Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca560653-fefb-39c3-9b8e-a7ee3427975d.roa
File:                     ca560653-fefb-39c3-9b8e-a7ee3427975d.roa (raw, json)
Hash identifier:          tzawvsBijoBZ31BiZCDtBFCKWzm2d8JfzsOTG4SyiJE=
Subject key identifier:   AC:3C:2D:20:1F:CB:71:89:67:08:B5:7A:07:FB:B7:7E:97:FA:53:D2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A4A182631781E8F268A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca560653-fefb-39c3-9b8e-a7ee3427975d.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397219
IP address blocks:        156.154.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:4a:18:26:31:78:1e:8f:26:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=38613463-df04-4b46-b670-77f477d16fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:48:35:23:f6:63:f1:d5:a3:b4:56:0e:b1:
                    81:7f:b5:d3:07:85:8f:86:16:51:26:e8:c0:26:b6:
                    4f:e3:eb:2c:7d:57:ff:32:7a:0d:21:20:3f:18:db:
                    54:3e:ce:c8:30:92:b7:23:45:e3:2a:a9:9d:81:d3:
                    59:03:08:2a:4d:83:de:ea:bc:45:46:8b:51:38:4e:
                    cf:3e:ea:5b:9c:7a:be:0d:22:b9:9c:5b:4e:6f:d7:
                    52:dd:ed:a5:71:93:54:53:04:a8:34:33:94:0f:6e:
                    c8:03:3c:c4:92:5c:12:e6:12:5a:7e:90:e5:3f:ff:
                    43:11:57:9b:4b:81:32:d0:8f:35:c4:da:13:4a:43:
                    ca:4b:6d:00:d3:f5:a0:78:77:bd:7e:bc:f1:69:30:
                    8f:07:6f:98:28:0d:ef:72:fb:80:dd:e0:b7:50:eb:
                    eb:d8:08:c1:06:bd:ec:7f:e8:f0:0d:cc:af:e1:c8:
                    13:03:2d:08:24:87:f0:29:f3:41:23:b3:98:e9:c7:
                    89:7c:56:dc:fb:a8:f2:b0:ae:c2:1c:85:a9:c7:94:
                    19:86:a2:a7:2e:3e:58:29:76:23:79:6b:f2:0d:52:
                    dc:e7:8c:22:7a:10:f0:53:4f:5b:1e:25:ba:86:76:
                    3f:c4:2e:40:2d:0b:13:81:d9:fa:ec:ed:ed:84:d4:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3C:2D:20:1F:CB:71:89:67:08:B5:7A:07:FB:B7:7E:97:FA:53:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca560653-fefb-39c3-9b8e-a7ee3427975d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:0e:da:79:c6:6e:75:09:c2:fa:bf:7b:8d:55:c0:cd:98:
         d3:ae:ff:5f:0f:11:9d:f5:8e:41:7e:3d:8d:75:ef:54:e4:36:
         0f:43:cb:ce:20:b9:3e:f0:c8:e4:59:bd:0b:8e:e4:21:4c:c1:
         e6:f3:25:28:6a:9f:8b:4a:85:94:c4:d1:e5:bc:e6:50:f5:9e:
         69:01:69:4e:e3:13:c9:53:6c:3d:77:61:dc:03:47:74:8d:ee:
         44:d2:36:f3:cc:a3:a4:ee:14:6a:85:67:ad:3f:ae:66:60:ff:
         62:cb:e0:89:d3:f2:9c:e0:47:c6:e2:20:b3:07:67:33:df:1e:
         cc:ad:cb:ba:75:01:70:b9:e0:8b:c0:c5:98:bb:19:f3:38:d2:
         89:b7:ed:05:5e:5b:e0:ce:15:15:71:97:f5:1f:03:3b:6e:c9:
         f5:3e:28:ce:6a:ef:14:df:63:aa:e8:cd:93:95:ff:88:e3:a2:
         00:1d:71:fe:95:a6:38:6f:1e:cf:e4:52:c5:20:8f:7f:84:a4:
         2c:5b:6e:5b:07:34:34:a1:34:ea:c8:29:e2:36:89:e5:f5:e8:
         c2:d8:61:16:ed:f5:49:b6:06:c4:9c:3c:0e:34:fb:a1:b3:5b:
         2c:84:e7:0c:c7:90:13:46:70:25:08:c9:1c:b3:9a:db:ed:24:
         ed:a1:ee:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkoYJjF4Ho8mioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
Mzg2MTM0NjMtZGYwNC00YjQ2LWI2NzAtNzdmNDc3ZDE2ZmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBxINSP2Y/HVo7RWDrGBf7XTB4WPhhZRJujA
JrZP4+ssfVf/MnoNISA/GNtUPs7IMJK3I0XjKqmdgdNZAwgqTYPe6rxFRotROE7P
PupbnHq+DSK5nFtOb9dS3e2lcZNUUwSoNDOUD27IAzzEklwS5hJafpDlP/9DEVeb
S4Ey0I81xNoTSkPKS20A0/WgeHe9frzxaTCPB2+YKA3vcvuA3eC3UOvr2AjBBr3s
f+jwDcyv4cgTAy0IJIfwKfNBI7OY6ceJfFbc+6jysK7CHIWpx5QZhqKnLj5YKXYj
eWvyDVLc54wiehDwU09bHiW6hnY/xC5ALQsTgdn67O3thNTMjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKw8LSAfy3GJZwi1egf7t36X+lPSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2E1NjA2NTMtZmVmYi0z
OWMzLTliOGUtYTdlZTM0Mjc5NzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3fDtp5xm51CcL6v3uNVcDNmNOu/18PEZ31jkF+PY1171TkNg9Dy84g
uT7wyORZvQuO5CFMwebzJShqn4tKhZTE0eW85lD1nmkBaU7jE8lTbD13YdwDR3SN
7kTSNvPMo6TuFGqFZ60/rmZg/2LL4InT8pzgR8biILMHZzPfHsyty7p1AXC54IvA
xZi7GfM40om37QVeW+DOFRVxl/UfAztuyfU+KM5q7xTfY6rozZOV/4jjogAdcf6V
pjhvHs/kUsUgj3+EpCxbblsHNDShNOrIKeI2ieX16MLYYRbt9Um2BsScPA40+6Gz
WyyE5wzHkBNGcCUIyRyzmtvtJO2h7pE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:22 2026 by rpki-client