Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3889f598-5421-3478-87d2-e0ee742abe2b.roa
File:                     3889f598-5421-3478-87d2-e0ee742abe2b.roa (raw, json)
Hash identifier:          +iN6HISNTSLu8pwawdbU2TqFaI/xrmw4GvmIM+wFgF8=
Subject key identifier:   DF:7D:5E:B8:D4:93:02:DB:F3:A7:CF:45:59:B2:2D:C3:1B:C9:74:BA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FF001415AB80E6F64EBA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3889f598-5421-3478-87d2-e0ee742abe2b.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397225
IP address blocks:        156.154.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:f0:01:41:5a:b8:0e:6f:64:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=af57ee11-b4ac-4a7e-a929-eaf054b8f8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:25:9a:d1:24:56:90:28:af:84:e1:7f:b3:
                    8a:34:76:0e:3e:fd:a8:0d:df:ad:b8:0c:cd:62:7b:
                    8b:55:24:3a:02:cd:af:4e:e6:37:5a:97:fb:22:cb:
                    a5:60:8e:d4:e5:e2:51:7c:7c:76:6c:ba:96:f1:8a:
                    5b:54:69:56:15:ef:3a:78:7d:53:34:30:52:0b:12:
                    c6:53:f5:18:08:90:12:6f:77:cf:39:36:d2:be:95:
                    d1:7e:a0:4f:e0:63:5d:9d:b3:04:d3:9f:2c:33:74:
                    75:df:8f:30:c0:e3:8a:5b:f3:b0:b2:7f:d4:b0:d0:
                    44:68:4c:f9:be:93:b0:b9:82:ce:2f:ec:b5:21:f3:
                    8d:8e:b6:ce:ef:38:9a:97:2c:05:70:80:52:9f:3a:
                    a9:13:ca:79:5f:f5:cd:95:00:42:a2:81:2f:8d:3e:
                    9a:fa:ff:b5:74:0d:db:d1:b6:73:08:7a:a0:58:40:
                    d3:a2:06:30:72:79:6a:fe:61:eb:77:cc:77:59:30:
                    46:3f:c7:7d:20:0a:c5:f8:97:14:5e:6f:6f:43:17:
                    d3:4d:17:e1:6a:ae:9f:76:c0:26:48:53:91:c1:82:
                    02:9b:b8:3a:8b:37:6c:bd:fb:20:75:8a:20:99:de:
                    30:ca:f6:5c:a3:9f:de:77:ca:07:80:83:ed:c7:3f:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7D:5E:B8:D4:93:02:DB:F3:A7:CF:45:59:B2:2D:C3:1B:C9:74:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3889f598-5421-3478-87d2-e0ee742abe2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7f:12:c0:a6:a5:af:34:5b:37:42:c4:12:a2:de:ef:7b:f3:
         a6:8b:72:33:49:3b:a9:76:bf:35:7c:be:60:1d:39:ea:a8:06:
         d1:b0:36:b4:1d:38:7e:c5:2e:91:c6:f0:7f:2e:51:2e:58:8f:
         f0:17:0e:2f:2d:07:8e:39:a8:c6:0e:cb:59:ef:a5:65:0f:97:
         7b:d6:cc:3b:53:95:2d:fc:11:9f:25:08:9b:ed:da:88:e9:5d:
         e9:8a:67:f3:60:43:36:94:ec:e9:38:cc:39:50:ea:b4:49:26:
         40:3b:21:b7:43:3c:8b:ff:99:93:64:bc:51:07:0c:05:1e:09:
         03:09:16:74:d1:bf:be:dd:7d:ca:a0:43:7d:a3:fa:20:59:4e:
         d2:d6:96:fd:45:a6:9a:37:da:26:22:3d:11:3d:29:bf:ef:e1:
         34:47:14:06:fc:66:93:0b:98:90:43:c5:0e:4a:80:9c:12:51:
         6e:d1:a7:1a:5f:4c:cf:ca:02:90:40:74:53:21:d3:af:97:d0:
         00:da:11:23:25:9e:12:51:5e:9b:ce:dc:ad:a2:86:a4:18:40:
         f1:b3:fe:94:89:83:76:67:db:31:cf:5e:cf:37:f6:92:e7:08:
         5a:18:10:fd:f0:86:6c:83:5a:15:b0:e2:74:4e:1c:2b:d5:40:
         db:05:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:22:42 2026 by rpki-client