Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0098994-e091-3b88-b400-059fea6aa184.roa
File:                     b0098994-e091-3b88-b400-059fea6aa184.roa (raw, json)
Hash identifier:          rzec4WfcihigV7MEE25kPPMmepC8s963iDgkLopamAQ=
Subject key identifier:   02:54:82:3F:B0:6C:C1:EC:43:B1:74:D8:FC:C2:CF:A0:56:CE:F3:1B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CDC67AE9847B54D5FB62EA4C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0098994-e091-3b88-b400-059fea6aa184.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     397215
IP address blocks:        156.154.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:ae:98:47:b5:4d:5f:b6:2e:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=724489b4-7e27-4b6b-9380-26dcb23e513d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:31:a8:6d:b1:76:fd:ed:16:ed:22:9a:50:6f:
                    9b:9f:a3:01:57:8b:41:f8:00:26:55:c2:72:8f:e8:
                    64:fa:f8:60:ed:fa:46:06:8f:5f:79:c1:da:3e:39:
                    8d:9d:fd:ab:33:3a:85:7d:63:5d:b6:66:23:4d:38:
                    83:b6:ed:2c:53:1e:4e:d9:e8:12:9c:bb:60:d7:35:
                    87:99:65:28:cb:6f:97:5b:cd:52:c7:6f:e3:4d:47:
                    dd:b8:1e:4a:94:42:15:30:cc:3d:21:8d:bb:4f:82:
                    10:ee:eb:99:f1:34:c5:ad:1c:75:80:89:92:da:99:
                    d9:80:35:3c:84:a1:2c:7f:39:55:fb:24:ae:f9:2b:
                    4c:c4:76:b1:28:83:3f:31:5f:c3:cd:36:f5:14:8d:
                    31:d2:97:5b:a9:ee:ea:b8:2b:88:bf:46:7c:45:38:
                    93:ae:0a:df:6f:3b:e4:4b:49:32:aa:fb:a0:aa:8a:
                    a1:25:29:0c:62:82:ff:0a:73:1b:0d:9e:99:17:21:
                    e3:ae:16:c4:e8:3e:0a:4d:bc:e9:dc:29:4a:76:48:
                    37:6a:14:1a:88:2b:d8:28:b1:e6:a7:08:cb:47:ee:
                    24:6e:7c:8e:b2:24:aa:54:d3:a9:20:63:be:72:5b:
                    d3:fa:0f:65:8a:00:c9:bf:02:52:0c:e8:f6:77:2a:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:54:82:3F:B0:6C:C1:EC:43:B1:74:D8:FC:C2:CF:A0:56:CE:F3:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0098994-e091-3b88-b400-059fea6aa184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:60:50:d0:f3:24:13:62:0f:6b:67:7d:ec:76:b7:f3:f1:84:
         16:ce:74:83:3f:fb:80:aa:bd:35:29:bb:02:94:23:4f:3d:ac:
         6c:9d:2b:94:e9:ff:af:96:1e:11:7a:79:b7:42:2f:90:76:1d:
         a5:0a:0b:13:53:69:29:44:f9:b8:ce:56:dd:37:b1:3a:1b:f4:
         aa:bf:81:4b:30:8e:29:54:38:a7:6a:e4:c2:3b:db:93:aa:1b:
         eb:c4:8d:d5:0f:02:3f:1f:0d:a6:80:75:9b:6c:d7:17:06:af:
         b6:d4:99:3b:70:4c:ae:90:54:48:b3:ef:00:84:52:6c:ca:0f:
         39:85:77:eb:92:a7:5f:9b:4a:e8:1f:cc:9c:04:32:8a:b0:2c:
         07:d2:3b:61:8d:53:55:b2:80:f3:b8:7d:f0:8e:8f:eb:67:7c:
         b7:c4:f5:a8:04:7b:0b:97:c3:5e:44:2e:c5:6b:90:89:e3:4e:
         84:dd:b7:5f:6c:43:dd:29:fb:f5:e1:50:f4:a7:55:89:98:fb:
         d0:72:87:e9:29:a4:d6:58:ba:58:ae:18:f9:4e:9f:c4:e4:21:
         f2:fd:7b:2f:b5:25:9e:2b:20:da:4c:6a:08:de:e0:e4:e2:7e:
         09:af:5f:1b:df:2e:af:8a:c3:02:a9:75:4a:0a:d1:47:3f:98:
         f1:19:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:22 2026 by rpki-client