Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa
File:                     42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa (raw, json)
Hash identifier:          8MRtv3jt+EwBDwjXxG7dE2+GCZII0HkpE7SQ6d/mAg4=
Subject key identifier:   CA:02:36:C0:F4:BD:F0:B1:DF:AD:A8:B5:59:CC:DD:63:6F:92:65:B8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D091279F2253D3878DBB8ED4C
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397229
IP address blocks:        156.154.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:79:f2:25:3d:38:78:db:b8:ed:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=ecdae69b-0630-444b-9e7a-d373c649414d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:76:bb:08:d0:52:3a:b6:10:c0:3f:fc:08:
                    72:76:6d:e3:b4:d5:6f:23:22:b5:45:d0:98:28:3c:
                    fb:b9:9a:40:4a:47:5a:3b:c2:31:85:cd:60:b2:b1:
                    3b:df:d4:a6:19:06:19:6e:d9:32:f4:a5:f9:8d:b1:
                    50:4b:bf:f7:44:b9:bb:8d:84:67:fa:49:c4:b3:dd:
                    b0:ac:dc:37:6c:8d:55:59:0a:f2:ed:76:7d:fb:48:
                    99:0f:89:0b:b3:15:1f:aa:f9:c7:b0:cc:ac:d1:be:
                    89:d3:2e:1b:18:4f:ab:77:63:4d:41:ec:7e:1f:50:
                    14:cb:9a:2a:7f:4c:36:e1:4a:c5:fe:cc:39:f3:8a:
                    22:70:9a:2d:cf:d4:99:89:16:2d:84:42:6e:14:c2:
                    91:cc:b4:8b:4f:8c:68:95:31:f8:e7:4d:16:3d:dd:
                    6a:9b:44:72:69:66:71:18:5c:25:91:d7:15:c8:15:
                    21:f1:0d:b1:37:c8:47:7f:e5:f1:57:be:3d:8b:45:
                    5e:84:8b:94:49:a3:d4:64:d8:89:ca:a1:b1:cb:45:
                    88:10:ea:d1:33:07:34:21:81:80:45:92:fd:e0:d6:
                    07:5e:95:a3:29:7c:32:e8:77:ea:8c:e1:c9:d1:be:
                    7a:2f:a1:b1:b8:a4:7f:70:31:63:06:08:ee:e2:db:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:02:36:C0:F4:BD:F0:B1:DF:AD:A8:B5:59:CC:DD:63:6F:92:65:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:2e:20:f3:1a:2a:67:38:8b:bf:65:88:b8:39:4f:6c:b0:
         35:56:da:5b:0b:47:29:80:bd:92:ea:1c:05:ec:ae:a9:48:95:
         7e:29:b6:01:4d:ec:c2:3f:a7:2b:43:7c:66:fc:18:3c:0a:5b:
         a0:68:5d:fe:f9:51:ba:f7:e2:0f:d0:a8:c4:52:7d:74:18:89:
         72:09:b9:68:93:ec:05:20:db:69:43:ac:97:74:9b:38:f4:18:
         7a:1e:aa:eb:7a:13:9f:15:f2:69:d7:bd:87:f6:eb:2e:59:68:
         61:37:c9:81:af:a4:29:9c:f4:f7:28:a1:a9:15:ae:78:dc:90:
         72:e7:d6:50:8d:29:7a:fb:be:fb:69:e0:9c:67:30:6a:c0:52:
         6d:5f:9e:4d:37:a0:a3:d5:5c:7a:95:40:aa:f3:28:72:cb:82:
         b8:50:b1:bd:77:56:28:23:3d:ea:50:90:e8:dd:a7:2c:d3:82:
         54:5d:86:9d:99:93:bc:08:83:67:07:1b:1e:b7:7b:17:68:0f:
         04:0c:25:79:64:e6:8a:5e:9a:99:36:79:72:34:aa:ee:27:d4:
         7d:b1:de:13:17:6f:d4:73:1d:d0:e4:51:8b:22:8b:9c:3f:e6:
         fb:1e:0c:be:ee:fb:9a:f7:47:d1:be:ee:eb:ff:fa:5d:10:49:
         f5:10:89:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnnyJT04eNu47UwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZWNkYWU2OWItMDYzMC00NDRiLTllN2EtZDM3M2M2NDk0MTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnl2uwjQUjq2EMA//Ahydm3jtNVvIyK1RdCY
KDz7uZpASkdaO8Ixhc1gsrE739SmGQYZbtky9KX5jbFQS7/3RLm7jYRn+knEs92w
rNw3bI1VWQry7XZ9+0iZD4kLsxUfqvnHsMys0b6J0y4bGE+rd2NNQex+H1AUy5oq
f0w24UrF/sw584oicJotz9SZiRYthEJuFMKRzLSLT4xolTH4500WPd1qm0RyaWZx
GFwlkdcVyBUh8Q2xN8hHf+XxV749i0VehIuUSaPUZNiJyqGxy0WIEOrRMwc0IYGA
RZL94NYHXpWjKXwy6HfqjOHJ0b56L6GxuKR/cDFjBgju4ttSowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoCNsD0vfCx362otVnM3WNvkmW4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDJjYTkzNTctOWRhMy0z
NzRmLWEzZjMtZDdhZjJiN2Q1YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnJLiDzGipnOIu/ZYi4OU9ssDVW2lsLRymAvZLqHAXsrqlIlX4ptgFN
7MI/pytDfGb8GDwKW6BoXf75Ubr34g/QqMRSfXQYiXIJuWiT7AUg22lDrJd0mzj0
GHoequt6E58V8mnXvYf26y5ZaGE3yYGvpCmc9PcooakVrnjckHLn1lCNKXr7vvtp
4JxnMGrAUm1fnk03oKPVXHqVQKrzKHLLgrhQsb13VigjPepQkOjdpyzTglRdhp2Z
k7wIg2cHGx63exdoDwQMJXlk5opempk2eXI0qu4n1H2x3hMXb9RzHdDkUYsii5w/
5vseDL7u+5r3R9G+7uv/+l0QSfUQiWk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:58 2026 by rpki-client