Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c82d3e82-c4aa-34c8-8219-fd341850170c.roa
File:                     c82d3e82-c4aa-34c8-8219-fd341850170c.roa (raw, json)
Hash identifier:          Og5/x0AfIH2iz6jc3+HbzptyahIuezclqcoKlJg8Gyo=
Subject key identifier:   15:94:46:E2:1D:A0:7F:FD:07:C0:AA:30:1E:F3:F0:2E:2C:1F:82:7F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF3F5ACAC3AC71213E4300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c82d3e82-c4aa-34c8-8219-fd341850170c.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397224
IP address blocks:        156.154.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:3f:5a:ca:c3:ac:71:21:3e:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=e3d634ee-8f3e-415a-b4ab-14a931821793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:f4:7f:97:42:53:05:11:e6:39:c5:21:66:
                    7f:79:53:fc:d4:c0:b1:2f:f5:75:af:d1:92:be:7f:
                    20:39:3e:54:80:3a:d5:e7:97:1f:3d:46:f1:3c:d3:
                    77:91:b9:be:d1:e1:13:41:37:1f:ae:cf:f9:6b:45:
                    65:a0:0e:05:de:e1:e4:b3:0a:dc:23:ea:bc:5a:43:
                    56:96:90:e7:de:0e:e7:2b:99:2d:ec:22:32:04:61:
                    d1:ea:51:f8:49:96:af:1c:87:c6:f5:72:ce:8d:8f:
                    9f:b2:5d:fb:0d:d0:a2:70:af:f9:fb:7c:1c:dd:8c:
                    c8:8c:24:10:25:65:69:f5:50:20:06:76:b7:cc:d6:
                    7a:aa:7c:3c:39:04:80:08:bf:02:52:ad:91:14:ba:
                    74:a8:75:27:a0:74:cb:44:6c:bc:e0:6a:c3:e3:2c:
                    cb:59:fd:b9:53:2a:60:10:8f:15:57:30:d9:43:4e:
                    43:bb:88:28:c0:21:11:11:00:97:d4:77:af:aa:6c:
                    eb:d2:97:63:87:5b:eb:ef:4a:4e:ea:46:18:c3:2b:
                    93:d0:8a:c1:b6:18:5d:05:5b:6e:8a:16:b3:e4:9f:
                    b4:67:e2:65:26:4c:a1:8e:92:c1:3d:d5:c8:e9:3e:
                    24:50:ff:b6:5f:71:cd:7d:96:1b:1a:40:5d:3c:a0:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:94:46:E2:1D:A0:7F:FD:07:C0:AA:30:1E:F3:F0:2E:2C:1F:82:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c82d3e82-c4aa-34c8-8219-fd341850170c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:db:4a:c3:f2:e9:55:d8:9d:b6:35:48:99:cb:ae:ef:e5:5e:
         53:34:e5:39:7b:9a:23:32:c6:9a:bf:06:1f:5e:06:a5:6a:05:
         58:73:f0:25:69:72:6c:ff:72:d4:c7:fb:89:39:7c:03:0f:d8:
         31:a2:0f:1f:db:06:03:30:cf:f4:46:53:d3:05:7c:12:ad:29:
         9e:27:e1:20:52:62:44:94:40:9b:23:55:34:a2:b3:f0:1d:5f:
         7f:5f:e6:07:e3:2f:d6:af:91:01:5d:f1:e7:4b:ef:d5:c3:c7:
         29:67:c7:b3:e3:c6:86:68:ae:f2:a6:63:7e:78:3d:c6:f9:e9:
         0e:32:99:b9:27:3a:02:7c:23:fc:e8:01:ff:0c:24:52:df:ab:
         1f:ff:50:c1:48:dc:32:0d:5e:fe:e4:0f:56:ff:08:9d:1b:a7:
         45:56:40:98:dc:01:79:42:80:b4:9e:23:5e:34:93:73:1f:50:
         d8:45:86:b7:d6:7c:30:3f:af:28:55:26:6c:c0:7f:29:06:6a:
         c0:b1:9d:7d:96:39:54:2f:d7:33:30:d9:4d:58:23:2b:88:d7:
         56:7f:69:51:c5:88:b3:27:1b:ec:e6:f8:f2:a3:ba:a8:89:1f:
         a7:c4:f9:bf:d0:03:df:11:db:97:4f:46:4c:a9:0f:6f:20:c4:
         c0:e3:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:55:21 2025 by rpki-client