Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa
File:                     c136fbb0-dbe2-3086-9200-4638873b7ba5.roa (raw, json)
Hash identifier:          kgVOQ41SajBuU+qTFZtxGOotm6/l2G31MPfwz+WEUq0=
Subject key identifier:   8F:53:14:D4:75:4D:B8:57:6C:C8:A9:21:AE:BD:80:40:9F:2D:B7:3E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497EA6474FFE596587CD1480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397220
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:a6:47:4f:fe:59:65:87:cd:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=804a8067-726e-43da-8ac8-9bdaa4003cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:38:50:1e:0a:32:13:6b:e8:bc:ce:41:74:95:
                    db:9c:44:d9:33:09:a4:cf:d5:f0:bf:53:b0:b2:33:
                    62:6a:55:47:ad:51:ad:85:c2:78:b8:e8:13:67:ed:
                    a8:32:6d:98:23:64:fa:83:32:4d:41:d6:4c:82:16:
                    f2:30:09:a1:dc:bf:a2:44:95:d1:31:d6:ff:1d:2e:
                    2a:28:de:7a:80:8d:44:67:be:c6:f2:44:7e:67:84:
                    63:6d:99:ea:70:53:8b:38:b1:04:ae:dd:6a:a9:aa:
                    26:c7:68:d2:ed:40:6b:d7:3a:0b:14:25:b6:5a:53:
                    8d:07:c6:07:a8:09:e7:f0:e9:ed:6f:ba:59:c5:3c:
                    e9:99:82:c4:c9:6c:4e:2e:59:05:f2:ab:59:1c:90:
                    3e:42:63:3b:c0:61:16:6b:96:a0:fa:53:ce:fd:cc:
                    65:04:4b:8f:83:9d:c2:c6:a6:73:ac:5a:0e:ec:53:
                    a7:01:06:31:ea:e9:1f:53:2f:83:33:7e:f4:6a:f4:
                    fe:f5:46:0b:dd:53:63:b1:59:d2:5e:ff:9e:4f:66:
                    4c:94:6a:5c:4d:79:7e:a8:73:81:32:39:2e:1a:e2:
                    52:b7:10:d3:a4:94:73:10:6b:50:77:f8:9a:6b:68:
                    d0:f7:7b:1b:30:1c:f3:53:e1:f5:b0:47:89:be:96:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:53:14:D4:75:4D:B8:57:6C:C8:A9:21:AE:BD:80:40:9F:2D:B7:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c136fbb0-dbe2-3086-9200-4638873b7ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:bd:ff:6e:df:f1:a0:d3:18:68:c5:0e:35:6e:69:15:3d:0b:
         30:56:e8:fc:c5:ad:28:d6:e1:67:ec:46:06:0a:2b:83:b4:b4:
         c3:68:46:30:29:99:85:71:1d:c9:d0:c5:2f:11:a4:97:47:61:
         41:d2:3c:e8:79:72:fb:9f:4e:a7:70:d1:af:50:c4:c4:86:db:
         e1:d2:17:eb:67:29:a1:96:ed:5e:16:01:a3:51:46:d2:76:d0:
         c4:61:b0:1e:5c:e0:a5:5b:be:f5:23:66:fb:75:75:53:ad:a6:
         2c:f4:5c:7b:d9:85:f3:f8:99:c6:86:cc:00:02:21:cf:d1:2d:
         52:bc:c2:ef:d9:bc:29:cc:4c:87:01:a6:5f:e6:c0:de:5e:fe:
         53:40:f0:2a:63:0e:b0:78:1d:22:77:7d:d5:57:e8:ae:cf:a4:
         02:9b:41:29:10:ab:8c:e3:58:4a:07:e3:d9:3e:eb:68:32:4a:
         31:f2:9b:10:5c:4f:88:0f:af:39:b0:ac:e0:d6:27:af:6d:93:
         28:ae:87:f5:29:65:76:6b:f6:8e:0c:60:b2:a0:97:86:c5:07:
         f8:39:d6:b2:b8:1c:be:15:5e:1d:56:e3:aa:65:c0:5e:5b:ef:
         46:f0:fa:0e:1c:2e:82:ef:bb:13:4a:9c:4e:30:3c:0d:e0:ff:
         71:3f:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:46:05 2026 by rpki-client