Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8937888-2766-3ccd-b2bb-37f1f4295ce1.roa
File:                     d8937888-2766-3ccd-b2bb-37f1f4295ce1.roa (raw, json)
Hash identifier:          w9o4WBsd7kf6ueztiYIdxtHcXE72WSkla4MXiHonhR4=
Subject key identifier:   7A:D1:8A:6B:35:01:1C:AA:47:C2:80:6B:05:0B:EB:47:D7:6F:86:88
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD60BDA80A8856511601600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8937888-2766-3ccd-b2bb-37f1f4295ce1.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397234
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:0b:da:80:a8:85:65:11:60:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=736e600c-30e8-482c-bed3-eec20e2dba01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:da:54:63:84:f4:81:5f:3b:d9:97:12:ae:
                    ee:d6:8f:38:2f:e8:44:b2:ca:fe:78:3f:01:6c:7a:
                    76:05:cc:20:9e:1a:47:47:f3:93:2a:f2:c8:bb:8e:
                    30:5c:bc:d2:72:5b:ee:03:46:b1:00:8e:7a:b4:6a:
                    40:0f:13:e0:2a:dc:bb:33:8f:59:b9:7e:2f:1e:43:
                    49:dd:11:9b:5d:1e:2f:47:e1:dc:9f:dd:c4:ee:d7:
                    b0:b7:4a:b6:1d:01:29:ba:9d:8b:53:f9:97:43:51:
                    11:c9:35:05:4c:f2:e3:45:3e:c1:f0:e9:48:46:0e:
                    56:1b:fe:8e:8c:48:f3:84:25:7a:d6:7b:ba:9a:f3:
                    a6:c9:7c:d0:f8:66:0b:5d:9f:85:d5:71:fb:3a:cc:
                    cb:cb:49:af:d6:a1:9c:3f:60:f4:b5:9b:d1:62:16:
                    22:3a:d3:7e:66:e2:4c:04:64:86:cc:b4:7f:53:73:
                    7b:1b:f5:04:cd:98:ee:46:68:9a:3d:7f:50:0e:d5:
                    94:9a:02:7d:05:54:72:98:08:36:2d:8f:d9:52:cc:
                    29:b0:97:6c:3e:26:ff:dc:24:7d:3d:11:3c:a6:6f:
                    ca:bb:88:99:84:32:f2:d4:4c:3e:b4:20:5a:9f:01:
                    b6:43:47:60:02:38:a3:c8:34:bc:48:6d:33:8a:6b:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D1:8A:6B:35:01:1C:AA:47:C2:80:6B:05:0B:EB:47:D7:6F:86:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8937888-2766-3ccd-b2bb-37f1f4295ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:29:a5:c8:90:9e:88:e4:73:0e:be:cf:a5:e4:a6:70:90:f8:
         85:a5:2e:b1:aa:d7:56:e0:97:d9:37:39:7e:7f:4b:ae:77:46:
         87:32:aa:d1:a9:70:73:38:90:f9:6e:5c:d6:34:94:d0:ff:eb:
         53:73:34:c7:35:25:85:11:c2:57:b8:09:63:a7:19:ed:a0:68:
         4d:d1:82:96:69:a8:22:b6:fc:8e:3b:25:c2:f0:4f:fb:4e:b2:
         b6:2d:a2:25:d8:41:d2:f2:14:08:dc:a3:c5:eb:fc:9e:57:6c:
         27:24:45:44:87:cd:cd:0d:f2:39:13:a7:77:09:83:58:9e:05:
         0f:c2:b9:a1:37:7f:8e:a2:f1:e0:11:df:58:23:04:4b:5e:f1:
         c2:09:49:7e:42:6e:58:d7:4f:33:db:47:62:db:f7:b5:5d:fa:
         95:b3:61:4f:61:b8:ba:3b:26:73:c6:b9:c2:31:5c:bb:f1:28:
         ce:cc:4b:00:77:ec:62:e3:23:96:b5:ae:7d:54:c7:0a:ef:e7:
         92:da:c0:73:55:01:db:f0:f5:b5:41:ea:92:65:d3:ca:11:27:
         a5:89:e0:48:a6:61:51:47:eb:20:ce:13:12:9e:93:d1:cd:54:
         bd:db:a1:3a:94:77:73:38:17:f9:b2:67:36:e1:47:b8:18:e7:
         f2:bd:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:48:40 2026 by rpki-client