Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7189b036-4d56-301d-8a47-66b63252b690.roa
File:                     7189b036-4d56-301d-8a47-66b63252b690.roa (raw, json)
Hash identifier:          fcyzaY0KtYnAIkWGVgzLFCc2aCXVh8vh50gYpkCJ7G8=
Subject key identifier:   8E:CA:E2:25:A2:12:CC:63:95:71:A5:11:4C:8C:91:3F:B7:45:2A:0D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59F094DD5584C0E5956980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7189b036-4d56-301d-8a47-66b63252b690.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397240
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:f0:94:dd:55:84:c0:e5:95:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=0815ff63-25b9-48fe-840c-e7880bf88a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:b3:9e:bf:ea:dc:6f:53:2a:3c:a9:40:be:
                    58:14:64:21:b1:79:43:c9:ae:f6:bc:0f:49:d8:c7:
                    64:85:1f:d4:11:26:cc:8f:81:59:ec:b7:39:18:ad:
                    30:e0:46:5e:23:ad:a0:e0:0a:a2:d9:3b:2c:2f:08:
                    ab:76:fb:b9:66:4f:44:41:4b:97:81:a2:40:e8:78:
                    d5:93:16:ba:b1:37:d1:f5:ed:1f:ab:ea:ec:d1:41:
                    43:7f:25:d3:1b:68:d1:73:28:23:9f:c5:54:ae:16:
                    b9:38:f8:0a:c3:2d:e7:4f:4f:5f:11:f9:33:ee:9a:
                    97:8e:03:b8:77:c7:53:47:7f:49:d9:dd:77:90:b9:
                    3f:25:96:e3:e5:b7:a1:79:26:c6:fe:f5:d0:29:0c:
                    b4:04:70:5a:8c:5d:74:c3:7a:5c:d7:84:6d:d3:cb:
                    b3:bc:9b:e9:8f:1c:94:e8:52:b5:f6:d3:b0:ef:98:
                    e3:0e:d4:5e:21:82:96:99:e7:f0:a8:e3:97:55:8b:
                    34:19:72:a8:de:d7:1c:5a:30:78:f5:b9:34:53:d7:
                    c4:08:d1:e4:6b:db:ed:d2:49:52:2c:38:67:69:bd:
                    e1:b6:e7:11:79:45:7b:86:cd:3b:d8:8e:25:15:21:
                    fc:a2:44:3a:13:43:c6:6c:7a:72:af:03:e0:38:61:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CA:E2:25:A2:12:CC:63:95:71:A5:11:4C:8C:91:3F:B7:45:2A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7189b036-4d56-301d-8a47-66b63252b690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:40:9e:2e:9c:a3:19:bb:29:8c:6d:4f:21:b7:3b:17:aa:cf:
         0a:68:33:4c:66:b2:b4:8d:96:26:64:7f:bd:08:a7:a6:09:e2:
         e4:d0:37:a3:3d:ac:c8:63:1f:02:f9:20:26:7f:9b:49:98:82:
         bf:34:34:28:25:f2:40:4b:87:36:23:22:3d:87:fe:57:61:96:
         10:0f:dc:e3:c0:6b:db:e9:24:1f:64:fd:3f:a5:4a:fe:2e:42:
         e0:fb:98:19:5d:69:60:53:c6:7f:0c:c9:fb:91:b1:b0:79:42:
         04:64:dd:0a:58:42:43:75:9e:d8:13:f6:0e:8f:65:69:34:5a:
         b4:87:78:58:c6:66:85:a4:75:7d:f1:e8:1a:e2:68:69:31:b3:
         a9:0e:44:02:ac:ff:30:2c:ec:6e:8d:92:d4:71:28:ea:87:2f:
         8e:de:9f:ac:98:85:3f:a7:37:9d:4b:3a:ac:1a:75:1a:34:42:
         b1:50:31:f4:e4:db:20:78:22:53:1d:c9:35:f9:49:ac:9d:80:
         6e:a1:0f:ec:98:0d:c3:0e:bf:81:74:06:05:f5:9d:88:c1:92:
         1a:55:55:57:13:b3:f6:48:d8:de:43:ef:55:87:0f:23:27:ee:
         93:68:b1:e3:a6:c4:03:0a:55:fe:a6:43:95:1d:f0:58:86:db:
         7c:23:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:55:12 2025 by rpki-client