Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86ced3f2-f49a-3dc7-8d0f-66f0a6b4d552.roa
File:                     86ced3f2-f49a-3dc7-8d0f-66f0a6b4d552.roa (raw, json)
Hash identifier:          Y6Wcf9RKg51i+9O801jigt8NZ/xeblwE4s9lOpH54V4=
Subject key identifier:   E1:58:42:6E:D5:24:AF:42:E0:00:D0:04:5A:09:BF:B5:69:D0:C8:DF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A5318A090CA128A98FF00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86ced3f2-f49a-3dc7-8d0f-66f0a6b4d552.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397223
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:53:18:a0:90:ca:12:8a:98:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=bf44f3dc-e809-4dcc-a4d6-5fcf7c5710f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:93:4c:ea:46:50:8d:c5:bd:5b:27:a0:d3:
                    f2:b8:65:90:25:a5:99:ab:f2:9b:d1:58:07:f1:f5:
                    75:d9:e7:16:65:d0:01:d4:5b:55:13:93:84:70:56:
                    7a:84:1b:75:dd:db:e8:86:e0:34:76:8b:f4:31:35:
                    90:1c:d6:ae:5d:cb:4c:b1:4d:20:a0:b7:69:a6:1f:
                    ce:91:02:33:a1:e1:6c:d4:69:77:cd:66:ff:a9:4e:
                    02:e1:9e:89:23:b4:92:50:cf:17:aa:85:8f:c1:87:
                    d1:11:a8:de:81:2a:e3:d7:68:53:c8:e8:6c:61:fc:
                    ad:61:3a:58:dc:95:d0:91:be:35:c6:52:d4:d4:c8:
                    f6:37:f8:79:42:04:f6:d1:bb:26:e8:b5:6b:75:44:
                    c1:82:48:bb:62:86:d3:da:8a:ec:2b:55:f6:45:15:
                    29:29:bd:dd:77:c0:4e:bb:cf:49:11:22:26:92:8b:
                    c1:29:98:bc:1c:8b:a1:29:a2:37:e2:ec:f4:02:a5:
                    54:0f:8c:93:e7:94:b6:84:5c:82:28:bb:88:d5:ff:
                    a3:12:8f:43:9a:ff:29:ef:83:7c:90:94:e9:06:d9:
                    c2:37:ee:01:b3:d4:3e:a3:a1:d2:e8:39:a3:be:78:
                    8e:f6:ca:75:1d:fd:83:df:61:57:eb:fe:bc:8d:e6:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:58:42:6E:D5:24:AF:42:E0:00:D0:04:5A:09:BF:B5:69:D0:C8:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86ced3f2-f49a-3dc7-8d0f-66f0a6b4d552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:69:5c:09:43:8a:ad:0e:ab:77:ce:79:17:f0:f5:6d:96:
         34:c4:85:bf:0b:c3:e7:26:d1:e3:41:e2:23:87:86:f7:8a:f5:
         52:f3:16:70:34:0f:15:2f:69:4d:ff:ef:aa:2b:94:d7:47:a6:
         0b:35:3b:bd:17:ae:00:75:7a:8a:97:71:d0:a9:84:17:ce:dd:
         fd:25:74:1a:d0:73:a0:f6:e1:62:18:72:3c:a0:27:ee:88:27:
         c2:da:dd:d6:7f:3c:29:32:93:83:31:ba:a9:d2:8c:66:1f:5d:
         89:09:86:bd:a4:9e:aa:37:36:a5:f1:3f:08:e9:8a:3e:ac:99:
         b9:d2:66:de:bb:64:a4:a7:ba:6b:79:79:08:f2:47:29:f3:b7:
         ad:70:81:75:ad:40:07:0c:7d:da:2e:9b:b4:84:b7:c5:3f:ff:
         8c:30:4f:c3:e5:bb:f5:23:e2:5a:4e:11:68:c6:9a:62:58:34:
         82:ff:e8:f0:2b:76:ee:8f:c5:22:67:9b:b2:8d:1d:67:3c:74:
         c6:d5:e7:6c:2b:a7:e1:59:cb:31:6c:02:9b:1c:09:29:93:d6:
         a2:96:9f:6c:f8:ab:a9:30:0a:63:c2:ef:73:d1:00:cc:ca:be:
         fc:2d:a0:3a:41:9e:5a:fa:55:ce:8d:7d:25:34:76:fe:60:f3:
         c3:37:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:27 2026 by rpki-client