Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/40fe0f51-dc5d-309e-a6af-9cacd52547ee.roa
File:                     40fe0f51-dc5d-309e-a6af-9cacd52547ee.roa (raw, json)
Hash identifier:          ydb+g1aW0AZOGiXdKEDKmp0YDiYozbAGVIbr0QTxSuM=
Subject key identifier:   FF:B9:1F:93:F2:7B:07:3B:70:3F:AF:46:28:67:05:52:E1:69:F9:84
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584D8EF5766B2A6634F3D7E960C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/40fe0f51-dc5d-309e-a6af-9cacd52547ee.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     393740
IP address blocks:        206.180.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:76:6b:2a:66:34:f3:d7:e9:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=37c9c88a-f1e6-472a-b054-6d19ad8bff2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:dc:3e:6b:a0:1e:16:36:94:85:74:75:1d:
                    02:12:f3:1d:a7:1d:c2:97:6b:74:ad:6b:3a:94:35:
                    f7:16:62:66:85:b4:6a:b5:bd:35:4f:a3:68:0f:99:
                    b8:a5:64:cb:71:a5:ef:62:60:20:1f:e9:5f:76:ba:
                    51:58:43:97:e2:96:5c:28:92:5f:30:77:40:15:c5:
                    0a:ae:44:f9:a0:ab:16:d9:98:4b:b6:b0:9b:bb:87:
                    06:4c:4c:76:27:74:5b:36:1e:65:fc:d1:fd:ac:a5:
                    02:be:ff:2c:47:ff:be:5a:86:95:ac:8a:f8:7b:00:
                    79:ca:af:d6:2d:46:c4:4b:d1:1c:91:9d:04:54:04:
                    6c:d5:15:d1:fd:86:79:f5:78:97:d0:8d:bb:23:b4:
                    96:7f:6c:2f:54:bb:1c:3e:4e:21:6b:3a:07:24:10:
                    ac:09:ab:d6:a9:2d:61:e6:16:98:4f:ee:77:5f:14:
                    c4:6f:76:1d:92:88:f1:18:b6:da:05:97:09:7f:4b:
                    8b:1c:49:fe:bb:87:ef:fc:f4:0f:dc:43:01:b2:85:
                    96:46:a0:18:9f:b7:75:40:bb:8f:8b:2f:ef:b8:fd:
                    fa:26:89:98:c9:ec:79:32:68:14:62:0c:5c:af:21:
                    9c:f1:69:c9:bc:7a:2a:5c:64:f9:bf:b3:b7:d8:a1:
                    64:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:1F:93:F2:7B:07:3B:70:3F:AF:46:28:67:05:52:E1:69:F9:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/40fe0f51-dc5d-309e-a6af-9cacd52547ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bb:57:db:e5:d5:94:7b:52:75:51:ae:01:a1:bb:6c:fc:77:
         ab:37:13:33:cf:92:13:5f:45:de:9b:c4:e5:87:d1:3b:da:af:
         bc:e7:69:7f:a1:42:11:06:ef:c8:77:e9:89:94:6d:bb:7a:5b:
         93:9a:29:dd:db:d9:94:1f:3e:16:2f:a9:68:04:ff:ba:e1:ca:
         16:fd:56:e4:65:27:67:50:53:9c:e9:9e:32:29:46:db:41:c8:
         d1:fa:e8:03:8b:4b:25:14:a2:8a:50:e0:f9:2f:f5:78:19:49:
         b4:69:2c:54:ef:db:48:07:6c:4d:f8:fc:6e:a2:d2:bb:a8:84:
         73:d1:0b:a2:93:2f:94:fc:42:12:bf:3c:f2:54:da:f8:36:fa:
         93:cd:65:d7:b7:92:f4:d9:b6:29:89:8d:1b:08:ea:63:2e:27:
         02:e4:47:02:08:4f:84:c2:20:46:3a:ab:d3:bd:1c:36:33:78:
         5d:55:5f:b4:e7:68:66:82:60:c7:36:83:09:3d:ea:f5:d3:16:
         5d:49:6b:46:b9:a4:db:1d:1c:64:f2:ce:fb:b3:01:1d:47:5e:
         54:3b:cd:c4:57:f0:ee:9b:c9:31:96:dc:dc:37:1f:e8:58:2e:
         e0:ed:ee:f4:bd:ac:39:60:12:71:b8:57:f7:29:d8:14:27:cf:
         d3:64:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:03:44 2026 by rpki-client