Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b012da85-42c4-3ee5-be38-c18aa8c501f4.roa
File:                     b012da85-42c4-3ee5-be38-c18aa8c501f4.roa (raw, json)
Hash identifier:          d8xlgCAGA0ZkuwE6YmpOZnnbQ3Dh4JUUwthel407aJo=
Subject key identifier:   32:8C:2E:50:C2:1A:8C:26:E0:D8:0E:D8:A8:CE:E0:1D:85:65:47:8A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D091295EE96DCF84F63175500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b012da85-42c4-3ee5-be38-c18aa8c501f4.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397216
IP address blocks:        156.154.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:95:ee:96:dc:f8:4f:63:17:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=d1e1c0ff-311a-42d6-ab76-fe08133edae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:77:69:ce:34:23:79:68:54:66:9b:c3:48:6f:
                    07:ff:e4:b0:ef:38:5d:f8:40:c3:a9:46:b3:76:af:
                    f3:ea:b1:a1:77:3d:34:43:2f:e0:e6:ae:78:56:bc:
                    78:6d:b6:35:a9:b4:8d:04:a5:b8:64:88:76:ec:13:
                    38:81:3c:0f:97:de:51:79:f1:30:c8:1f:ae:da:b5:
                    4d:6b:af:cf:72:63:71:27:cd:2c:a2:1c:c3:9f:6a:
                    79:83:00:5d:6c:c3:06:f1:3f:9c:60:58:bd:a8:24:
                    f8:fc:b7:0a:be:5c:36:cc:b9:a7:19:2b:52:28:c2:
                    16:20:cf:c0:b3:67:9b:f4:67:9c:43:cb:67:4f:4a:
                    6b:87:76:81:de:92:46:aa:9a:70:95:08:07:03:72:
                    c9:39:f9:81:76:12:56:7e:ca:9e:22:8e:c9:16:85:
                    e5:91:8e:41:da:1f:11:45:27:31:e0:61:8a:14:cf:
                    21:bf:d2:65:0c:59:0d:70:29:0b:63:96:9f:09:ff:
                    a2:7e:bf:1f:65:ba:28:d5:b8:58:a5:04:e6:fb:29:
                    d9:c7:07:7d:04:91:d7:31:6e:78:fe:07:ac:27:42:
                    02:5e:fd:46:ed:df:78:c7:a7:c7:83:58:27:f3:3a:
                    29:30:7f:92:d4:05:3b:22:4e:58:23:90:a7:08:e6:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:2E:50:C2:1A:8C:26:E0:D8:0E:D8:A8:CE:E0:1D:85:65:47:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b012da85-42c4-3ee5-be38-c18aa8c501f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:4f:a5:49:cb:9a:fc:fc:67:0a:6f:fe:92:4f:67:b2:48:
         8f:da:43:bf:47:cb:da:75:18:11:a0:47:38:cf:ce:30:fe:4a:
         93:3a:17:39:bc:22:c2:a9:0d:38:ae:1d:5d:cd:54:4b:54:86:
         c4:32:90:11:64:ea:8a:4d:6a:b0:fa:66:c4:7a:30:57:95:ad:
         54:fd:c2:7f:f4:61:da:27:6e:b5:aa:3c:c3:cb:60:c5:8e:12:
         9c:2c:59:37:3f:e7:31:10:aa:35:65:f5:44:04:f7:8a:65:cc:
         5b:be:d2:7d:58:e5:82:dc:4f:c3:06:0a:96:ce:50:0c:69:b4:
         83:59:eb:e1:d2:2a:59:c7:e3:53:63:88:8e:cc:f7:37:ca:75:
         2d:2e:2e:ee:29:6f:b3:74:11:56:6b:2b:d9:ea:c1:b2:07:30:
         c6:c7:22:6f:bf:68:e9:4a:e0:3a:55:b8:ce:d9:80:79:af:95:
         0e:ef:50:5a:f4:39:3a:e4:39:18:17:e1:8a:d9:8c:8f:72:6c:
         d0:37:cd:33:8d:c1:87:fb:8e:ca:9c:dd:a7:c5:cc:bf:b5:a1:
         f8:3f:1f:fe:0e:85:74:ce:fc:1a:79:b6:4c:cd:0b:6d:96:e5:
         f9:9e:13:2f:9d:6a:b5:d1:db:ef:05:9e:20:8f:ec:bf:d4:5b:
         6a:bd:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:56 2026 by rpki-client