Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21197f4f-7368-34a6-828b-1465cec16a35.roa
File:                     21197f4f-7368-34a6-828b-1465cec16a35.roa (raw, json)
Hash identifier:          t4UwLTv3WI0QLc91TjLD+cdhj5o6RI2durzYVBQbSa0=
Subject key identifier:   BE:01:21:CB:35:B0:FB:7E:CA:E0:2A:A7:FC:37:25:4A:C7:C8:91:2C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09127640BF0B12B8ED66BD40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21197f4f-7368-34a6-828b-1465cec16a35.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397234
IP address blocks:        156.154.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:76:40:bf:0b:12:b8:ed:66:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=b2ce6b11-7f22-4cb6-96c8-6eb0b6559c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:fa:18:0d:01:9f:a5:82:4a:3a:84:5c:cb:
                    07:31:af:35:f8:9f:9e:06:15:79:76:e5:41:8e:49:
                    9c:76:09:a1:af:c1:59:4f:dd:9b:e9:02:42:35:22:
                    b2:11:5c:c5:47:1c:26:07:98:5c:a6:30:ca:0c:54:
                    8e:df:f3:ff:d9:a7:aa:d6:09:f0:8c:8b:f6:8c:70:
                    51:6a:f2:1e:b9:46:92:e9:a9:98:90:58:60:0b:f3:
                    7a:66:5c:42:a1:b0:98:b9:b2:a8:fc:9c:0c:66:7f:
                    97:90:d4:05:08:22:d3:07:6f:b2:81:05:5b:f5:4f:
                    7e:b7:8f:42:33:0d:0e:c7:3a:be:8b:19:70:ba:d4:
                    58:d3:64:8a:25:79:12:08:5b:41:96:d5:64:b4:48:
                    bd:db:2f:4a:bb:fd:5b:8e:06:a3:62:a1:8d:48:99:
                    d1:66:47:ac:e5:70:2c:bd:ee:61:f3:a5:72:42:07:
                    b5:6f:33:9f:61:87:b0:f2:1b:1b:4a:e2:4f:81:1d:
                    0b:75:38:16:b2:37:e1:3f:f7:e3:e1:0c:8c:d6:89:
                    a6:12:4b:bf:9a:a0:61:a5:de:e8:08:f4:74:2e:6a:
                    fa:3c:89:32:de:76:8d:7e:e5:11:8d:7b:2b:75:72:
                    5b:66:f2:03:ef:12:69:ed:36:0f:6a:75:8a:d3:27:
                    45:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:01:21:CB:35:B0:FB:7E:CA:E0:2A:A7:FC:37:25:4A:C7:C8:91:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21197f4f-7368-34a6-828b-1465cec16a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:20:89:e2:63:46:10:5d:fd:d8:6f:be:e7:7d:c5:7c:be:
         c7:27:7d:57:5e:81:26:89:f0:4b:c7:ed:e9:c6:0d:ac:44:1f:
         22:bf:8b:51:e2:75:4f:4d:9b:52:92:15:fd:ee:86:8f:0c:c6:
         1a:ef:f5:ee:6a:cb:8c:23:52:9e:02:e5:48:a6:8a:cc:f6:8d:
         34:69:d2:21:cc:b6:68:87:f3:79:51:b3:ee:97:cf:3f:fb:5c:
         79:65:ba:7c:7f:1c:73:a8:97:bd:18:5f:a6:de:01:a0:e0:ae:
         db:b9:bb:d7:fa:89:db:17:96:31:b9:4c:f8:cd:88:84:3f:d5:
         50:68:db:10:e2:fd:59:b3:f1:f6:b9:c6:f2:bb:08:b7:63:be:
         20:80:11:b6:1b:01:2c:18:b3:38:be:ff:8d:4a:46:72:1f:41:
         bf:77:49:c4:09:7e:37:dd:e9:eb:b2:ab:f3:32:f8:c3:de:62:
         7d:be:d2:ae:f2:6d:98:12:1d:68:66:a7:5a:7a:1c:93:35:ba:
         02:a6:c1:1a:c2:c8:f8:54:bc:a0:d0:cf:7f:93:74:74:43:b8:
         aa:d8:20:e0:80:4c:7d:93:e1:7b:8d:c1:ce:33:ad:d4:ce:ed:
         b5:bc:36:e1:56:70:bc:14:8c:97:44:5e:07:f6:16:2d:82:8d:
         78:ab:28:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:12 2026 by rpki-client