Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bbf0cae-57fc-3ca1-8154-e4662e3556dc.roa
File:                     9bbf0cae-57fc-3ca1-8154-e4662e3556dc.roa (raw, json)
Hash identifier:          5P1GGzvqvToHQZH0liUyENau1japtYR9lBRbCb0VEgw=
Subject key identifier:   B8:B7:FF:20:67:B2:4E:FE:3E:4B:59:3D:2F:91:89:FF:21:07:77:F0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A2DC246F6176A24898E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bbf0cae-57fc-3ca1-8154-e4662e3556dc.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397224
IP address blocks:        156.154.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:2d:c2:46:f6:17:6a:24:89:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=95a516ac-e403-459c-b586-4a05dc0671b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:1b:8e:f9:2b:82:1a:b7:fb:50:e2:da:72:
                    91:d8:f5:30:d6:0e:c0:96:d4:18:e4:c8:b7:cd:df:
                    c7:83:7e:45:01:6c:23:ab:d1:f0:d3:b4:25:b3:e2:
                    53:dd:8d:ee:a9:7f:ef:0a:b6:d8:b6:b9:22:11:a9:
                    83:87:ea:bb:8e:e9:3f:ca:b5:3d:57:03:73:e4:3d:
                    f4:ad:be:81:52:a8:e0:e5:e9:9e:95:83:26:69:1f:
                    5d:c7:b6:18:93:59:6d:b5:e5:dd:e3:f9:2c:2b:ac:
                    1c:fe:54:9e:44:37:91:80:23:2c:b8:cd:2b:66:de:
                    70:b4:39:4d:23:4d:89:5f:f9:b9:e1:91:07:36:c3:
                    eb:bc:19:02:86:e8:fb:f7:73:3d:50:84:28:8d:6a:
                    45:7b:9b:ab:e2:14:1d:a0:01:5a:1e:41:3e:52:ad:
                    39:27:41:53:32:cf:dd:ac:02:b7:87:9c:d2:6e:c1:
                    59:b4:9a:d1:18:06:e2:b4:57:fb:d0:89:69:5e:d8:
                    b7:dc:44:e9:05:3b:c2:d9:e3:f2:09:f5:42:fb:92:
                    66:63:fa:47:6f:17:d9:89:f4:3d:70:01:90:67:38:
                    dc:c7:9a:dd:06:62:a5:af:6b:c8:58:96:dc:ba:2e:
                    7b:34:65:be:de:40:f9:53:c2:f6:32:80:88:f1:a5:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B7:FF:20:67:B2:4E:FE:3E:4B:59:3D:2F:91:89:FF:21:07:77:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bbf0cae-57fc-3ca1-8154-e4662e3556dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2f:3c:b6:36:5a:79:98:7a:a4:fb:90:7d:e5:f1:89:ac:0f:
         b4:87:5c:dc:f4:51:4e:46:04:d0:f2:25:85:38:14:5a:30:94:
         4e:14:d5:81:2b:e2:b2:87:53:db:0e:3e:6c:af:b2:c3:0f:dc:
         b3:78:85:07:de:2a:83:67:17:68:72:e2:c2:eb:a3:d4:10:69:
         c1:c1:ef:68:63:80:8b:27:c9:d6:eb:5b:85:11:cf:86:d5:de:
         d9:37:93:cd:75:97:b0:72:46:3a:30:8f:9d:ed:ba:12:43:07:
         d9:4b:32:e4:3d:33:f3:7e:44:71:8c:af:ee:80:59:49:d5:c1:
         07:4f:d4:03:c1:6d:eb:a9:1c:1a:6c:e5:f2:a1:d1:18:7f:f4:
         4b:d4:73:1a:7b:e2:ea:06:11:3e:f1:d1:d7:b6:4a:ab:5a:5e:
         8c:31:93:39:79:f8:b4:65:ed:b9:f6:4b:f2:59:4a:95:41:09:
         a5:16:ae:b9:8a:37:ee:c5:9d:e3:ea:5f:26:ef:f1:b1:fa:91:
         ed:0a:b8:e5:5e:12:e5:32:28:33:41:2f:04:bc:10:93:61:55:
         af:6e:d2:09:fe:2e:ca:09:26:cc:bc:c9:3b:6a:ea:7b:c0:40:
         3e:31:ca:64:d1:b7:be:41:81:c1:f5:50:9c:4f:d7:f4:a4:32:
         74:8d:eb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:16:00 2026 by rpki-client