Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18a77cce-31fb-3437-9ac3-8101e5197117.roa
File:                     18a77cce-31fb-3437-9ac3-8101e5197117.roa (raw, json)
Hash identifier:          6uaz1jhUHzNV9hZbcBzwD0o2bXZZBTm8ru5gyfIRcwI=
Subject key identifier:   F9:4B:76:77:7B:E6:BC:CA:88:F0:6F:67:39:88:F3:26:DD:0A:0E:4B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C3706D07F53EA95C38A0880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18a77cce-31fb-3437-9ac3-8101e5197117.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397220
IP address blocks:        156.154.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:06:d0:7f:53:ea:95:c3:8a:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=47975de0-fb6b-4a05-beda-0262cc4afde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:51:14:b4:02:23:99:13:98:ae:33:86:1f:
                    24:16:40:2e:c5:48:0b:93:40:c2:58:bd:ba:7c:2e:
                    c5:81:72:a5:96:f5:49:22:41:22:57:20:61:e6:18:
                    de:f1:fe:51:f4:08:42:9e:53:19:9e:fd:c1:00:1d:
                    fa:a2:80:1a:d8:7d:a2:93:0b:52:66:46:4f:8f:b0:
                    50:e7:2d:49:09:e4:38:d5:b2:5d:34:db:54:03:4d:
                    3b:d4:d6:dd:d1:e1:57:46:ac:05:16:13:ef:d2:b0:
                    6e:bb:d5:71:1c:95:b2:1d:9c:e5:16:74:65:06:5a:
                    84:ed:37:cf:b8:7b:4e:4d:8b:fb:c0:31:6f:fc:a8:
                    66:de:e8:c1:f3:a8:47:d0:c7:12:42:f1:ad:a8:dd:
                    75:f3:8f:ee:38:12:26:4c:23:57:d6:e6:60:ff:d3:
                    dd:25:90:68:8e:78:a5:c8:81:9d:1c:77:c3:a6:ba:
                    60:5e:82:e3:eb:d3:45:af:19:5d:fc:4d:0c:11:58:
                    d2:7e:20:84:e9:04:9c:73:d7:1c:d7:a3:29:1a:ba:
                    b8:98:30:87:cd:a2:dc:f7:87:de:10:7d:08:34:b5:
                    af:4e:38:d0:ce:29:56:ac:7c:06:10:da:70:c2:c2:
                    26:7e:4d:56:32:1f:0b:85:ff:91:5c:c5:ac:47:ad:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4B:76:77:7B:E6:BC:CA:88:F0:6F:67:39:88:F3:26:DD:0A:0E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18a77cce-31fb-3437-9ac3-8101e5197117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ca:dd:f6:d5:fb:2e:f3:21:de:45:53:2a:df:42:f7:b3:e7:
         16:06:fd:e6:e1:fe:ef:95:8e:4d:f9:74:98:8e:7b:52:7b:50:
         30:fb:aa:f1:c4:71:33:2f:77:ba:af:a3:4b:93:70:d0:c9:89:
         f2:d9:bd:3a:24:d0:ec:41:84:06:78:78:e9:58:73:b9:2c:9e:
         bd:90:59:71:f8:d6:03:1c:cd:4c:d6:ea:d4:aa:ae:10:79:c0:
         fa:c7:74:64:a6:04:3b:be:2a:c9:9c:f8:ba:77:a9:f4:3e:69:
         4c:37:c2:ed:66:11:60:89:bf:c6:96:43:a9:79:13:55:37:93:
         99:f1:97:8f:cd:c7:e3:80:93:88:c7:9b:98:5e:3a:8b:b8:8e:
         35:8d:0c:8d:2f:82:ab:d0:e7:64:02:09:bc:c4:01:5f:67:5d:
         4e:b5:de:ad:d3:6f:ac:db:bf:36:a2:28:f7:9e:7c:ab:b8:e4:
         a2:aa:4f:db:d8:4a:9b:2e:c6:ce:ef:50:70:0b:8a:c5:98:fc:
         47:13:21:cb:e4:76:dc:39:70:9d:6b:11:28:98:b8:88:00:08:
         bb:55:e4:84:d2:f4:c6:70:2b:86:0e:c7:35:12:7d:14:29:02:
         42:09:91:82:a8:c1:18:c5:ce:df:f7:a5:c5:63:12:bb:ce:ea:
         1c:8b:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:51:03 2025 by rpki-client