Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa
File:                     c136fbb0-dbe2-3086-9200-4638873b7ba5.roa (raw, json)
Hash identifier:          mM+H/SZnmMmAXzPPtWn8lEq2ozO/Ydd/Sx68+1XSFdc=
Subject key identifier:   81:BE:83:7D:72:7D:85:5C:F0:85:CB:08:58:B0:D4:37:D3:BF:30:D8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C5A02CBFB1319A9874CAE30
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397220
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5a:02:cb:fb:13:19:a9:87:4c:ae:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=6c79d971-bba1-4a04-b3f1-d6f2ab2cb7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:2b:9c:46:18:77:71:d0:9e:b6:1b:63:86:
                    2d:49:2a:84:e3:ce:30:fe:37:dc:1a:8a:43:ac:cb:
                    0f:eb:91:ed:6b:e3:51:bf:5d:82:22:26:77:10:d5:
                    d9:36:4c:22:70:75:bc:ee:63:6f:e4:08:b6:69:26:
                    40:9d:25:e8:a6:1a:33:90:5b:3c:0d:65:09:18:94:
                    c8:08:6c:65:a9:d8:27:59:30:73:13:63:ed:14:fe:
                    dd:93:12:a4:6d:68:51:77:27:84:c1:04:fb:02:1b:
                    41:2c:a2:82:14:25:e7:70:71:da:89:3c:d3:86:10:
                    73:ea:b9:1c:02:2c:79:bd:81:ba:b6:5c:2a:21:7b:
                    7a:7a:5b:a3:11:3f:78:2b:de:f1:35:7b:5b:2b:61:
                    0c:4b:5e:0f:02:d4:22:78:af:89:a2:57:7f:93:8a:
                    14:c4:75:62:36:69:14:5c:f7:d3:cf:35:5d:22:78:
                    73:e7:78:e9:6b:4a:6f:06:20:85:b6:7b:13:fa:40:
                    a7:f6:f2:c6:5b:dd:88:5c:b0:91:e9:c2:a1:23:33:
                    fb:ca:a6:d7:99:71:24:6c:21:e4:e3:68:48:e3:05:
                    03:0a:83:2a:8f:b0:e1:fa:2f:1f:cd:eb:65:22:c4:
                    31:7b:4b:d8:6a:2b:1e:12:b1:0b:a0:a2:96:b8:e9:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BE:83:7D:72:7D:85:5C:F0:85:CB:08:58:B0:D4:37:D3:BF:30:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:1e:8c:65:77:71:43:39:54:06:2e:5d:0b:b1:82:49:27:
         24:da:ff:9f:58:97:9a:d5:30:27:85:dc:af:cc:48:19:15:2c:
         01:84:f8:aa:e8:ff:75:ce:4e:e8:14:05:20:3a:46:3e:ba:2d:
         83:c5:46:06:c5:05:8d:fc:ea:b7:38:75:73:3c:0e:a6:c2:03:
         ab:6a:23:f8:cc:71:a5:44:7f:42:25:b5:5b:68:29:d6:01:69:
         f4:f4:e5:c2:b3:37:00:5a:ac:9e:34:2c:a2:a5:fc:a8:e5:7e:
         e5:b5:66:50:5f:ac:ea:d4:32:8b:53:52:9e:49:1b:e4:ed:34:
         66:36:8a:8f:25:20:24:27:de:ca:8b:10:79:9c:84:83:1e:fc:
         05:fc:85:fb:6b:35:4b:21:1a:d1:fc:6c:d5:70:8c:08:ee:b1:
         1c:9a:f2:19:47:95:a3:e7:d6:d3:3d:47:44:de:9f:02:7f:fa:
         51:9f:33:ba:71:4b:a0:83:d9:4d:ca:af:6f:5d:d7:c2:1d:d0:
         eb:0d:af:64:a0:8c:13:d2:cc:36:08:ae:9d:90:f8:45:73:d4:
         87:bb:1f:44:2a:48:48:d1:01:7a:1e:04:1b:f0:63:ce:fb:75:
         b2:aa:0f:43:cd:2a:68:ba:de:f1:df:d9:fa:a6:cf:6c:0e:78:
         f4:62:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:48:51 2025 by rpki-client