Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa
File:                     a921e491-09cc-3788-809c-fb266e3431cc.roa (raw, json)
Hash identifier:          rUhKu4tZPl1RG7UQvErVW6tGm7UlAy/cUVPLhsluES4=
Subject key identifier:   27:72:A9:D8:05:3B:70:90:CE:0B:8F:B1:7F:FC:04:64:7F:63:B2:18
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584F119D090D5D6ABE4E62C1E080
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        206.180.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:09:0d:5d:6a:be:4e:62:c1:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=8e4a8892-cb37-4d78-b8bc-bcc9571ad1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8c:8a:93:df:b6:f8:a4:a0:4c:14:53:eb:9d:
                    45:66:2d:bb:08:5a:ac:e3:ff:d7:c0:1e:fc:25:68:
                    90:c5:78:ef:2d:15:1f:0a:55:d2:ba:27:fe:a2:aa:
                    1c:fc:03:b9:08:49:93:fc:56:9c:e0:ea:e9:79:e0:
                    f8:be:11:87:f1:38:55:3f:c7:4b:81:19:05:22:c2:
                    e7:9f:e6:36:d0:71:d7:cd:21:58:ab:e5:e9:9d:ae:
                    fb:d1:bc:81:79:d8:9d:60:c1:3b:ad:98:bc:8b:13:
                    6a:cc:1d:ef:ad:06:7f:bc:3c:c3:f1:49:d6:d8:1a:
                    ac:28:c9:cf:49:1b:99:0c:f3:b1:1b:79:1a:39:cb:
                    a5:f0:6e:26:f6:11:44:f2:29:99:52:a6:ab:d3:81:
                    53:58:72:29:ad:93:a6:91:df:22:5e:cd:77:3b:82:
                    1f:1c:fe:99:db:1b:9c:82:38:56:bd:07:87:81:fc:
                    f3:2e:dd:c6:2b:f4:4c:5c:07:b7:1d:bb:c1:10:b7:
                    70:3e:07:54:63:b8:20:fc:08:59:2b:4b:54:f4:d2:
                    2a:c9:3b:2d:77:57:15:e8:87:b3:de:84:14:81:da:
                    b2:ea:27:77:d9:35:64:70:15:82:5d:e3:80:1b:e3:
                    42:f7:6a:a4:3b:48:14:d0:ae:91:03:ec:93:23:7d:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:72:A9:D8:05:3B:70:90:CE:0B:8F:B1:7F:FC:04:64:7F:63:B2:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:50:e1:3b:11:9b:f2:eb:11:14:a4:ef:ab:53:02:8f:13:
         a7:8d:2e:3b:07:71:20:12:b2:ec:99:4d:a7:a9:bc:d9:e8:85:
         cb:a9:cf:09:82:ab:91:2b:a9:d6:1e:e5:0d:98:90:41:de:bb:
         7d:45:ed:18:10:d4:86:65:c0:8f:9a:90:ba:08:c6:31:3d:d6:
         ab:e6:17:8a:3c:e0:0f:11:a0:ef:52:72:a3:0f:0c:9e:09:33:
         cb:f1:db:bc:5a:26:61:bc:c4:ed:d8:28:12:d8:74:d2:5e:00:
         ff:68:20:ef:77:2d:05:67:58:74:4e:86:e6:53:3d:ae:36:16:
         9c:cc:6e:2d:a9:a3:d0:2d:57:4a:36:9e:ba:a3:ab:8b:63:d9:
         4a:aa:b4:a8:d4:b2:b6:1a:4d:3f:9f:41:29:6c:35:4b:ed:65:
         b8:26:e5:d2:c1:62:ff:75:ef:cc:2c:71:42:ce:9b:e9:60:6d:
         09:e6:91:2f:f0:ac:9d:87:95:08:75:a0:fc:9a:21:0f:5d:a5:
         ca:22:5f:ef:d9:ac:2f:a2:8b:32:0b:b6:2c:64:84:8b:70:c5:
         86:e5:ca:3d:4e:dd:03:98:60:07:f3:2b:6b:c9:37:ec:3b:1d:
         59:88:44:83:54:99:1d:5e:8a:70:c3:ed:a7:24:88:a6:18:5b:
         66:28:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:05:19 2026 by rpki-client