Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1af6d2ca-963e-3781-87e4-0a97d0bd7085.roa
File:                     1af6d2ca-963e-3781-87e4-0a97d0bd7085.roa (raw, json)
Hash identifier:          xufVNEHZVxfK+0By1wK/ctnFbDRwqc1z2Wv/Y4X0S4M=
Subject key identifier:   1E:A3:CE:42:57:81:59:9C:20:24:DF:A3:94:00:5C:FF:D0:45:84:F8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E9D4A97B64E444A665A32A280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1af6d2ca-963e-3781-87e4-0a97d0bd7085.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     397235
IP address blocks:        156.154.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:97:b6:4e:44:4a:66:5a:32:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=90a9c3d7-8491-4acf-98e7-081ee5408097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:11:41:cb:13:63:b0:b3:42:f2:0c:7a:da:
                    52:f0:7c:b0:c5:5c:60:21:92:d8:cf:a0:5f:69:2e:
                    58:39:d8:5c:99:2b:50:9e:72:53:0a:59:1e:54:0b:
                    c3:a4:87:4e:3d:88:27:f2:ef:84:36:b6:40:86:a2:
                    7a:f1:8e:35:d2:bd:5f:fc:83:ae:9e:31:c8:26:af:
                    c3:0b:a8:d0:93:23:9e:cd:5f:df:09:85:9e:b3:ef:
                    fb:51:42:3c:80:07:ee:37:99:dd:ec:b4:42:fb:b8:
                    86:71:e7:b7:ba:66:11:42:8f:5c:46:0a:ce:b6:df:
                    b1:36:94:98:b6:77:de:b8:35:99:13:09:7b:b3:d8:
                    13:97:e6:e6:91:ad:8b:44:50:c8:22:7a:5f:bc:ca:
                    d5:4f:36:8c:1a:14:09:12:03:31:c6:84:08:1b:c6:
                    21:7a:19:99:c8:04:ec:e0:bd:31:b8:cc:a0:86:74:
                    fc:22:42:6f:82:bf:f9:22:c7:f6:5f:53:4f:aa:a5:
                    1d:fe:76:2b:cc:8e:af:3a:ad:aa:2d:bd:f0:e6:67:
                    2c:b3:10:68:36:b0:55:33:9e:c4:c4:f1:de:b9:9b:
                    cb:d1:6c:19:2a:2d:8a:09:cf:2b:51:a3:e3:36:a8:
                    5a:69:4d:59:ba:fa:db:43:57:26:47:21:de:d4:24:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A3:CE:42:57:81:59:9C:20:24:DF:A3:94:00:5C:FF:D0:45:84:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1af6d2ca-963e-3781-87e4-0a97d0bd7085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:ee:0d:6a:e5:0f:4a:25:1c:bc:20:c6:c3:0c:a4:f7:38:
         8f:9e:c7:ff:0e:dc:f8:08:38:b3:be:42:08:db:dc:46:c4:1d:
         1f:80:b6:24:eb:20:63:78:39:60:f0:d8:0c:fc:c3:ef:0a:a4:
         a2:a5:f3:55:0c:59:ad:9c:3f:51:b1:2d:48:4d:dd:ef:a6:ce:
         68:07:30:3e:de:6b:07:16:4f:ff:a5:bd:f4:73:ea:a5:0e:d5:
         a9:46:ec:2c:fd:8b:a7:66:5d:de:b7:db:1f:40:f8:d9:25:67:
         b5:ec:1b:cd:66:b9:9c:a5:b0:45:0c:67:8b:1e:e6:e0:80:fa:
         71:3c:4a:c2:6d:42:5b:6f:22:6b:93:19:99:0b:6f:d3:0c:6d:
         3f:1c:22:0a:a7:46:a1:ae:a5:c1:41:e9:dd:a5:06:c0:d8:ee:
         a0:c9:ad:ec:13:2f:1f:ee:0c:17:d3:43:d1:62:6f:04:c9:6f:
         16:de:72:22:5a:a7:82:63:4d:9f:27:eb:ed:f5:f8:28:aa:8e:
         f0:67:1c:64:a6:c1:f2:bf:4c:cb:58:74:cf:be:0f:dc:64:d2:
         21:11:d8:ea:b4:02:80:96:79:4f:b2:d6:8d:07:45:c1:50:88:
         70:47:79:6e:b1:6f:db:01:6e:90:9c:5f:52:b3:e8:f5:6c:d5:
         f9:80:79:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSpe2TkRKZloyooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
OTBhOWMzZDctODQ5MS00YWNmLTk4ZTctMDgxZWU1NDA4MDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzwRQcsTY7CzQvIMetpS8HywxVxgIZLYz6Bf
aS5YOdhcmStQnnJTClkeVAvDpIdOPYgn8u+ENrZAhqJ68Y410r1f/IOunjHIJq/D
C6jQkyOezV/fCYWes+/7UUI8gAfuN5nd7LRC+7iGcee3umYRQo9cRgrOtt+xNpSY
tnfeuDWZEwl7s9gTl+bmka2LRFDIInpfvMrVTzaMGhQJEgMxxoQIG8YhehmZyATs
4L0xuMyghnT8IkJvgr/5Isf2X1NPqqUd/nYrzI6vOq2qLb3w5mcssxBoNrBVM57E
xPHeuZvL0WwZKi2KCc8rUaPjNqhaaU1ZuvrbQ1cmRyHe1CQlAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6jzkJXgVmcICTfo5QAXP/QRYT4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWFmNmQyY2EtOTYzZS0z
NzgxLTg3ZTQtMGE5N2QwYmQ3MDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuC7g1q5Q9KJRy8IMbDDKT3OI+ex/8O3PgIOLO+Qgjb3EbEHR+AtiTr
IGN4OWDw2Az8w+8KpKKl81UMWa2cP1GxLUhN3e+mzmgHMD7eawcWT/+lvfRz6qUO
1alG7Cz9i6dmXd632x9A+NklZ7XsG81muZylsEUMZ4se5uCA+nE8SsJtQltvImuT
GZkLb9MMbT8cIgqnRqGupcFB6d2lBsDY7qDJrewTLx/uDBfTQ9FibwTJbxbeciJa
p4JjTZ8n6+31+CiqjvBnHGSmwfK/TMtYdM++D9xk0iER2Oq0AoCWeU+y1o0HRcFQ
iHBHeW6xb9sBbpCcX1Kz6PVs1fmAeW0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:11 2026 by rpki-client