Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/681b6956-d5e7-3a0a-9ccf-b5d1c53e6f64.roa
File:                     681b6956-d5e7-3a0a-9ccf-b5d1c53e6f64.roa (raw, json)
Hash identifier:          zQsEttTRyy9T+5cHmR2ULa1ElF1LeuK9SgODM5DG5kw=
Subject key identifier:   86:B8:A6:3F:A4:12:08:EE:18:94:19:58:6E:63:0A:65:56:B5:4E:95
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849D85FAE9DA4ACC3DD45060B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/681b6956-d5e7-3a0a-9ccf-b5d1c53e6f64.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     397236
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ae:9d:a4:ac:c3:dd:45:06:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=61b0bb56-e56a-486a-89ee-50cb541768df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:e0:1e:d2:b7:f1:68:af:ef:22:92:f9:36:
                    c1:0e:9f:2e:96:52:f4:a1:be:e1:48:2d:80:f4:c8:
                    04:58:98:f7:54:64:b7:ed:76:dd:dd:55:0c:85:53:
                    91:22:5f:80:10:1a:1a:f8:4f:7d:b0:31:ad:f9:2b:
                    12:55:00:8c:95:c3:d0:70:32:93:44:95:be:1a:17:
                    a1:37:63:ff:d7:f0:09:75:58:0e:aa:d0:ab:89:1f:
                    4f:19:dd:8e:26:9d:69:16:84:49:f5:05:4e:ce:86:
                    cd:16:63:9d:f0:49:69:31:42:f2:8c:cc:8e:75:d3:
                    7b:61:37:b3:bc:99:89:c7:49:a9:f5:67:75:c9:88:
                    b8:1c:ae:42:e3:91:9e:35:1d:89:39:7f:9f:97:31:
                    bc:28:5c:b4:0d:88:06:dc:c1:d9:67:40:5e:9f:96:
                    2b:31:ff:07:5f:b0:45:4f:91:a0:8e:b3:e9:94:44:
                    6e:a4:95:0e:b5:8f:0f:67:69:20:7b:b3:0b:f4:9b:
                    a8:17:3a:a3:ad:bb:4d:d7:9a:b0:97:52:86:31:f6:
                    e2:cd:bd:d4:6a:72:cb:4e:07:7b:0a:03:e1:34:d9:
                    b3:b6:a5:f8:47:26:2d:7c:99:2a:95:70:c6:5c:fc:
                    86:18:b6:53:9a:f8:44:e3:1a:9d:22:eb:7d:44:7c:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B8:A6:3F:A4:12:08:EE:18:94:19:58:6E:63:0A:65:56:B5:4E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/681b6956-d5e7-3a0a-9ccf-b5d1c53e6f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:10:69:74:81:ac:2a:0d:e9:b3:c3:77:d2:39:0e:13:89:1f:
         b4:ea:b6:6d:c0:1a:a4:28:7a:1a:65:0e:62:30:47:03:ed:22:
         d6:b0:06:2f:50:0d:8b:b0:bd:2e:f0:0b:d2:73:10:2c:50:c3:
         21:44:71:cd:cc:fd:d8:be:4f:32:c2:de:9c:36:e3:41:1a:8b:
         53:1d:2c:4d:39:e0:9a:6a:cd:a0:d6:10:82:c3:22:a4:ea:8b:
         fe:b2:cf:de:5e:f2:d9:39:00:f3:ff:9b:4f:ea:0d:4c:52:5b:
         fe:ed:1e:74:43:51:91:6a:24:fa:e9:38:44:0c:70:5a:a0:ec:
         08:11:37:73:8b:cb:43:f6:4c:41:a0:68:d4:ed:ed:43:09:7e:
         32:b0:bf:7a:18:07:74:15:55:42:dd:c7:be:77:11:e0:c5:df:
         05:aa:2f:c7:f4:b5:b4:79:7c:6a:d8:67:05:f9:35:9f:e1:f4:
         55:13:72:b7:ea:d2:fa:58:41:65:74:dc:75:1c:da:a6:04:e2:
         dd:3b:9b:06:7a:e1:dd:87:2c:5e:ec:33:5f:ee:a3:aa:17:80:
         a0:c5:8f:c6:c0:b6:7b:37:17:24:30:83:3f:1a:51:fe:00:e2:
         b4:4f:b7:a8:e0:cf:74:6b:78:65:68:d5:c1:5e:36:86:bc:5c:
         b6:68:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:07:54 2025 by rpki-client