Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4759a21-b74b-381c-afc1-4e726f6afb64.roa
File:                     a4759a21-b74b-381c-afc1-4e726f6afb64.roa (raw, json)
Hash identifier:          2WjgHU/Fc5QSU5X8VLVmulHvQU6uLK6EJPnZ0NjW6V8=
Subject key identifier:   96:FC:DB:36:9C:60:48:F4:CB:0F:E3:49:A4:9A:07:58:98:A3:4B:D4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FEFD32F0232F0D2B6FEA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4759a21-b74b-381c-afc1-4e726f6afb64.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397221
IP address blocks:        156.154.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ef:d3:2f:02:32:f0:d2:b6:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=4edbfb6f-fedd-48e6-a9ae-05cf14a709a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:00:9c:61:3c:56:67:4e:1f:86:0f:fe:ca:
                    c7:6e:07:9b:df:55:32:42:cb:98:9c:c6:01:c5:bc:
                    84:e9:51:7d:22:c5:c8:cf:68:d0:17:66:e6:22:0b:
                    00:1e:54:bd:45:30:9e:fb:e5:27:75:ca:52:fc:c6:
                    a4:ab:47:94:51:6e:5a:db:77:a7:01:8f:79:81:be:
                    99:11:fd:df:8a:97:09:80:f9:4c:24:7d:9a:60:8a:
                    dd:e3:d5:b3:8a:fb:9e:7c:fc:45:fb:00:4e:6e:e8:
                    5b:18:df:3e:00:0b:75:26:86:02:67:d9:40:f7:ce:
                    7b:f8:df:21:09:43:7e:85:85:c3:25:68:fc:12:eb:
                    83:dc:89:3e:af:01:57:07:04:5c:aa:7f:20:e9:ae:
                    bc:8b:69:74:a5:3b:2b:bb:36:c4:a9:64:00:8d:01:
                    c8:43:81:07:13:c3:5b:f0:d5:52:71:c9:e6:64:02:
                    1d:84:cf:a8:04:b6:1f:e2:50:f6:51:e3:5b:79:20:
                    92:d8:db:e7:50:be:15:56:9a:67:de:03:4e:2f:db:
                    64:9f:82:2a:07:a5:df:ab:56:dd:ea:f7:a9:0c:00:
                    df:6a:02:73:8d:75:47:4c:8a:84:fc:ec:cc:3c:f2:
                    c8:aa:bd:2e:1b:e9:e9:e9:85:17:3b:b3:14:d7:8d:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FC:DB:36:9C:60:48:F4:CB:0F:E3:49:A4:9A:07:58:98:A3:4B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4759a21-b74b-381c-afc1-4e726f6afb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:23:b1:9f:bf:0f:78:61:e0:9d:fd:2f:56:b8:68:dc:1b:42:
         fd:23:cf:9c:89:28:42:3c:36:fc:49:9d:94:81:d8:db:9e:fb:
         9f:09:4d:46:93:13:76:83:53:c6:e5:09:99:88:98:a3:f9:da:
         fb:09:4f:2a:96:45:83:97:af:80:ee:1d:cc:24:c2:66:55:1f:
         cb:6f:56:0c:6b:2d:cd:70:cc:6d:91:8e:62:0b:32:93:da:34:
         8f:b6:86:c4:c4:82:c8:28:1f:61:e3:45:3e:7e:ca:77:da:fb:
         66:1c:fb:9a:62:f8:0b:cd:cf:d1:03:c8:99:c2:7b:34:e3:fc:
         76:c0:91:88:3a:98:2d:06:eb:3a:21:d8:00:73:e6:1b:0e:c1:
         4b:de:f9:88:74:dc:3c:4e:11:12:01:75:09:ff:2c:0c:ac:80:
         f7:2e:04:39:f4:86:a6:4e:87:e5:a7:29:4a:53:58:69:44:9b:
         cc:0a:99:df:e8:d2:8c:54:1b:7e:2b:47:44:59:f3:76:01:f5:
         f6:8a:64:46:dd:c5:a7:f9:ee:1f:d2:73:73:12:d4:f9:ac:33:
         da:b6:f1:04:c3:97:c0:8e:95:fe:1f:6d:a0:4c:72:7e:21:f8:
         36:de:54:ad:fc:da:0a:9a:39:5c:1c:5a:12:a0:13:7b:37:32:
         9d:ea:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:03 2026 by rpki-client