Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa
File:                     7cf2603a-075d-3a24-850f-ff16f6f88964.roa (raw, json)
Hash identifier:          /fLbbn6QmwKr+NywEYlndQ8X0nrP9rhcBcQV6kHAq3I=
Subject key identifier:   92:62:8A:FF:E8:47:97:89:CD:64:6B:31:D9:47:53:31:39:C0:E9:87
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A682631CE13B1B2391E93A800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     12008
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:31:ce:13:b1:b2:39:1e:93:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=b33eabc7-7ed2-40e2-928b-5ae7821f5c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:ce:87:2c:e5:c1:07:ab:05:2a:42:c3:f0:
                    c8:f7:55:40:51:5b:21:08:c1:d1:12:c4:21:f1:f2:
                    8d:ec:6b:b8:2c:70:ec:10:87:61:d9:22:be:36:74:
                    df:24:c6:06:4b:3d:94:7b:08:fc:6c:f0:59:73:8f:
                    d7:58:7d:93:8f:d5:de:e9:8a:e9:65:89:ed:18:28:
                    dc:ee:9a:1e:67:ea:3a:ac:1c:3b:61:37:48:d9:0a:
                    17:7e:3b:c1:1d:ed:a9:8e:6c:02:d5:68:82:fb:51:
                    c3:69:c2:d1:0e:00:df:5c:41:84:4d:e6:34:56:d8:
                    2d:a1:8d:55:d1:ba:b0:c4:d3:8a:2b:ef:33:b0:dd:
                    f2:1f:8a:d0:36:e7:08:0b:ab:59:3a:2a:d8:67:e0:
                    7f:69:50:d6:c0:b5:9c:c4:9a:90:15:8c:6a:07:47:
                    34:a1:c5:5c:f4:00:e3:9f:87:45:08:52:93:54:2f:
                    c6:e6:a1:e0:a8:9d:6f:56:e6:b9:34:42:91:45:1a:
                    37:76:84:00:1c:ce:c7:ab:36:e9:c4:29:62:d7:09:
                    77:cf:19:05:ad:81:2d:f7:30:29:a7:26:95:2f:79:
                    b8:52:0e:a4:f7:02:78:75:e0:e1:65:68:15:77:3d:
                    6a:fe:2d:d5:1b:08:76:c4:05:03:a4:38:02:14:91:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:62:8A:FF:E8:47:97:89:CD:64:6B:31:D9:47:53:31:39:C0:E9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:a7:d5:1c:56:1f:6c:e8:9f:45:61:84:d5:e9:bb:36:25:
         63:0e:bd:b1:08:c9:ee:32:58:d1:2f:6f:d2:0a:98:5c:92:15:
         25:4f:50:8d:0b:d0:f2:b3:b9:fe:b3:6e:85:6b:9b:0c:9c:ae:
         96:a2:c8:8c:ff:1d:42:fb:f6:a9:62:e5:80:44:21:6c:3d:fb:
         07:fe:e0:23:f6:cd:3a:45:d6:eb:f0:dc:7e:6a:e4:09:46:ae:
         a0:fb:fa:b1:29:4b:7e:f3:41:c2:28:ce:b8:99:08:59:d2:c9:
         28:b1:da:27:4e:cb:00:3a:30:3a:6c:42:19:1c:95:8d:66:52:
         07:54:32:fd:3f:5b:c5:54:22:61:34:52:b2:5c:20:92:79:c1:
         22:ed:f0:1b:f9:62:91:13:9d:14:2e:cb:0e:5f:51:83:2d:14:
         9e:4d:f6:d8:0b:3c:4c:3f:01:1c:10:62:61:c0:f9:ad:37:1e:
         4d:1c:62:99:44:79:aa:17:ba:c5:3b:e2:c5:cc:02:ee:38:10:
         16:f1:63:3b:11:41:60:76:0e:ca:f5:79:fe:f4:92:85:21:f1:
         33:1f:01:76:72:b6:5f:6c:af:b4:e3:78:51:50:ff:3e:da:7b:
         77:11:33:81:e1:9b:f5:dd:3d:90:f4:c3:5e:d9:b5:f2:50:38:
         42:81:2e:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjHOE7GyOR6TqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
YjMzZWFiYzctN2VkMi00MGUyLTkyOGItNWFlNzgyMWY1YzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopvOhyzlwQerBSpCw/DI91VAUVshCMHREsQh
8fKN7Gu4LHDsEIdh2SK+NnTfJMYGSz2Uewj8bPBZc4/XWH2Tj9Xe6YrpZYntGCjc
7poeZ+o6rBw7YTdI2QoXfjvBHe2pjmwC1WiC+1HDacLRDgDfXEGETeY0VtgtoY1V
0bqwxNOKK+8zsN3yH4rQNucIC6tZOirYZ+B/aVDWwLWcxJqQFYxqB0c0ocVc9ADj
n4dFCFKTVC/G5qHgqJ1vVua5NEKRRRo3doQAHM7HqzbpxCli1wl3zxkFrYEt9zAp
pyaVL3m4Ug6k9wJ4deDhZWgVdz1q/i3VGwh2xAUDpDgCFJFEVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJiiv/oR5eJzWRrMdlHUzE5wOmHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2NmMjYwM2EtMDc1ZC0z
YTI0LTg1MGYtZmYxNmY2Zjg4OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABszp9UcVh9s6J9FYYTV6bs2JWMOvbEIye4yWNEvb9IKmFySFSVPUI0L
0PKzuf6zboVrmwycrpaiyIz/HUL79qli5YBEIWw9+wf+4CP2zTpF1uvw3H5q5AlG
rqD7+rEpS37zQcIozriZCFnSySix2idOywA6MDpsQhkclY1mUgdUMv0/W8VUImE0
UrJcIJJ5wSLt8Bv5YpETnRQuyw5fUYMtFJ5N9tgLPEw/ARwQYmHA+a03Hk0cYplE
eaoXusU74sXMAu44EBbxYzsRQWB2Dsr1ef70koUh8TMfAXZytl9sr7TjeFFQ/z7a
e3cRM4Hhm/XdPZD0w17ZtfJQOEKBLlw=
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:12:06 2025 by rpki-client