-445f-b3e5-a4b021e15069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:a4:c4:7e:f9:54:31:90:f8:3b:d4:dc:5a:
                    c4:85:bd:ff:82:2b:7b:9a:96:47:f1:1a:f1:0e:35:
                    14:3e:37:9d:98:05:58:70:75:88:ef:1d:d7:1d:e7:
                    8c:9a:b1:79:ec:8f:1e:05:1e:34:57:b2:26:7f:a1:
                    ee:6f:52:20:d4:37:cd:52:f9:4b:85:00:5b:50:1f:
                    3e:d3:c3:e0:3a:85:38:39:2a:99:e1:14:20:f0:f8:
                    bc:44:52:e6:41:4e:9b:f8:24:21:6a:d5:7c:e9:d6:
                    d2:4a:22:45:83:fa:d3:e4:bb:0c:ea:5c:b7:35:61:
                    50:e3:c0:e0:5b:a4:e5:c3:87:85:cd:99:6d:13:07:
                    fb:8d:2c:ce:d3:a6:bf:26:4c:27:3d:1c:d6:8d:e5:
                    c4:b1:e1:46:9f:08:2a:99:c0:e9:88:b2:05:2e:ff:
                    a8:b0:84:ed:0f:69:0b:72:a3:75:64:59:28:42:76:
                    bb:db:96:39:e3:e2:df:d1:ad:65:d9:bc:18:26:1d:
                    76:38:dd:c6:9f:7c:f3:14:ce:3e:4a:5a:86:7f:a5:
                    4b:e0:b0:e3:ff:ef:6b:d1:cb:a2:47:14:d1:fc:72:
                    b2:87:7f:3f:cd:ef:56:42:a2:1b:8e:4e:bc:75:ff:
                    0f:7c:2a:94:69:02:54:88:4e:8c:c9:0e:1a:1b:cd:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A7:AE:03:A3:46:23:EE:6E:B7:80:03:EC:5B:C1:E1:33:66:05:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04ff7131-4541-334b-ba77-46d5a531cbd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:0d:f1:36:76:ff:2e:c2:c7:fa:fb:f4:12:b6:7c:70:89:
         cd:e8:c6:c8:54:48:83:e5:27:df:c5:c2:8b:65:65:be:f6:4c:
         f5:17:ae:dd:84:a2:d5:ec:8b:24:e5:ef:1d:f2:04:2a:c3:7d:
         03:7e:52:e3:96:70:7a:e9:10:e1:f1:67:62:30:75:73:61:20:
         9d:27:dd:1d:3d:b7:d5:9f:22:5e:37:5b:0b:8e:bd:39:05:11:
         44:e0:1c:d8:4e:88:f0:ef:2a:b8:d5:04:48:67:b5:4b:84:e2:
         53:7e:dc:34:20:c0:13:68:0d:ff:70:95:11:a6:40:1f:09:51:
         db:67:ce:1c:a8:73:4b:ad:fe:50:d2:b7:bb:d2:8b:cc:10:f5:
         8b:f9:2c:d9:57:70:6f:60:bf:e4:aa:03:fc:d0:2e:58:c8:f2:
         12:03:47:5b:07:00:9a:dc:83:58:90:19:0a:69:be:f0:9a:39:
         26:51:c6:b2:47:7b:b0:19:e9:e2:c7:2d:b5:02:82:9c:e3:df:
         0b:e8:17:1b:f0:e2:15:d6:3f:c8:5c:fc:c7:22:42:19:12:b3:
         14:35:94:68:55:c4:04:fb:3a:4b:11:55:cd:3c:e8:96:36:78:
         35:93:71:40:36:72:ab:08:da:b9:47:03:30:e3:f1:20:c7:f8:
         77:9f:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:30 2025 by rpki-client