Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc2ffeb5-6936-376a-abaa-483a2b1c4efd.roa
File:                     cc2ffeb5-6936-376a-abaa-483a2b1c4efd.roa (raw, json)
Hash identifier:          DDgnxoXK2CPsZmYyx2lvX+pl9Aom2f4NvALsisR0yE4=
Subject key identifier:   4E:E7:10:0B:B9:C7:17:31:3C:07:76:F1:37:DB:B2:0E:38:30:E8:07
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497E14C32BF6F451D9F75A50
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc2ffeb5-6936-376a-abaa-483a2b1c4efd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397226
IP address blocks:        156.154.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:14:c3:2b:f6:f4:51:d9:f7:5a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a58dffc4-fa93-49fd-beda-bacef5dc91c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:94:ee:e7:31:37:26:0a:af:f3:d1:93:ab:
                    93:8d:30:8c:af:93:3e:bc:e3:c9:53:6f:62:8b:2a:
                    1a:02:e6:ff:72:d3:34:7f:3c:d6:4a:90:27:4d:23:
                    d7:26:a7:64:7d:fb:49:b7:ef:e4:a4:fd:7c:b9:af:
                    af:65:9d:2f:37:50:cc:bd:58:f5:f3:80:6c:6c:33:
                    31:8c:a1:f8:0d:ea:0f:c2:ae:7c:69:8b:db:80:ee:
                    34:90:67:ec:66:68:70:cb:89:7c:67:cd:13:cf:0e:
                    ba:cc:6c:5f:9d:e3:e4:ed:39:8c:d0:59:0c:86:df:
                    1e:22:90:7d:1f:98:e8:56:f4:1a:97:56:70:b3:81:
                    b2:37:63:1b:14:a3:96:0d:c0:92:3c:cf:30:71:ef:
                    b7:a2:be:9f:08:74:74:09:76:5e:92:52:68:f2:49:
                    cd:07:c0:ec:e6:0c:93:aa:32:56:56:01:02:b9:c5:
                    0b:de:41:06:2a:d6:5a:1f:e5:41:5f:2b:14:59:80:
                    e7:1d:92:c4:3e:af:07:0a:b6:00:46:b3:b1:7a:a3:
                    8f:20:13:d4:50:58:09:00:dc:b1:0e:90:92:41:8c:
                    8a:3e:1a:2f:76:29:f9:43:45:9e:42:9e:8d:34:f8:
                    9b:57:e3:93:66:de:30:8a:35:ac:2f:0e:18:4d:c0:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E7:10:0B:B9:C7:17:31:3C:07:76:F1:37:DB:B2:0E:38:30:E8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc2ffeb5-6936-376a-abaa-483a2b1c4efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:bf:11:84:c4:73:99:bb:0f:61:ff:f5:fe:6b:78:f7:58:
         a8:74:c4:74:47:4f:6d:f7:a3:2b:23:b4:16:af:d7:47:a1:ee:
         d3:6f:36:84:3a:bf:37:42:d4:1a:5f:89:2d:7d:d8:0f:18:a7:
         0c:41:79:cb:67:2b:04:a8:4e:f5:68:71:9d:0b:f2:cf:ef:92:
         e3:b5:5f:7c:f5:b2:fd:43:2e:e3:62:17:34:1f:18:bf:8b:a8:
         2a:11:2d:b0:7f:24:48:c7:ab:97:d3:f0:29:7f:30:ce:5f:bc:
         7b:a8:42:8e:f9:dd:ae:52:29:00:7e:de:fd:cd:85:26:0f:21:
         25:a6:3c:94:e8:aa:e6:af:33:f5:38:22:51:9e:ab:d6:22:df:
         14:ec:20:81:5b:76:1e:8f:2e:e5:d6:1e:11:c9:4f:fe:fd:e5:
         24:6d:ec:35:c6:a3:ee:71:68:4b:ca:07:17:d0:7a:d0:a2:f5:
         05:bf:70:af:2d:5f:50:d2:45:f9:39:86:e8:9d:ed:41:be:e2:
         d9:c5:f9:87:de:e6:61:9f:36:5b:af:9d:1d:40:67:fa:76:64:
         5e:24:39:2b:c0:52:93:fe:1e:89:ec:20:8d:c2:b8:95:e2:cc:
         f3:bc:fe:d6:cd:ec:4f:9c:a2:96:33:b0:ad:71:13:ed:2c:4e:
         38:3b:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:43:34 2026 by rpki-client