Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37618147-34b2-3335-b02a-57bb649cc6d9.roa
File:                     37618147-34b2-3335-b02a-57bb649cc6d9.roa (raw, json)
Hash identifier:          lyIxwKCZZorG5H87I19ywNalbImct4U6hF8z8Vr1eEY=
Subject key identifier:   ED:90:17:7B:72:13:68:55:96:11:68:DF:FF:81:B1:23:09:75:85:FD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68263425974A391DE58F34B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37618147-34b2-3335-b02a-57bb649cc6d9.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397217
IP address blocks:        156.154.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:34:25:97:4a:39:1d:e5:8f:34:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=bd60a78e-f0e1-4045-89b9-046e2a9f05f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:06:47:3b:28:04:eb:01:17:dc:4b:33:f2:
                    9f:01:e2:d2:16:be:1d:ed:11:5e:96:42:82:1a:ff:
                    c2:c7:b6:41:8a:af:ac:2b:89:dd:2d:21:32:75:f4:
                    9c:e3:9a:cd:4c:ae:3c:a5:39:0f:9f:25:dc:ca:f5:
                    e7:88:0e:eb:3c:1c:08:0c:23:8f:de:24:45:02:96:
                    d1:17:6f:1a:27:6d:12:c4:e1:e0:85:ba:9b:94:78:
                    fc:e3:3e:1d:00:d7:d0:27:07:f2:0d:cb:09:de:9e:
                    43:6f:dc:c5:f3:2f:f5:e8:a0:12:5f:25:30:fb:0c:
                    63:c2:1b:ce:3c:ca:5a:f7:1c:c8:db:61:73:ea:67:
                    7e:42:a5:f1:a0:75:68:8f:9a:96:a7:1f:1b:33:f9:
                    ab:de:9d:6f:4b:da:30:01:1e:5a:fd:f1:67:b2:86:
                    10:81:db:6d:b5:af:0e:8e:a8:d2:9d:ee:81:c9:63:
                    02:84:c1:01:7c:91:78:87:ba:67:16:2d:4c:1e:c3:
                    17:24:57:32:ce:d5:af:93:f4:9c:ea:44:20:61:c4:
                    70:0a:ae:c9:92:39:41:7a:7c:ce:50:8c:d3:12:bb:
                    fd:73:d5:e6:cf:ed:46:fc:57:fc:1a:f9:4c:36:fd:
                    0f:32:b9:72:ae:95:16:89:86:26:43:4a:c3:10:f9:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:90:17:7B:72:13:68:55:96:11:68:DF:FF:81:B1:23:09:75:85:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/37618147-34b2-3335-b02a-57bb649cc6d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0f:09:d3:f7:cd:82:ff:1a:6c:35:37:fc:c9:8a:aa:a2:56:
         e7:c7:73:be:b0:e9:ad:b7:79:3e:fb:f5:96:39:65:1d:88:89:
         a3:f9:1d:9c:02:87:3f:f4:7b:e9:32:0e:d3:f9:85:a2:70:de:
         22:e8:9a:14:2b:36:7e:db:76:2f:2a:6b:fc:d8:37:74:1a:9f:
         a3:34:be:e2:31:33:0d:8f:41:97:50:ba:1c:01:47:87:3e:f6:
         11:2a:41:a8:93:c9:41:ca:86:5f:06:5d:fe:18:4c:41:97:ac:
         d3:b5:65:8f:9c:37:c9:18:9e:59:23:9c:fe:18:0b:50:c6:d9:
         c1:8e:26:98:98:b0:ba:83:7b:fb:d1:29:0f:dc:72:5b:8b:f1:
         1b:b5:0d:11:03:b4:8e:9d:f7:16:3f:34:83:f9:b4:7f:4c:fa:
         17:77:56:1b:b5:f2:14:b2:a2:b9:fe:d4:70:0b:60:e8:ee:d1:
         4d:c4:1a:6f:fa:8c:b9:8b:a1:f4:4b:e9:6a:10:64:74:04:37:
         ca:c3:52:bf:74:60:fc:b5:c2:42:fc:e3:f7:99:fd:ae:75:f5:
         bd:82:6f:01:11:c3:4a:37:fa:2d:5d:4f:47:d0:50:aa:9e:55:
         74:91:14:6e:e4:64:4f:b4:35:fc:fe:d4:33:d6:84:45:82:91:
         b5:16:a2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:50 2025 by rpki-client