Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f1f9064-e3e2-30c9-8df9-fc24bb85cc83.roa
File:                     9f1f9064-e3e2-30c9-8df9-fc24bb85cc83.roa (raw, json)
Hash identifier:          HU7uvOCHzqDRmSjjKkX1ZH8UtpsbeT8r+ebmA3Cd3dQ=
Subject key identifier:   FA:2E:B0:23:71:C9:FA:A2:BF:28:89:0C:6A:BD:47:D1:26:53:D4:43
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD616202FEC0885B5F3E4F0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f1f9064-e3e2-30c9-8df9-fc24bb85cc83.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397226
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:16:20:2f:ec:08:85:b5:f3:e4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=5c5c80a3-5c36-46b5-b2a5-4691ece29ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:7e:3b:f5:42:60:4a:ae:38:08:b8:ab:19:
                    1a:ad:82:9e:72:2c:80:7e:f1:48:36:f0:b8:a3:2e:
                    42:43:6f:b1:7b:64:70:45:ab:49:3a:08:c8:34:e0:
                    58:30:b8:29:7e:f2:5a:64:cb:a2:82:ff:a9:85:7d:
                    aa:cc:0a:63:d3:6a:9d:77:4d:8b:ef:84:16:06:ba:
                    ac:d4:7a:a4:88:e8:83:bc:45:20:b9:c8:39:b4:0e:
                    24:eb:a6:b4:f3:88:ee:e4:06:e9:d3:59:52:32:84:
                    e0:0b:41:04:7f:79:5a:39:1b:b3:08:12:9a:42:bd:
                    3c:83:b8:a5:91:2d:26:a4:55:c5:04:91:a6:1e:dc:
                    5b:11:4a:f1:db:16:7b:d4:4a:3e:65:9f:f1:65:03:
                    d6:38:18:3d:0a:d8:28:50:80:fc:16:2a:ad:b3:9c:
                    52:ac:a2:60:a4:12:83:5c:a0:77:60:19:cf:32:05:
                    84:e3:07:22:08:7c:34:30:a5:9c:17:e0:07:9c:11:
                    67:82:81:3c:f0:43:0c:8b:13:9e:0b:8e:1a:01:73:
                    4b:8a:c1:59:c3:ee:33:6d:0f:84:e4:27:eb:3b:04:
                    f5:ac:56:ed:04:09:c0:8e:fd:82:2e:87:45:1d:95:
                    63:9d:d5:f4:17:1d:7d:1b:2e:21:23:db:ce:e3:3d:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2E:B0:23:71:C9:FA:A2:BF:28:89:0C:6A:BD:47:D1:26:53:D4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f1f9064-e3e2-30c9-8df9-fc24bb85cc83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:76:53:f8:7e:d6:13:6b:98:b0:48:54:d7:1d:e7:ed:ea:f0:
         6b:ca:d3:50:6f:f6:1c:61:4f:3a:86:c7:8b:39:c7:3a:c8:dc:
         ce:42:fc:28:75:4a:75:4e:7c:40:7b:ab:2a:42:b6:21:2b:c0:
         f2:a7:2e:e8:fd:0e:84:fc:df:cf:07:d1:60:38:88:1d:13:ce:
         24:a5:e5:ad:01:f3:41:0a:1f:4a:d0:d8:1e:82:be:67:9c:90:
         e5:53:b0:32:37:9d:c3:7e:92:f2:b6:25:73:bf:75:cd:18:4a:
         bc:b6:d1:ee:d6:3e:c0:c5:2c:4d:9e:00:27:df:fa:95:8e:dc:
         82:c2:39:ff:2c:4a:5b:84:92:5f:d1:13:f5:4f:a6:9f:c7:62:
         24:ad:07:5f:b6:c1:f6:8f:35:3a:ba:9f:62:e6:07:c5:c3:60:
         c0:90:8f:04:fe:62:00:08:fc:c1:e8:cd:08:49:1d:c3:fd:62:
         6b:9f:07:dd:6b:4e:cb:76:77:0d:59:b5:40:9f:58:c9:4c:9b:
         bf:c9:bb:6c:d0:96:c4:8e:96:f3:99:b2:fa:41:2f:53:f9:de:
         a0:eb:de:85:0c:18:d4:a3:da:ef:cc:3d:1e:63:21:ed:c6:de:
         33:4e:dd:20:e7:4a:24:08:e5:1a:a7:46:be:3d:b0:14:3c:61:
         e2:14:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:17 2026 by rpki-client