Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa
File:                     a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa (raw, json)
Hash identifier:          +LU+Rr0rBhUVEXhwGR2xig+C/Wy2G+5e6rthg5hH51E=
Subject key identifier:   FA:08:3A:95:D3:2A:8A:8B:E6:34:0F:5A:FF:F9:62:4C:A2:D7:B7:C9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A4E626F1DC57CDE46C580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397218
IP address blocks:        156.154.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:4e:62:6f:1d:c5:7c:de:46:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=fef35fe5-e673-42eb-af4d-aba5026553b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:38:eb:40:9f:8f:3c:83:b9:f0:33:b5:78:
                    6d:b3:d0:94:e5:c4:6b:c1:39:d9:3b:14:85:10:d4:
                    be:cc:4b:b0:c6:d8:a1:5b:e1:86:d9:f7:d3:ff:89:
                    05:f7:8d:7a:6b:75:8d:c2:4a:b4:95:32:be:c7:26:
                    c4:5f:0a:f0:69:35:a1:1b:56:40:67:3b:7f:64:27:
                    30:5c:b5:ef:2f:44:90:44:89:a6:ad:49:ac:38:9c:
                    b1:ed:76:39:39:65:ba:57:f5:b2:58:29:c5:52:ce:
                    2a:13:ba:18:33:e0:b8:c1:3b:59:5c:4a:01:8a:6b:
                    2c:76:b7:2e:f9:6f:23:3b:87:8a:ae:65:a3:45:bb:
                    84:6d:97:ce:b9:70:aa:2f:1b:7b:ad:68:e5:d5:61:
                    c1:8b:d6:42:20:f2:6f:68:21:dc:70:8c:c1:f0:03:
                    77:4e:eb:86:df:6c:a7:9d:4f:d5:b3:67:5d:10:2a:
                    65:4d:09:6a:11:dc:dc:a9:19:85:be:d1:ee:74:12:
                    68:4f:ff:90:bf:fb:7e:6e:69:a2:5a:2b:f2:ee:e1:
                    4e:1d:ef:bd:82:4f:b7:3c:40:70:49:8d:46:7b:42:
                    d5:39:55:59:c4:be:14:4b:6e:7e:4b:6f:da:04:9c:
                    ef:86:6b:fa:f4:79:83:26:8c:15:5d:20:d4:ef:40:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:08:3A:95:D3:2A:8A:8B:E6:34:0F:5A:FF:F9:62:4C:A2:D7:B7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:a5:27:be:8f:27:22:a2:90:27:a7:39:97:4c:dd:23:a5:
         da:4f:2a:ac:09:25:5f:45:49:d3:6c:f0:24:3c:71:52:16:4e:
         35:9a:03:8a:51:aa:cc:1c:54:5d:85:13:26:c4:e0:23:9c:a3:
         e1:37:03:e4:a0:b4:bd:a0:73:6a:2c:e5:ff:b4:c9:01:b5:a4:
         c8:f8:84:24:d8:db:a6:1a:86:e5:00:57:cf:c5:5b:6d:c0:8d:
         cc:bc:d9:fb:00:8f:5c:51:94:79:45:5d:1c:7a:86:52:12:83:
         6a:97:97:b9:ea:5d:2a:af:f8:1c:a8:e8:ad:eb:b0:28:82:fa:
         47:cf:35:cb:0c:dd:67:09:00:0c:b3:53:47:7d:74:00:aa:33:
         1b:cf:c2:70:48:a7:99:37:f3:23:e9:96:eb:03:b8:fb:15:56:
         48:d6:c4:0b:74:9b:1a:a8:65:0a:d8:00:29:4e:83:9d:e8:8e:
         22:0c:94:62:a7:6d:48:b4:69:4f:e1:4b:d5:56:72:8d:40:2c:
         62:8c:9e:34:70:0f:a8:03:19:b7:60:20:ad:05:00:78:b6:1f:
         3f:56:05:e9:fd:3c:d8:1f:f0:c1:a9:f4:01:07:84:45:45:f8:
         c4:a8:17:61:5a:88:03:df:23:b7:88:39:ba:d8:23:d2:4f:ff:
         68:57:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:16:49 2026 by rpki-client