Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/685a98f8-74c0-36da-aace-55ad0ff6a2f3.roa
File:                     685a98f8-74c0-36da-aace-55ad0ff6a2f3.roa (raw, json)
Hash identifier:          dK5awhyf33Y5uMa9cUUo2WyjgB3++Bn3IY5+oChPj+o=
Subject key identifier:   16:68:68:82:08:A2:5E:A4:BB:9F:AA:2E:33:E8:84:28:8E:06:4B:24
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FF2C9E921AEABE2F66589
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/685a98f8-74c0-36da-aace-55ad0ff6a2f3.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397213
IP address blocks:        156.154.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:f2:c9:e9:21:ae:ab:e2:f6:65:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=88f8c47c-5f07-4a87-9957-50d91ddd2402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:28:5f:63:1b:61:4d:06:67:1b:96:36:e3:
                    24:36:12:66:00:a7:9c:ba:09:dd:f9:1c:80:6c:31:
                    09:d2:04:34:94:4f:76:4b:d4:77:7e:f8:9c:b8:cb:
                    35:3b:b1:3a:ed:11:28:3e:75:6b:1a:dc:6d:3b:38:
                    5f:7c:48:79:37:c9:b7:b2:02:63:81:a7:f4:46:1f:
                    a2:77:4b:14:85:51:bb:8f:2f:3f:08:ed:1b:95:f9:
                    0d:34:64:bb:0a:56:5a:fd:79:5e:19:00:ec:1d:e7:
                    12:a5:68:a4:8e:b6:c5:65:ac:a1:28:e2:a5:22:c3:
                    32:03:01:2a:2e:45:7d:36:c6:39:c8:40:c1:aa:dd:
                    2f:40:8a:ec:de:da:a0:a6:a4:4e:69:f9:cb:3a:72:
                    12:82:87:75:ba:2a:37:2e:15:5e:8d:87:d5:47:5f:
                    0e:7d:4a:c0:f5:44:1d:7e:0f:32:92:61:12:fc:5b:
                    29:2d:88:4b:99:c1:57:ac:1a:e7:d5:1e:8a:8d:6a:
                    c7:df:2e:03:36:20:59:41:e2:dc:4b:f3:52:a5:60:
                    22:a5:0c:e5:ad:0b:56:71:c8:c2:dd:ff:20:44:cb:
                    6e:50:63:0b:f6:bc:47:0c:58:0b:ce:8f:69:9b:c1:
                    6b:3f:72:ca:1f:7e:07:9a:04:70:aa:29:fa:b9:2c:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:68:68:82:08:A2:5E:A4:BB:9F:AA:2E:33:E8:84:28:8E:06:4B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/685a98f8-74c0-36da-aace-55ad0ff6a2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:cb:01:49:1a:b0:a6:ab:0a:bf:6b:51:f0:d9:64:da:53:
         19:3d:26:80:ac:69:e5:fc:e0:70:82:a2:bc:3a:8f:49:43:41:
         ce:08:db:e0:40:70:f1:2f:55:05:4d:43:8a:6c:4c:23:d7:2e:
         02:0d:c3:d5:c4:8e:98:01:08:51:36:d8:e0:81:18:be:1c:ee:
         1a:18:3e:4f:ab:eb:45:44:0b:60:32:68:82:21:bd:65:85:fa:
         ee:51:17:86:f3:84:aa:83:6e:36:60:1f:65:6d:f6:37:95:a5:
         df:ee:cd:f5:b8:d8:e5:74:37:89:1c:b1:87:71:9e:71:08:1f:
         9a:3d:c1:79:84:aa:0a:56:7b:e8:de:1f:0d:7f:14:92:a8:be:
         4e:f9:97:e8:45:33:f3:cb:04:2a:0c:e3:ca:cf:9a:52:a6:b6:
         4f:4a:83:c1:4a:ed:40:69:25:e5:78:9f:b1:07:b6:3b:6b:87:
         06:28:49:78:16:31:27:02:ed:a3:6c:1c:64:9b:ee:36:9a:eb:
         0b:ea:2b:88:97:5e:e8:43:71:62:7d:f2:5e:ee:bb:d5:65:a5:
         8e:66:39:80:c6:fd:d2:d0:15:ab:44:5c:50:76:3d:81:3f:69:
         37:f9:3c:72:36:12:dd:e4:9e:8c:72:0c:31:c7:ee:0d:37:87:
         0a:5d:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:22:39 2025 by rpki-client