Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2172dad8-35ea-398e-992f-83a94e20e511.roa
File:                     2172dad8-35ea-398e-992f-83a94e20e511.roa (raw, json)
Hash identifier:          mIBE4nY3Lws6a/c54aKooUwR4G6Vp1MfLYDpTBf+uEY=
Subject key identifier:   E4:5D:25:A5:B1:B0:CD:3B:94:0C:39:2F:25:18:9C:9C:C2:E0:57:08
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A3B9EDB21149BF8A72BE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2172dad8-35ea-398e-992f-83a94e20e511.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397221
IP address blocks:        156.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:3b:9e:db:21:14:9b:f8:a7:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=f76435c0-fcfe-45f6-9715-2df0c9f6af0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3d:3c:72:62:1c:6d:c4:6b:7d:5e:6e:8b:c5:
                    dd:9e:dd:7d:a0:45:0c:89:b8:35:56:7d:fc:09:4b:
                    ba:8e:28:08:61:2f:16:ee:9b:8b:6a:5c:8e:32:64:
                    a7:a9:3c:c4:b9:88:5b:6e:ea:bf:74:66:a1:3b:ce:
                    9d:8b:79:be:ff:f4:4c:53:7f:1c:7b:ec:41:b6:c3:
                    f4:4d:28:6b:32:a5:1a:ec:95:53:ce:bc:80:5f:34:
                    ce:51:93:05:8a:85:e5:3d:ab:e0:a6:80:32:8e:53:
                    61:b7:af:f5:2b:e3:a2:ab:e0:95:76:e6:a6:76:5a:
                    f5:ef:de:df:21:3f:44:67:32:82:fd:87:a1:f1:aa:
                    9d:8e:df:c6:21:98:d6:83:b9:ef:6f:08:54:5a:47:
                    00:fc:34:8a:13:77:ed:c8:0e:2c:7b:9c:3c:29:3f:
                    44:8b:e6:4e:4f:49:69:01:9f:75:7d:fd:fa:0a:d8:
                    56:9a:6a:08:71:78:c8:24:cd:b8:1d:2b:6a:45:92:
                    0d:17:87:52:94:e4:f8:54:37:70:e8:53:d1:e0:b0:
                    ac:3d:57:4a:fc:4d:f1:50:b9:dc:30:99:e0:d6:13:
                    53:d5:4b:18:c1:2a:d0:92:a8:57:df:af:41:66:fd:
                    1e:c7:8d:58:c4:25:d6:77:6e:f2:3d:7b:d8:f1:61:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:25:A5:B1:B0:CD:3B:94:0C:39:2F:25:18:9C:9C:C2:E0:57:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2172dad8-35ea-398e-992f-83a94e20e511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:05:2e:be:36:8b:22:5c:33:34:fb:56:5a:88:77:78:0e:
         e8:ce:a3:30:ce:74:40:aa:f7:0b:be:5d:85:17:08:74:2e:b0:
         7f:61:03:80:f3:a5:fd:c3:e4:dd:8b:f5:8a:12:b3:fc:5d:aa:
         dc:99:51:0f:3d:ed:79:31:ea:a6:90:67:b0:65:f6:22:eb:c9:
         45:c3:50:cb:74:fa:c9:48:c8:3f:7d:39:af:3c:f7:b5:cb:85:
         20:25:b3:d9:f9:6c:45:f1:cf:10:e2:8a:34:67:55:30:ee:72:
         e3:df:20:33:32:68:d5:b2:9e:10:3c:60:b8:ee:0d:42:93:7b:
         9c:9d:e1:0a:d3:3a:ef:2e:8d:a8:3b:ff:86:3e:05:cf:20:68:
         e7:0a:1e:3e:0b:de:ae:0c:ad:64:13:bc:08:bb:f4:fa:70:ab:
         ef:52:a4:33:fd:8f:81:a4:9c:dc:94:dc:23:c6:c5:3a:4a:a3:
         4f:7d:07:ac:d2:ad:ac:b1:38:f4:72:9a:8b:e1:09:46:0b:20:
         b4:a1:e8:04:40:1e:0c:db:87:5d:a0:d6:6f:19:c3:ac:4d:68:
         5e:22:1e:dc:82:bd:fe:9f:65:30:e8:3a:15:3f:57:ee:8c:8e:
         da:e9:92:5e:94:c4:80:62:b5:23:0b:42:1b:03:aa:ec:76:80:
         ef:ef:65:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGjue2yEUm/inK+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
Zjc2NDM1YzAtZmNmZS00NWY2LTk3MTUtMmRmMGM5ZjZhZjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj08cmIcbcRrfV5ui8Xdnt19oEUMibg1Vn38
CUu6jigIYS8W7puLalyOMmSnqTzEuYhbbuq/dGahO86di3m+//RMU38ce+xBtsP0
TShrMqUa7JVTzryAXzTOUZMFioXlPavgpoAyjlNht6/1K+Oiq+CVduamdlr1797f
IT9EZzKC/Yeh8aqdjt/GIZjWg7nvbwhUWkcA/DSKE3ftyA4se5w8KT9Ei+ZOT0lp
AZ91ff36CthWmmoIcXjIJM24HStqRZINF4dSlOT4VDdw6FPR4LCsPVdK/E3xULnc
MJng1hNT1UsYwSrQkqhX369BZv0ex41YxCXWd27yPXvY8WGDiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORdJaWxsM07lAw5LyUYnJzC4FcIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjE3MmRhZDgtMzVlYS0z
OThlLTk5MmYtODNhOTRlMjBlNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4+BS6+NosiXDM0+1ZaiHd4DujOozDOdECq9wu+XYUXCHQusH9hA4Dz
pf3D5N2L9YoSs/xdqtyZUQ897Xkx6qaQZ7Bl9iLryUXDUMt0+slIyD99Oa8897XL
hSAls9n5bEXxzxDiijRnVTDucuPfIDMyaNWynhA8YLjuDUKTe5yd4QrTOu8ujag7
/4Y+Bc8gaOcKHj4L3q4MrWQTvAi79Ppwq+9SpDP9j4GknNyU3CPGxTpKo099B6zS
rayxOPRymovhCUYLILSh6ARAHgzbh12g1m8Zw6xNaF4iHtyCvf6fZTDoOhU/V+6M
jtrpkl6UxIBitSMLQhsDqux2gO/vZYs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:18:05 2026 by rpki-client