Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa
File:                     afebb486-0f96-3759-8dac-4c467b19c8de.roa (raw, json)
Hash identifier:          dT9SgFj5PxTFio5P30PCJCHVEaxxVlY/GwtxZ1raoVY=
Subject key identifier:   6F:19:D8:69:91:FB:CD:76:FE:AB:4E:C7:03:A3:CA:72:DE:52:B7:B2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B4860857E02A1A7F98B1E3E20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa
Signing time:             Mon 22 Sep 2025 20:40:23 +0000
ROA not before:           Mon 22 Sep 2025 20:40:23 +0000
ROA not after:            Sun 21 Dec 2025 21:40:23 +0000
asID:                     15169
IP address blocks:        172.253.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:60:85:7e:02:a1:a7:f9:8b:1e:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 22 20:40:23 2025 GMT
            Not After : Dec 21 21:40:23 2025 GMT
        Subject: CN=6331feb1-41bb-40aa-8cfd-dac116f9b60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:f8:17:72:0c:e8:1c:5e:67:50:3a:ff:c7:
                    74:96:cd:50:cb:7f:b9:5f:90:e1:e4:49:2a:a8:49:
                    44:19:df:3e:52:a4:8c:84:05:7f:13:48:33:e1:3f:
                    9a:71:aa:8f:98:2c:b7:ef:ad:a8:d5:64:11:05:65:
                    1c:b6:57:eb:07:ab:d3:2a:85:33:17:fb:aa:49:ff:
                    cd:25:dc:9b:4f:89:88:12:59:c6:e7:8a:83:6b:a3:
                    fe:1d:27:0b:1a:29:97:10:85:8b:be:28:bd:a5:0d:
                    44:ef:6f:16:11:39:3b:81:b1:f3:10:b0:b6:ee:a2:
                    ec:da:20:e0:c5:00:d1:7e:96:06:e6:7c:71:1b:1c:
                    ac:c6:2f:ef:2d:b7:ec:3c:84:bf:b4:6b:6b:7b:db:
                    ec:53:24:75:7e:64:23:52:bd:26:f7:28:8e:53:4b:
                    54:11:d0:6f:ee:58:60:55:e1:0d:d2:58:58:23:e4:
                    76:ab:b9:dd:07:c5:36:b5:ac:a3:7b:7f:27:91:b3:
                    03:b5:5d:91:d3:6c:ee:b1:3a:4f:56:2f:ab:de:44:
                    02:fe:7d:96:27:90:b8:f7:1e:5e:23:c7:84:15:cd:
                    4d:1e:b7:31:dd:61:b5:b1:37:b0:b4:92:c5:55:d1:
                    52:08:10:ea:17:1a:85:e5:af:98:5e:53:69:22:ea:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:19:D8:69:91:FB:CD:76:FE:AB:4E:C7:03:A3:CA:72:DE:52:B7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:28:1d:6e:ca:45:a0:a9:57:9e:ec:43:6b:18:22:b6:4c:
         d5:b0:82:13:75:50:da:07:c3:0b:4c:08:3c:3e:57:a4:7f:5c:
         b7:c2:51:b0:53:a0:e2:84:44:00:61:c5:86:d4:18:f1:55:1b:
         93:57:40:31:1e:c1:66:2d:2c:85:ed:82:5c:c8:7e:3e:0d:a6:
         01:94:f8:cd:07:55:de:fa:59:cd:a1:de:a0:7f:4f:2b:6e:2a:
         1b:94:b3:5d:44:99:63:28:83:00:bc:61:7e:00:99:b6:e9:4f:
         91:09:2c:5a:b5:9f:f1:e3:65:26:0c:ba:9f:d0:21:31:4b:a9:
         03:92:c6:35:bb:b9:35:b7:17:97:be:09:0d:6d:d2:14:36:32:
         45:b6:78:d1:e1:d2:21:a3:72:b9:22:5f:62:3e:d4:43:05:aa:
         53:d3:a9:52:a8:5d:88:6d:44:27:c6:9b:c9:d8:fc:9e:ee:92:
         10:91:c6:be:f8:c2:80:f9:e1:b3:5e:46:1a:38:65:78:32:b4:
         b1:88:e1:fd:a5:42:e7:60:8e:d1:f1:30:c8:4f:43:0c:2c:c2:
         2d:b4:f2:79:cd:c5:9a:53:ac:52:b6:9e:0f:81:22:0f:34:e6:
         f1:d5:95:cf:09:e2:b2:dc:1f:47:02:72:50:d1:b9:d0:83:0a:
         06:68:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:39:47 2025 by rpki-client