Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa
File:                     f2834b82-6315-3762-95c7-85355f4206a7.roa (raw, json)
Hash identifier:          qmWiSls1o6aLR8+W6szGg71BtvS++fNkkSonNlA8a94=
Subject key identifier:   B8:46:3F:22:DC:7B:E6:05:98:F8:D0:78:1F:6D:2C:24:86:69:B3:CF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0CE22B1AB2D76015C8C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397225
IP address blocks:        156.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:ce:22:b1:ab:2d:76:01:5c:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=dcd8630a-3189-4542-8fe0-b7d143f088da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:6b:1e:38:10:f6:cd:ee:66:2e:c7:c7:f5:
                    a1:1c:e2:f8:74:b8:4c:4d:65:a3:dc:ad:a7:0f:1d:
                    47:fa:d8:1f:56:3d:fe:02:66:e8:ed:d4:b3:af:3e:
                    3c:8f:5b:e2:23:32:76:ff:98:5e:6d:6b:54:07:3f:
                    80:56:aa:ac:0f:9a:ca:09:1e:1e:18:2d:0c:74:e9:
                    95:51:ac:b1:30:28:07:3d:88:a6:11:57:98:80:85:
                    2e:73:8d:09:a8:1d:65:7c:6e:e0:f4:8d:18:3f:07:
                    a7:bf:8a:85:e8:67:d8:00:42:5a:d1:cb:91:71:ab:
                    9e:3f:5c:3f:a2:a3:4c:0f:44:5a:21:8c:4c:92:7f:
                    0c:e1:b5:25:e5:4b:d9:98:1d:f6:ef:8d:40:45:8f:
                    09:bb:ef:b3:84:2f:61:be:22:83:f1:33:23:f1:19:
                    bd:8d:07:00:99:52:f8:9a:3f:4c:49:ea:2e:90:d9:
                    4a:11:61:5b:c3:62:a9:74:1d:55:3b:ed:e3:e3:ec:
                    27:98:be:58:1d:49:19:10:90:14:76:b7:92:e7:99:
                    7e:2b:7e:08:80:7a:b8:69:3a:c0:3a:ad:56:53:ae:
                    fc:42:ad:40:5d:2d:46:0a:b7:08:10:5e:ef:db:74:
                    d9:09:c9:80:32:3d:c4:d3:fe:83:5b:b7:3c:62:62:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:46:3F:22:DC:7B:E6:05:98:F8:D0:78:1F:6D:2C:24:86:69:B3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e8:50:a8:48:41:c6:96:55:4b:b8:12:36:03:42:5d:61:0f:
         e1:19:d3:8a:99:9d:0d:67:96:4b:c1:05:ee:13:9a:41:44:d5:
         7b:ab:f3:39:9e:ba:e5:ee:1b:21:87:58:76:8a:a4:19:58:e4:
         e5:b6:80:75:43:e1:36:e0:b1:2b:ec:6c:eb:3f:5b:bd:d0:9a:
         6d:1c:35:a4:43:ce:14:51:52:bb:d4:bb:07:79:c4:20:78:33:
         a5:e7:ed:e3:77:41:7d:90:59:92:66:2f:2e:5c:2f:07:31:85:
         ae:57:2c:bf:fa:9d:d6:73:b0:c2:9b:b0:af:76:73:11:dc:48:
         79:2d:7e:62:4f:6f:fa:dc:90:89:0e:dc:b0:ae:10:d6:4e:08:
         53:c5:f4:d6:57:91:ee:03:b9:59:31:d2:7d:36:30:80:57:54:
         ae:8e:5c:c8:56:76:e4:4c:03:ad:0d:86:50:f0:a6:f8:13:77:
         c1:d8:11:08:b6:ae:fe:29:97:b4:18:99:95:74:55:22:87:ea:
         ea:9d:8d:a3:9d:09:82:69:88:e5:8e:f2:73:77:3f:85:8d:58:
         9a:e4:1d:0c:50:a0:3a:33:cd:17:d5:85:17:d3:43:47:fb:5c:
         62:1f:93:7c:d1:f7:a5:55:7c:b2:fd:e9:10:50:14:18:7b:e9:
         94:ed:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:13:18 2025 by rpki-client