Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70204d3b-62eb-3b51-ac77-fb383b2172fa.roa
File:                     70204d3b-62eb-3b51-ac77-fb383b2172fa.roa (raw, json)
Hash identifier:          CbkDf66Oo21l7s6Hpa1/31FWmMMSR9FC9POiu8ZCxoo=
Subject key identifier:   6C:2F:F3:38:CD:49:CD:09:E9:BE:DE:8D:1A:7A:2B:E1:E7:D2:92:31
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F7E8411A280FAF01C85200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70204d3b-62eb-3b51-ac77-fb383b2172fa.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397222
IP address blocks:        156.154.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e8:41:1a:28:0f:af:01:c8:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=2b661051-41be-4e47-9729-3682055fcef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b9:0a:20:86:87:f0:78:01:d0:78:56:f9:93:
                    ad:0d:04:84:43:c9:7e:dd:11:c1:e6:63:4b:fb:5c:
                    ae:da:27:33:85:83:6a:59:34:df:ba:b1:fc:31:00:
                    c7:39:fb:3d:dd:bd:37:4d:6e:d3:fe:d9:4f:81:b3:
                    c3:d7:8c:40:c7:bb:3a:f9:1f:99:12:21:5b:d4:72:
                    4c:53:71:1e:37:f9:dc:ed:1c:1b:7b:b9:23:a6:c6:
                    98:90:ce:54:1a:68:39:3e:8a:43:41:8f:e8:d2:6b:
                    d2:67:78:6c:59:53:4a:c6:83:bb:56:0a:a6:52:22:
                    a1:54:3e:5f:7f:39:74:98:7b:80:40:66:df:e6:6c:
                    b6:21:a7:6b:63:0f:a7:57:9c:7b:76:de:d8:c6:3f:
                    29:91:6a:7d:be:80:55:cd:e7:06:95:a8:58:43:99:
                    2a:1c:83:ca:82:60:d6:83:9c:79:e2:39:e8:cc:79:
                    25:9d:d7:ee:5a:31:7e:33:68:0c:0a:d7:cd:59:ea:
                    73:4b:cd:9f:85:61:b9:c8:67:51:80:97:38:7a:ae:
                    e6:74:f2:4c:2c:78:f7:de:92:c1:c2:c1:c6:5e:27:
                    c8:ad:f7:4b:bc:82:2a:28:61:c8:16:72:aa:d0:5e:
                    e0:7c:db:6e:bb:9d:79:82:d1:b3:d8:0f:e0:be:12:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2F:F3:38:CD:49:CD:09:E9:BE:DE:8D:1A:7A:2B:E1:E7:D2:92:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70204d3b-62eb-3b51-ac77-fb383b2172fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:7e:52:2d:ca:97:72:32:31:14:98:3e:cc:a4:26:32:ae:
         28:bd:26:ea:40:3a:72:35:18:cc:5b:23:b8:39:af:fb:e1:af:
         6b:5f:c3:af:b6:e1:ac:7c:a0:ac:c4:08:a5:7a:62:f1:96:48:
         d9:17:7c:42:a7:bb:a0:3f:60:f5:a6:3a:e2:65:5d:7b:f3:c1:
         11:bc:fa:2d:b4:40:61:32:60:db:a4:4b:0c:fd:28:e0:db:9a:
         b9:ca:a1:b3:7d:ff:2d:97:98:2e:e4:2f:c5:10:95:09:0a:f8:
         a5:79:93:78:6b:89:71:10:ea:9a:30:fa:6a:4e:e4:de:0f:5b:
         af:b4:0f:57:d6:34:37:56:10:a3:13:da:1f:86:b2:a7:48:a3:
         33:8f:22:58:d2:c7:33:ba:35:d8:fd:92:a1:65:87:41:0c:9c:
         e1:f2:f3:c2:4d:78:90:6b:a7:79:2d:c4:52:50:ff:80:7c:28:
         54:28:dd:cc:ac:4b:ec:85:b5:c3:a0:49:59:f2:9a:a7:ee:dc:
         ca:0b:96:7b:db:a3:e3:fe:35:80:d4:7e:db:16:cd:d1:2e:6d:
         bc:a8:59:bf:ed:6d:fa:5f:68:90:24:db:f6:ab:93:d8:f8:ee:
         56:20:d9:9e:ca:0b:4d:a8:ad:fc:c0:d3:ae:22:3b:b3:db:99:
         c9:20:e9:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+hBGigPrwHIUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
MmI2NjEwNTEtNDFiZS00ZTQ3LTk3MjktMzY4MjA1NWZjZWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LkKIIaH8HgB0HhW+ZOtDQSEQ8l+3RHB5mNL
+1yu2iczhYNqWTTfurH8MQDHOfs93b03TW7T/tlPgbPD14xAx7s6+R+ZEiFb1HJM
U3EeN/nc7Rwbe7kjpsaYkM5UGmg5PopDQY/o0mvSZ3hsWVNKxoO7VgqmUiKhVD5f
fzl0mHuAQGbf5my2IadrYw+nV5x7dt7Yxj8pkWp9voBVzecGlahYQ5kqHIPKgmDW
g5x54jnozHklndfuWjF+M2gMCtfNWepzS82fhWG5yGdRgJc4eq7mdPJMLHj33pLB
wsHGXifIrfdLvIIqKGHIFnKq0F7gfNtuu515gtGz2A/gvhJi8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwv8zjNSc0J6b7ejRp6K+Hn0pIxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzAyMDRkM2ItNjJlYi0z
YjUxLWFjNzctZmIzODNiMjE3MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDhflItypdyMjEUmD7MpCYyrii9JupAOnI1GMxbI7g5r/vhr2tfw6+2
4ax8oKzECKV6YvGWSNkXfEKnu6A/YPWmOuJlXXvzwRG8+i20QGEyYNukSwz9KODb
mrnKobN9/y2XmC7kL8UQlQkK+KV5k3hriXEQ6pow+mpO5N4PW6+0D1fWNDdWEKMT
2h+GsqdIozOPIljSxzO6Ndj9kqFlh0EMnOHy88JNeJBrp3ktxFJQ/4B8KFQo3cys
S+yFtcOgSVnymqfu3MoLlnvbo+P+NYDUftsWzdEubbyoWb/tbfpfaJAk2/ark9j4
7lYg2Z7KC02orfzA064iO7Pbmckg6fo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:43:48 2025 by rpki-client