Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfd3a61d-8828-3dd0-92eb-99bbed32fb06.roa
File:                     cfd3a61d-8828-3dd0-92eb-99bbed32fb06.roa (raw, json)
Hash identifier:          9H7mO4H0ku74+pg23jLoJi24LBTPTLLKwiFL8qhI+ZY=
Subject key identifier:   9C:9B:41:AB:79:91:B5:ED:66:3A:60:36:76:BB:DB:E4:9A:DE:DA:6C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A6826289A1AE29F6CBC141380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfd3a61d-8828-3dd0-92eb-99bbed32fb06.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397234
IP address blocks:        156.154.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:28:9a:1a:e2:9f:6c:bc:14:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=134ebd82-b200-4889-ab77-bf4e1a1efb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:44:0e:e4:2c:aa:7f:e0:14:76:5c:73:bc:
                    1e:9d:b2:51:99:e8:6a:33:d9:2d:18:bf:e0:ed:b8:
                    22:4f:31:a7:44:76:1c:5c:05:d0:e6:e4:ea:6f:c0:
                    72:6d:32:a5:0b:a8:2d:be:13:32:b1:ed:d2:5b:7b:
                    0b:d3:3b:a0:e2:57:e1:cc:0b:c6:3b:90:6a:db:c8:
                    c2:66:60:2d:c8:6c:c1:a9:03:6a:d5:17:c8:c8:07:
                    ca:05:a9:47:c8:cc:66:62:a6:f5:65:04:4d:31:96:
                    42:97:7f:61:97:a0:83:85:e9:2d:93:ea:c9:47:72:
                    0f:a3:51:c7:ce:26:85:b3:96:8e:e8:09:0e:f6:23:
                    1c:5b:e1:25:fd:2f:b9:5e:08:39:5c:d1:4a:f0:11:
                    2a:67:74:98:b1:53:e6:bc:de:61:79:56:8a:e8:dc:
                    44:dd:47:97:3b:2c:38:5b:cb:1c:b9:b5:13:9b:d9:
                    e7:3a:98:d8:34:c6:8b:a4:ec:e9:9d:eb:6b:e4:f6:
                    42:cc:fc:75:fc:ad:bf:a8:0d:bc:11:6b:4c:1c:b7:
                    2e:44:99:95:1d:c5:cc:aa:d4:b9:b2:cd:e7:63:de:
                    2c:ca:53:80:f3:f9:7e:5b:20:2a:a4:b8:6f:a0:64:
                    e7:c3:39:a5:89:21:e6:29:d8:3b:4b:8f:08:2a:e1:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9B:41:AB:79:91:B5:ED:66:3A:60:36:76:BB:DB:E4:9A:DE:DA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfd3a61d-8828-3dd0-92eb-99bbed32fb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:56:2c:46:0b:74:70:bb:5d:cb:c5:14:a9:55:cd:92:a7:15:
         db:f9:c7:e9:4c:ee:7e:2d:2d:18:bf:b5:db:98:25:d9:36:c9:
         c4:17:33:51:95:87:80:0e:df:2f:d2:15:84:13:fb:2f:7b:bb:
         2e:e7:eb:c1:0d:ba:7d:95:43:fb:65:f5:f1:c2:cc:52:e6:3f:
         57:b6:64:7f:ea:01:6c:58:93:19:53:58:2d:2a:1f:d7:4c:63:
         5b:0a:f9:a1:aa:cd:3f:24:54:d3:24:c4:f9:71:02:f9:61:b2:
         3f:9b:a7:48:b2:a1:71:d9:5e:61:c9:e6:10:a9:76:ed:2c:6b:
         31:30:39:40:76:2f:d2:25:b7:61:3c:dd:c3:2d:4d:da:59:93:
         5f:a5:9f:be:e0:de:eb:2a:05:40:61:c1:a6:f8:48:af:93:65:
         3c:4e:9d:db:b6:d7:98:52:c0:b5:b9:a4:87:ac:31:a1:c7:52:
         bd:0d:ec:06:b2:5a:11:c3:ec:a4:56:e3:1b:0b:3b:ee:b0:ef:
         d8:df:1f:ef:3d:f1:fe:9a:45:ed:4a:35:35:3a:71:97:de:c2:
         64:2a:3b:04:cb:e3:80:e6:d7:37:24:7b:ca:5a:dc:22:0e:73:
         26:1d:9d:34:c0:74:bc:22:0d:e0:2c:4c:5a:87:6d:d3:b9:b3:
         be:1e:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:53 2025 by rpki-client