Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc374b3-e0bd-3554-9c0e-8066532d105d.roa
File:                     2fc374b3-e0bd-3554-9c0e-8066532d105d.roa (raw, json)
Hash identifier:          h6TYg/qwhhcRHnMWq1KvkJrMdj9cCwaCmkDt69mZL1w=
Subject key identifier:   05:81:15:D5:E4:EA:E5:EC:86:74:EB:D0:EF:C9:71:1A:96:DE:54:FA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0D6EA3D2D64406A878200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc374b3-e0bd-3554-9c0e-8066532d105d.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397240
IP address blocks:        156.154.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:d6:ea:3d:2d:64:40:6a:87:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=5040227a-443d-48c5-b1e5-4f5a9bf7c997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:64:ae:d0:12:77:1c:66:94:ed:56:e2:6d:
                    bc:a4:5f:d2:0f:42:74:11:46:b2:3e:7c:73:44:9b:
                    5b:75:53:2f:4d:2d:2f:66:73:8f:b4:7d:7f:66:f6:
                    ed:a8:5e:53:dd:f7:27:eb:92:c6:74:c7:a7:94:46:
                    22:9c:9b:eb:9b:1b:25:f7:c8:be:11:a9:d3:7e:93:
                    4d:3b:42:62:a8:70:8f:73:81:b4:da:29:d2:8b:b4:
                    90:db:15:f4:84:d0:0e:51:33:40:9f:d8:65:48:a8:
                    be:ff:71:b0:91:0d:5a:79:35:4c:2e:81:79:70:39:
                    12:88:52:d6:f7:b1:71:63:2f:a7:fa:7a:fb:22:c3:
                    2e:44:c9:ca:d1:ef:62:76:f8:bb:08:9e:b0:8d:3e:
                    68:70:2c:77:70:09:a7:33:bf:1c:c3:7f:21:a2:58:
                    5f:8d:c1:f0:b2:29:42:63:47:5c:b5:99:26:c3:5b:
                    5e:b7:fb:08:f6:b2:48:2b:6c:93:f3:da:98:c8:c8:
                    ea:e1:eb:cf:e3:a3:03:fc:4a:7a:2e:5e:54:ce:d7:
                    54:1e:31:60:19:81:d4:11:58:ea:36:0d:15:f7:85:
                    79:0e:4c:28:49:bb:f8:bc:74:35:21:bc:ed:b9:4a:
                    79:f4:29:70:61:9b:21:36:df:22:73:99:a5:d8:d2:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:15:D5:E4:EA:E5:EC:86:74:EB:D0:EF:C9:71:1A:96:DE:54:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc374b3-e0bd-3554-9c0e-8066532d105d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:f9:60:8e:19:94:7e:18:e8:dd:09:8e:d6:7f:08:e8:4e:
         d9:be:7f:f2:f1:2d:f0:f2:9b:89:90:6b:90:33:53:94:d1:22:
         9c:a4:56:2c:a0:8e:07:30:a5:1b:97:aa:68:50:b5:de:9f:09:
         5d:f0:6b:1a:a7:3e:38:16:26:38:3e:ab:09:be:1d:b6:e7:10:
         f4:84:f2:89:48:27:18:1b:1a:e6:22:61:61:28:1a:c7:db:a6:
         b8:09:10:87:cb:ed:03:2b:e5:e0:b9:bb:4a:b2:46:f5:67:1f:
         21:73:86:62:4c:a3:b8:a5:d5:c5:cc:df:e4:e7:ec:9d:55:c2:
         aa:5f:03:9b:f3:6a:96:3f:93:10:f6:9e:41:a6:cd:09:b9:7a:
         48:e3:7f:e0:d6:0b:06:31:f9:85:a0:0d:b4:cf:47:22:8f:67:
         0f:42:f4:cf:17:bc:45:23:f7:bb:58:bf:6f:ba:ae:55:69:f2:
         00:37:a9:43:a6:15:2e:0d:e0:53:1c:56:ea:15:25:93:68:42:
         ad:ff:6f:1a:44:22:12:29:c9:ab:e1:c2:2f:ab:c2:bc:9c:ae:
         10:12:76:8a:b6:73:ec:65:a0:72:90:79:d2:9b:8e:4a:a0:04:
         cd:99:15:f6:ba:6d:12:61:fc:e1:4e:d1:4f:a5:51:c1:20:b7:
         68:07:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:35 2025 by rpki-client