Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4443e88a-8920-3c06-9edc-6202ab0dadbd.roa
File:                     4443e88a-8920-3c06-9edc-6202ab0dadbd.roa (raw, json)
Hash identifier:          /Ev45g4ULvf/ajY5gN+4PJJe8lsuBimYNLwF4St6NIM=
Subject key identifier:   E3:11:75:32:DC:6C:97:36:49:21:4F:E4:C0:E1:15:91:2E:3E:97:C6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A50C2A7879E0E8BDBAE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4443e88a-8920-3c06-9edc-6202ab0dadbd.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397221
IP address blocks:        156.154.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:50:c2:a7:87:9e:0e:8b:db:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=9dcd7203-a943-42a6-b2ff-d90af2969ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:d4:f1:5d:a3:05:88:b3:a8:39:ab:79:25:
                    90:f0:05:6e:ff:9e:e2:9f:48:a7:76:57:9d:0e:3d:
                    cd:c5:47:cf:86:6b:3e:9d:17:76:4c:cc:41:e1:14:
                    3b:01:dc:bf:86:02:d1:66:8e:e3:ca:3c:8a:79:6d:
                    e2:f2:b3:50:81:6a:12:5c:19:30:7e:d6:63:eb:2f:
                    32:e6:a1:c8:0d:09:fb:75:c1:33:8e:00:09:52:94:
                    3e:4b:25:0a:07:f0:e2:d3:2d:e9:2b:03:d1:3d:a7:
                    54:d5:94:c6:2e:bb:b1:7e:ab:5c:63:c7:4f:bd:81:
                    91:83:6c:e2:28:ee:f4:0b:83:44:76:c7:c2:fc:d0:
                    7d:f3:fd:a2:b8:05:22:2b:c3:5b:ae:f2:f6:18:f8:
                    ca:03:88:90:23:1e:d7:4a:b0:72:33:40:99:c9:89:
                    49:ec:82:e6:c1:c9:14:e5:50:12:d0:1b:c7:74:1f:
                    59:a4:0a:95:d8:2c:24:17:e5:4b:ba:bf:ec:b9:48:
                    81:8f:d8:23:2b:0c:38:3d:30:6d:bd:c5:53:30:8a:
                    4f:d5:5a:e1:6e:70:53:53:be:b5:2e:98:34:fb:25:
                    9a:28:4b:69:18:94:2c:6b:3c:8b:cb:85:4b:d1:2d:
                    0a:9c:94:1d:ea:15:e4:a6:58:be:86:09:e9:a5:aa:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:11:75:32:DC:6C:97:36:49:21:4F:E4:C0:E1:15:91:2E:3E:97:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4443e88a-8920-3c06-9edc-6202ab0dadbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:dc:68:47:32:03:db:aa:54:5a:81:12:6d:b0:ba:2d:82:
         e6:f4:58:c3:f7:29:76:af:96:eb:82:a7:5c:76:58:a7:31:8b:
         d3:e5:6a:24:7b:88:d6:c9:80:2f:fc:dd:7b:11:cd:16:0c:10:
         25:18:52:1e:0c:d2:ea:f7:a8:df:c5:a7:7b:24:63:47:b6:ad:
         83:a8:92:dd:3c:04:3c:5e:d2:c5:f4:f7:e8:80:bc:2a:7a:1b:
         20:cf:f9:f9:37:2e:4d:b7:03:25:2d:7e:fc:27:72:bf:b4:96:
         91:54:ab:b0:46:3a:e5:10:a3:5b:1b:16:d2:9b:21:49:ad:d4:
         2a:9d:0a:72:b8:a5:d9:79:6e:12:07:e6:fb:3f:cd:cd:3d:2a:
         4c:41:5b:f2:49:52:27:5f:31:7c:c9:e6:20:48:81:3b:97:75:
         6a:13:49:64:ae:30:e6:05:53:51:d4:c2:14:1d:96:02:c8:ad:
         7e:dc:45:3c:ea:bc:ed:ad:38:33:2f:7b:dd:bd:c2:30:2b:f0:
         98:56:92:a4:45:cb:2d:36:45:3f:38:ba:c2:6d:90:75:2f:b8:
         dc:49:5b:2e:0f:90:0d:57:1c:1d:c8:52:1d:4e:3e:38:56:fe:
         87:48:5a:33:a6:ef:4f:27:dd:96:e3:0c:39:f9:17:e1:72:03:
         10:0a:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:39 2026 by rpki-client