Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e1772a7f-0bcb-3ff9-9ff1-8ca08fbdd557.roa
File:                     e1772a7f-0bcb-3ff9-9ff1-8ca08fbdd557.roa (raw, json)
Hash identifier:          +Hviy3vNj0THq1hTQ5dDNg6e+mCb1uzQ2A9N33uYb+Q=
Subject key identifier:   CF:5D:62:06:52:1C:A2:CB:B0:F5:73:CD:74:4D:29:BF:C0:7B:0D:EC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FE9A78718A0212560C200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e1772a7f-0bcb-3ff9-9ff1-8ca08fbdd557.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397224
IP address blocks:        156.154.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e9:a7:87:18:a0:21:25:60:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=d2ce5142-97d9-4f5e-b1ef-dd1974e773e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:db:40:b6:e0:2d:77:21:20:cb:52:14:54:
                    09:1f:14:b1:de:ba:e3:18:7b:f7:fc:df:c3:51:6d:
                    bd:f0:08:c0:ac:ea:d2:4d:8a:81:f4:43:3e:9f:07:
                    cc:4c:8f:70:48:9c:7a:36:09:b3:a9:bd:31:1a:c1:
                    32:94:1f:b1:61:e3:75:8a:ac:bb:b4:82:b1:91:91:
                    5c:b5:2f:db:a0:dc:bd:08:d0:e9:56:2b:b4:5b:94:
                    f9:ab:43:1f:5e:a4:3f:9e:9e:6c:25:a5:c7:43:95:
                    6c:be:27:c8:ee:0d:7a:4e:72:52:37:9c:b8:09:89:
                    ce:dc:8e:dd:9b:20:fa:76:30:8b:c0:be:bf:42:4b:
                    bf:4f:44:34:21:f0:35:df:c3:19:b0:0f:af:7a:28:
                    41:c7:0e:5d:34:ce:82:ac:5b:71:ac:11:53:03:44:
                    96:fb:7f:72:c7:b9:1c:a1:b5:a3:e2:6e:20:6c:74:
                    96:4d:a1:b1:42:48:1f:9e:55:ba:57:dd:2d:b4:be:
                    bc:7f:bb:d3:da:7d:3f:e5:e7:a9:00:ea:14:fc:33:
                    ff:bc:c5:09:30:21:61:91:ff:5c:71:73:0f:da:0f:
                    c9:36:6a:48:7c:6e:dc:b8:b0:17:18:bc:21:c6:27:
                    bf:5b:b9:fb:3b:8f:10:6d:fc:f9:4c:c6:ac:ec:1d:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:62:06:52:1C:A2:CB:B0:F5:73:CD:74:4D:29:BF:C0:7B:0D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e1772a7f-0bcb-3ff9-9ff1-8ca08fbdd557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d0:9c:5d:10:ab:f6:95:b4:c8:16:c7:0d:03:b9:a8:3f:6f:
         2e:4d:52:9c:a4:f9:a6:e7:af:1e:be:cc:ac:55:f1:87:62:98:
         b5:8a:75:0a:f6:01:77:0a:2f:40:64:05:81:c0:5b:d0:7c:04:
         fc:b9:06:0c:5c:c2:17:64:c1:ba:72:bd:42:9c:c8:ff:0e:3e:
         95:41:55:2b:02:22:cc:bd:93:fa:90:18:0f:b6:37:5c:fb:8f:
         25:3f:7b:b5:f5:2d:eb:36:cd:e6:bd:82:d2:ba:82:e8:22:d2:
         ce:20:59:c6:c1:e7:b8:ed:33:e1:57:42:94:09:92:bb:10:0c:
         b6:bd:e2:7f:4d:39:0f:55:66:ca:b3:41:51:56:9d:16:7e:6e:
         1c:d5:a7:14:c8:95:c6:7a:14:9b:ad:8d:bd:7d:5b:5e:b5:3e:
         e4:66:e2:82:ed:7a:62:2a:90:70:eb:38:7d:ad:af:c4:2f:7e:
         ee:e0:ab:0b:3f:72:21:1c:a3:10:97:f8:b1:d2:71:47:e0:1c:
         d2:1b:76:ff:bb:f7:31:f3:46:08:e5:8a:98:b7:58:92:55:e7:
         ac:59:24:eb:b2:eb:9e:74:3c:9a:50:49:d6:47:00:f3:06:3c:
         f4:86:1f:c1:90:ba:eb:63:07:11:57:1a:32:f8:93:26:ec:25:
         b5:c6:b6:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+mnhxigISVgwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZDJjZTUxNDItOTdkOS00ZjVlLWIxZWYtZGQxOTc0ZTc3M2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc3bQLbgLXchIMtSFFQJHxSx3rrjGHv3/N/D
UW298AjArOrSTYqB9EM+nwfMTI9wSJx6Ngmzqb0xGsEylB+xYeN1iqy7tIKxkZFc
tS/boNy9CNDpViu0W5T5q0MfXqQ/np5sJaXHQ5VsvifI7g16TnJSN5y4CYnO3I7d
myD6djCLwL6/Qku/T0Q0IfA138MZsA+veihBxw5dNM6CrFtxrBFTA0SW+39yx7kc
obWj4m4gbHSWTaGxQkgfnlW6V90ttL68f7vT2n0/5eepAOoU/DP/vMUJMCFhkf9c
cXMP2g/JNmpIfG7cuLAXGLwhxie/W7n7O48Qbfz5TMas7B2IJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM9dYgZSHKLLsPVzzXRNKb/Aew3sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTE3NzJhN2YtMGJjYi0z
ZmY5LTlmZjEtOGNhMDhmYmRkNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzQnF0Qq/aVtMgWxw0Duag/by5NUpyk+abnrx6+zKxV8YdimLWKdQr2
AXcKL0BkBYHAW9B8BPy5BgxcwhdkwbpyvUKcyP8OPpVBVSsCIsy9k/qQGA+2N1z7
jyU/e7X1Les2zea9gtK6gugi0s4gWcbB57jtM+FXQpQJkrsQDLa94n9NOQ9VZsqz
QVFWnRZ+bhzVpxTIlcZ6FJutjb19W161PuRm4oLtemIqkHDrOH2tr8Qvfu7gqws/
ciEcoxCX+LHScUfgHNIbdv+79zHzRgjlipi3WJJV56xZJOuy6550PJpQSdZHAPMG
PPSGH8GQuutjBxFXGjL4kybsJbXGtoU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:48:00 2026 by rpki-client