Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/54aa6046-eac0-375c-8657-566152553beb.roa
File:                     54aa6046-eac0-375c-8657-566152553beb.roa (raw, json)
Hash identifier:          LN7Yfso5h7QMtAzaLou74DMkfk7F8xwqUnjFBc72B14=
Subject key identifier:   51:D5:A3:82:0E:A0:C0:E5:BE:CA:00:87:A2:BB:51:76:D4:14:9E:D0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7FC03F3B3EAEE823E5660
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/54aa6046-eac0-375c-8657-566152553beb.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397242
IP address blocks:        156.154.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:fc:03:f3:b3:ea:ee:82:3e:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=4f7f3903-0151-479a-a251-39b552589924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5b:41:f6:a4:32:b2:a3:ea:91:0b:aa:7b:22:
                    5f:eb:96:ba:b2:49:d2:3e:22:c2:d5:0d:92:03:7c:
                    30:95:05:d0:b0:ff:0e:14:41:1b:41:5c:21:53:51:
                    f7:9d:c6:4c:dc:a8:74:3c:3e:12:f8:2a:4f:b9:6c:
                    d6:af:11:0e:54:58:3f:43:53:02:c1:01:2e:7c:5a:
                    41:41:29:e7:39:34:68:0a:2a:f9:2e:81:19:7e:85:
                    0c:01:9e:93:64:8d:07:ef:a7:05:ec:7f:52:14:6a:
                    64:ad:34:db:08:2b:0c:7b:7a:d1:9f:41:b8:a3:1f:
                    bf:38:86:4e:b8:44:db:f7:7f:03:62:fd:f8:79:95:
                    9a:eb:e0:48:5c:c9:de:b2:d1:9e:3f:1c:ed:2d:38:
                    db:ae:1c:8b:9f:a2:20:f7:ca:7a:ff:48:3c:c6:3a:
                    cd:c1:79:ac:91:cb:06:6b:b2:c0:19:47:be:38:69:
                    e8:94:67:8d:79:7f:d8:bf:ee:49:ff:4f:86:80:85:
                    bd:81:2d:fc:f2:fe:78:a8:da:79:f7:07:34:df:ab:
                    7c:f4:c0:7e:70:e1:71:25:32:4d:4a:f5:ef:a1:f8:
                    9b:80:1b:44:f9:34:6f:0d:f2:69:ea:6b:64:32:80:
                    8d:b5:3e:39:6c:8a:64:b0:54:9a:78:7d:8c:ef:0e:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:A3:82:0E:A0:C0:E5:BE:CA:00:87:A2:BB:51:76:D4:14:9E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/54aa6046-eac0-375c-8657-566152553beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:95:1a:dd:1c:75:dc:ca:6a:f6:7f:7d:4f:51:c5:5d:8c:
         04:07:0b:1b:5b:c7:cb:5f:d2:11:2f:c8:93:ae:0f:03:cd:78:
         4a:6f:e6:a6:d4:25:64:7b:e7:ef:72:62:57:a1:b3:a9:51:85:
         0d:d0:9b:5c:67:d6:15:d2:0c:b0:4b:79:6d:d1:4b:26:f3:27:
         a7:1d:a6:17:58:ed:1f:9b:0e:21:f1:9c:37:09:3b:98:41:40:
         9c:28:69:53:3e:f7:3c:cf:92:83:01:01:94:0f:1f:1e:a4:4f:
         3f:24:f3:62:b9:e5:04:27:2f:86:0c:db:b1:0d:27:2c:6f:b2:
         6f:4b:8a:ae:da:75:36:e5:9b:eb:8c:ee:58:32:e5:20:93:01:
         b7:a8:f6:d4:92:16:54:7f:ae:e4:0f:02:7e:86:05:64:2b:bd:
         db:98:3a:5c:5c:2e:43:e2:fd:27:9d:13:96:f7:37:46:a3:53:
         1c:d2:1c:71:96:31:4a:f7:b0:b0:07:2f:13:01:16:1b:78:c0:
         a0:ce:f7:e9:19:de:8f:70:40:f8:3b:11:45:33:7b:47:55:16:
         d2:e7:0e:5b:de:ac:2a:8c:0f:a0:02:d9:f9:ae:dc:eb:23:77:
         31:06:ba:43:b6:06:ea:af:15:7e:bd:5b:97:ac:94:92:76:66:
         94:48:3e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:19:09 2025 by rpki-client