Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ca71268-0bf7-3850-a74f-c3f03dab6504.roa
File:                     1ca71268-0bf7-3850-a74f-c3f03dab6504.roa (raw, json)
Hash identifier:          wAsIxBQ8WRg/d5wx+o75hgqXwrY8fofJz8puWMbg0Ag=
Subject key identifier:   CB:75:F1:64:13:BB:18:8C:B1:D3:71:8B:8E:6D:B8:2E:D9:9C:43:67
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D4179665C4148F72CBF8
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ca71268-0bf7-3850-a74f-c3f03dab6504.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397224
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d4:17:96:65:c4:14:8f:72:cb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=8e843107-4fba-4d72-9fad-d8b7bc0243e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:f8:78:70:b8:01:b4:fe:c6:ed:77:f3:55:
                    1e:5d:98:81:bc:c8:6d:a1:ac:59:94:89:a0:6c:d0:
                    36:db:51:55:a2:ec:3c:41:72:5c:ca:b7:c3:78:11:
                    8f:66:23:05:44:b8:e8:ec:a4:25:3c:06:42:14:a0:
                    b9:2e:20:26:a9:4e:44:0b:cd:e3:f4:13:e7:c7:96:
                    1b:9b:dd:45:ca:ca:ff:04:bd:a8:53:12:6e:50:06:
                    bd:dc:88:da:a2:24:9b:d4:8b:26:9c:c5:83:70:d4:
                    25:77:5c:ae:1b:0e:51:38:3b:1b:c2:0c:bb:c3:29:
                    dc:47:01:87:85:70:8e:d5:45:9e:02:58:51:6a:49:
                    a4:ba:fc:92:00:d5:8d:ae:04:4c:4d:78:8b:85:dd:
                    89:89:0f:0c:af:34:6f:34:c2:a8:dd:c2:27:75:e7:
                    2c:43:bd:5e:9e:49:85:f3:88:97:38:ae:9a:04:e3:
                    14:41:70:06:05:ce:63:ab:b6:89:26:0b:ed:08:80:
                    e5:ad:13:da:3f:fc:41:17:72:70:f3:a7:f8:f2:98:
                    bf:04:ea:26:83:a2:ab:eb:af:50:ec:e0:db:55:c4:
                    63:ed:95:6e:4f:1c:8b:91:b3:80:a8:31:09:cc:47:
                    d1:bb:f5:28:35:5e:ed:6f:9f:a0:02:36:41:f5:9e:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:75:F1:64:13:BB:18:8C:B1:D3:71:8B:8E:6D:B8:2E:D9:9C:43:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ca71268-0bf7-3850-a74f-c3f03dab6504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2c:b1:1e:92:05:54:63:8d:d5:28:fc:7b:9b:b5:6a:9f:86:
         75:f9:53:7d:5f:40:b7:d3:90:e3:54:29:32:96:c0:5d:9d:c2:
         d7:de:71:de:2e:c3:a9:78:0b:0a:d6:05:0b:f0:40:39:62:35:
         41:d5:53:a6:9b:32:41:84:a5:ae:1c:e8:6b:53:68:05:81:17:
         d7:fc:6b:f1:15:25:c2:43:6e:9f:4a:03:00:5f:fc:eb:12:49:
         b4:40:7d:d1:a8:10:cc:70:c9:99:52:91:08:f3:0e:11:15:e5:
         26:dd:be:55:41:8f:06:4f:0d:89:41:56:92:a5:48:2a:8b:62:
         a0:b8:7c:97:d7:68:19:26:f9:2d:58:e4:20:26:1f:b5:a8:e3:
         87:27:03:f2:80:bc:6f:7d:f7:2b:0d:89:33:8b:3e:2e:3e:58:
         54:44:4e:88:e5:ef:9f:86:a7:c2:4b:b4:ef:45:bd:24:b5:bc:
         fc:6d:b4:52:9e:96:bb:45:34:d7:76:5e:64:a6:90:d5:8f:53:
         93:84:30:0a:1f:3e:2e:e9:66:8b:5e:ac:32:a6:6a:11:d3:a8:
         61:e3:45:1a:02:45:c8:53:17:30:ad:5a:8d:92:14:90:4c:1b:
         e7:43:01:4c:22:69:b1:4d:b2:76:8e:bd:37:13:85:7c:89:f4:
         07:b7:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:07:27 2025 by rpki-client