Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ae786da-9c07-33cd-b94a-75c7298b3f9e.roa
File:                     0ae786da-9c07-33cd-b94a-75c7298b3f9e.roa (raw, json)
Hash identifier:          EJFSQwpsdQF0Jdp/a26hpa5Y2GBSvFlxlbyOixFT61c=
Subject key identifier:   CD:CD:9D:D8:3C:8B:7B:C7:96:22:17:D4:57:FE:CE:1B:87:5A:80:C3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A6826225D1413310616512D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ae786da-9c07-33cd-b94a-75c7298b3f9e.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397213
IP address blocks:        156.154.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:22:5d:14:13:31:06:16:51:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=c18a1b88-47b9-41ad-b484-f18e656a8ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:66:64:e0:2e:1e:99:1a:66:8b:1d:d5:3f:
                    21:18:27:8a:1f:ff:64:4f:46:9b:4b:2c:1c:2a:17:
                    a9:61:1a:bb:2f:d6:c1:d6:ec:c0:33:98:13:56:ac:
                    b8:08:5e:bd:95:1a:b0:f4:04:ff:17:60:ad:55:48:
                    71:2c:10:7d:02:2e:ff:ac:ed:85:28:94:ed:64:8c:
                    ec:52:c4:9d:55:a4:69:9b:81:5c:f6:78:50:b7:a4:
                    b9:7a:b0:6d:ef:b2:3e:05:d3:08:7c:f7:b1:41:c3:
                    de:4f:fd:22:73:57:1c:64:84:00:3b:69:99:3c:f2:
                    b3:67:1c:33:6d:d1:56:e6:cb:4d:88:26:09:bd:cf:
                    13:af:29:1f:ac:20:fa:84:18:9a:dd:ca:1f:7a:a2:
                    2c:a0:05:be:ee:95:0c:2e:c6:75:7a:5c:62:6b:5c:
                    6a:a0:f9:73:c3:fb:2e:87:09:00:0d:d9:18:c6:65:
                    90:6d:a0:22:a8:aa:20:94:63:31:3e:98:80:69:1d:
                    56:80:5d:d0:58:2c:3e:cc:c8:df:76:b9:2b:c5:f1:
                    2a:8d:82:35:20:3a:cc:24:f5:33:a8:fa:36:d7:d4:
                    95:ca:ff:69:44:1c:9a:97:fd:7c:ec:9b:f8:4e:40:
                    d1:11:42:e8:bf:29:ca:25:e9:1f:da:b9:03:c8:b6:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CD:9D:D8:3C:8B:7B:C7:96:22:17:D4:57:FE:CE:1B:87:5A:80:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ae786da-9c07-33cd-b94a-75c7298b3f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:f3:28:ad:e0:ed:8a:59:58:5c:d5:43:55:79:b9:b6:3d:
         43:11:e0:18:38:ae:24:ef:b1:7e:3f:52:86:8e:a4:b2:5b:a1:
         a6:00:d9:7f:25:fe:a7:a9:74:4e:d6:c4:7f:39:d9:7c:68:16:
         3c:98:1c:88:7b:5b:b2:53:a2:8f:29:0e:04:f4:0a:37:c2:f8:
         37:37:7b:43:f2:ca:52:ef:c7:48:9f:13:ea:5a:c8:21:da:9e:
         a3:bf:36:b2:71:69:f1:60:6c:7a:92:89:b8:f4:d5:24:5f:9a:
         29:25:28:c0:1d:85:92:33:b5:a0:36:57:26:1b:60:e8:09:25:
         31:b5:e5:11:7d:61:93:58:52:4c:20:f4:e5:7f:22:c7:91:8f:
         85:77:28:6f:7a:6b:4d:c0:81:8a:d5:f0:ac:c6:20:f2:ff:3c:
         a0:bc:ab:ec:33:7b:bb:15:b8:80:04:b9:ad:88:80:22:d7:4e:
         27:6f:5f:68:c3:0e:c4:1a:4d:73:a0:d5:16:d2:c6:1c:d4:c5:
         a3:02:90:e1:62:b1:95:e1:f5:3b:d3:05:68:a3:2b:0a:64:69:
         be:d1:f9:40:54:ba:b9:4f:23:1d:f5:ff:3a:af:80:3e:02:d7:
         3d:42:e7:07:bb:2a:fb:b3:b8:8c:1a:78:60:d7:c7:b4:c3:c8:
         8f:aa:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:41 2025 by rpki-client