Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c1fabf4-1869-34e9-aa1c-3df083e8991c.roa
File:                     6c1fabf4-1869-34e9-aa1c-3df083e8991c.roa (raw, json)
Hash identifier:          885UO5S8tJI4W/VY0tQz0OJ0raTi1SoSa4sYE+fO164=
Subject key identifier:   DD:E8:DF:4E:FC:A0:65:B8:CE:9C:12:98:53:5C:C4:E6:51:D4:97:FB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FF3B3C79E97BABA351C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c1fabf4-1869-34e9-aa1c-3df083e8991c.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397237
IP address blocks:        156.154.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:f3:b3:c7:9e:97:ba:ba:35:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=1836fb4f-71aa-4af7-857b-493964a4c601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:eb:b5:19:c7:79:51:71:9e:21:bd:c3:da:
                    46:61:77:87:c8:c6:63:c6:f5:d8:c1:09:6c:be:ef:
                    84:69:23:3d:e0:4a:84:1e:26:d8:4c:4c:33:e3:28:
                    2e:75:fa:18:16:be:3d:1d:0b:04:53:a7:4a:f5:32:
                    0d:e6:2a:b8:52:a9:fa:b8:0a:47:9f:2e:5a:19:a3:
                    48:62:41:de:1c:e6:fa:fa:ef:60:d8:4c:9c:29:28:
                    af:6f:5a:22:08:0f:10:7c:bc:48:ea:c6:71:00:84:
                    9a:cf:5d:ef:93:e1:ca:f2:5e:a4:0d:90:69:a6:a6:
                    d5:e6:c1:cc:2c:55:a8:39:69:20:a2:1a:72:e4:da:
                    60:21:16:e7:5e:8a:81:22:a2:7e:f1:ac:f8:d5:de:
                    6c:bd:54:2e:c4:26:ea:36:d3:80:81:e2:75:c6:05:
                    8c:b1:d9:44:ff:fb:a4:89:a2:6c:92:d2:2f:bd:8f:
                    ca:47:48:14:17:c8:35:35:f0:60:eb:35:5b:33:d9:
                    00:77:c2:3c:44:bb:ba:34:eb:74:00:bf:e2:f3:c0:
                    e2:61:2e:02:5a:5c:6f:31:26:20:43:8e:07:90:5d:
                    f5:b7:94:23:74:a8:29:ee:50:e9:90:9c:b2:5a:fe:
                    ca:5a:ed:ab:6f:2d:7d:1a:88:39:94:1c:06:92:c1:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E8:DF:4E:FC:A0:65:B8:CE:9C:12:98:53:5C:C4:E6:51:D4:97:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6c1fabf4-1869-34e9-aa1c-3df083e8991c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:df:5a:e6:1e:ad:b7:4d:3d:bc:99:89:f2:d3:db:0f:d2:51:
         8d:e6:4d:63:c9:8e:fd:c8:99:c7:8c:1c:06:73:68:a1:ec:8e:
         55:6d:7f:a7:b9:2d:88:96:e0:2b:3d:78:7a:c7:44:4a:bd:9f:
         4b:86:58:fe:c4:ef:1c:84:b6:6b:99:e5:2f:80:b8:ee:ab:d0:
         01:2d:39:21:03:f2:00:e3:15:e8:09:a1:e2:a5:7d:35:db:cd:
         a3:42:6b:96:10:db:f8:29:90:42:5d:72:17:10:40:f1:a7:74:
         6e:6c:60:0d:08:0f:16:81:59:c5:14:92:e3:91:f0:bb:ea:48:
         9f:bf:a7:37:63:8a:5f:e6:e5:fc:df:81:37:77:12:5f:56:a5:
         e6:ab:c6:e6:48:87:6d:73:9e:33:c1:ad:01:5f:1a:cb:94:0b:
         8f:d6:18:86:f6:cc:53:15:95:60:60:05:71:1b:3e:c2:a8:71:
         80:f8:ee:a1:f1:56:7b:be:d5:4f:40:a9:2e:d7:c8:ee:65:6b:
         1c:c5:5e:d1:06:a3:85:a3:76:ed:c1:8d:5d:ea:a9:8a:ec:1a:
         eb:97:95:74:8f:ea:e4:17:4f:b4:97:41:0b:9c:22:01:d4:40:
         f4:44:61:2d:33:f6:fa:be:b2:82:54:3c:20:ef:5e:94:00:ce:
         c0:34:dc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:48 2026 by rpki-client