Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e87cf297-0b8e-3754-88fa-c3366eb9268a.roa
File:                     e87cf297-0b8e-3754-88fa-c3366eb9268a.roa (raw, json)
Hash identifier:          Lslmb8wakrbV4zjE8NOkcp/yDsqEKbx/1fAzpidkdRw=
Subject key identifier:   EE:EE:83:CD:11:6D:02:B2:E9:B2:43:29:30:ED:4E:BB:10:C2:80:F2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF7179B511F3AD45E98F10C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e87cf297-0b8e-3754-88fa-c3366eb9268a.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397242
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:9b:51:1f:3a:d4:5e:98:f1:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=c059c286-bdb4-4dbe-af03-1efdb8c8009a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:35:51:8d:80:a1:98:d0:ae:1b:e5:21:72:
                    79:ce:6e:eb:3a:3e:d6:5f:30:58:d4:7d:aa:f5:ff:
                    84:60:18:a7:18:4a:f3:ac:f7:9b:55:20:5e:d1:aa:
                    5b:b5:af:da:ef:c0:46:ae:fb:33:fe:3d:df:39:7c:
                    a2:79:74:54:a3:20:c0:95:bc:ca:b1:f3:3b:69:da:
                    cb:27:6a:4f:79:9f:c1:d4:69:8d:00:fe:84:26:80:
                    00:10:05:6c:24:9a:5c:6d:b0:fb:01:8f:45:5d:b6:
                    99:81:e8:ce:e3:dc:3f:b5:4a:d1:c2:bd:60:56:67:
                    01:bc:43:bf:34:12:df:60:f3:9b:39:12:13:19:bd:
                    ec:ca:40:b9:3c:1c:dc:d9:24:54:db:3c:68:78:bf:
                    c6:a4:a8:d9:a6:90:be:8c:4b:29:2f:fa:d2:cc:8c:
                    c5:ba:d0:ab:3e:2d:97:1a:1f:c5:a1:33:09:b6:91:
                    bf:5a:25:42:fa:c5:cc:23:31:bc:1a:b5:2e:32:f0:
                    35:f5:5b:d6:ef:d6:32:03:41:69:d5:3d:62:38:86:
                    3c:4c:2e:d4:98:50:08:7f:59:89:de:d7:d7:78:21:
                    79:96:15:1d:a9:67:ef:5f:42:ed:c7:43:04:94:45:
                    f5:ef:4a:6b:02:fa:07:66:a3:4d:1f:01:73:47:17:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EE:83:CD:11:6D:02:B2:E9:B2:43:29:30:ED:4E:BB:10:C2:80:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e87cf297-0b8e-3754-88fa-c3366eb9268a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:85:c9:7e:57:b7:96:27:0a:1c:23:24:f8:66:f2:4f:8a:
         f2:fc:46:8e:4b:9b:20:1a:12:60:d5:eb:67:d7:40:bc:e0:53:
         81:8d:14:19:b0:59:7b:d4:3f:ba:40:32:aa:bf:1e:ee:97:ca:
         59:c3:ee:34:d6:84:35:be:61:e4:18:bf:0b:f8:c1:cd:e2:fe:
         bb:45:48:44:45:58:27:69:e1:11:d3:80:6a:d8:b3:64:03:45:
         77:99:01:5c:96:2a:ce:67:aa:68:77:55:0f:b0:dd:82:f4:0b:
         2b:6f:4b:66:56:d2:00:14:5a:9e:70:f1:cc:d5:d1:5d:0e:ea:
         16:71:c3:15:3b:d8:32:1c:31:73:26:8c:76:11:fd:00:6b:5d:
         84:29:fc:c7:44:3d:0f:e0:1c:88:26:48:74:b1:1e:15:0a:d9:
         f1:82:62:de:2e:dd:d6:99:05:87:a8:31:0d:36:73:8a:01:18:
         e0:e7:c2:05:0a:6f:33:39:a0:d7:33:39:af:57:4d:53:29:77:
         7f:dc:7b:5c:c0:dc:5b:5e:2c:bc:77:f8:2a:a3:a0:d0:3e:7b:
         0d:76:b8:86:de:ea:22:20:a7:19:95:5c:74:e0:ca:9f:e3:91:
         bf:0a:c8:1c:2c:d6:63:aa:b2:89:7f:14:bf:73:19:d6:c7:f2:
         12:2f:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:45:53 2026 by rpki-client