Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa
File:                     457189b9-d3a9-3217-8a43-0445470cc4ed.roa (raw, json)
Hash identifier:          fsHtgb95Hu8WVmz/Q3GN+89RKjX2gNNz18xIgdu9lpY=
Subject key identifier:   FD:E9:C0:BC:03:41:B0:B4:E7:83:34:3B:48:E2:BA:32:3B:54:0F:31
Certificate issuer:       /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Certificate serial:       010D0C9F4328584DAAE034CCEAB7A904E6E3AEB0
Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     271
IP address blocks:        192.146.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:34:cc:ea:b7:a9:04:e6:e3:ae:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=00e73210-c3ae-4b02-bfdc-2292b9d0e9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6d:97:1b:4b:24:32:28:4f:e1:c1:e9:30:96:
                    0f:86:df:c9:c5:4b:ea:d3:58:79:0f:34:9e:d8:2e:
                    f2:6b:4a:28:76:df:d6:8b:41:b3:33:3b:37:f8:b2:
                    c9:cb:3f:29:57:1a:ba:a2:33:79:dd:fb:12:74:23:
                    7c:6f:e9:df:dc:35:5c:8f:18:1e:d7:11:eb:1f:15:
                    a7:bb:fa:91:ec:16:b4:e2:86:f3:e2:99:26:76:21:
                    32:ab:28:44:7c:85:f0:69:ae:12:bc:b3:18:aa:b1:
                    3e:6f:0f:c1:12:22:d0:fe:0f:2a:1c:85:9d:cb:3f:
                    9a:67:31:a2:3c:97:a1:9a:13:0a:c2:34:51:b0:ef:
                    ed:d7:84:84:62:8e:29:39:fa:bf:7b:d8:56:27:af:
                    bb:3d:fd:1b:2e:2c:37:22:23:88:6e:c1:c9:1b:13:
                    c1:67:6f:35:0c:e2:20:5e:48:8f:cc:49:4d:e5:4c:
                    3d:60:40:a8:a5:bd:fb:72:8c:1b:fe:35:c1:7e:4c:
                    7e:57:a4:7d:c4:f8:f1:b6:55:e6:e1:73:51:be:dc:
                    6c:e6:0c:3c:49:08:e9:5a:1b:dc:37:1c:43:f2:97:
                    e1:62:f8:70:d5:50:8a:a0:45:ac:c4:ab:9f:ff:07:
                    96:28:45:b1:ec:dc:ef:d6:ea:f5:e6:e0:1d:be:cd:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E9:C0:BC:03:41:B0:B4:E7:83:34:3B:48:E2:BA:32:3B:54:0F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl

            X509v3 Authority Key Identifier:
                keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:7b:95:b5:eb:9a:2b:b0:32:ed:85:7b:d2:2a:6e:24:b4:
         3b:d2:74:d5:16:89:d3:64:1a:9d:46:0c:9e:75:31:f0:40:2d:
         79:eb:c6:79:e2:e0:01:8f:95:63:f8:63:3f:96:84:c2:28:13:
         23:e3:b0:b7:1e:9a:c3:50:e7:a8:d4:99:3e:f6:c7:89:bf:66:
         21:88:cd:43:78:62:9e:bc:bb:aa:c3:69:ed:08:35:ff:e3:36:
         1e:33:56:c9:78:47:9e:50:92:e9:c9:13:ec:9c:cd:84:48:3b:
         e0:8a:77:c7:83:f2:45:cb:b9:c9:75:b3:cb:c0:20:24:8d:ea:
         25:cb:10:d8:a7:5e:22:e0:7b:85:a3:d4:8d:ec:38:8f:7a:cf:
         b6:7f:06:d4:cf:a7:f4:93:15:ad:5d:9d:30:35:78:32:71:7f:
         3b:5f:ad:55:94:95:2a:4f:86:7d:a8:7b:5e:f5:8e:3f:d4:9a:
         87:50:1d:1d:09:6d:b9:60:c0:19:9e:f2:37:21:8e:fb:d2:2e:
         c8:41:00:8e:17:cc:e6:12:31:55:69:97:34:74:a4:66:71:8d:
         9a:12:35:22:5d:86:9d:1c:d8:bb:fd:9a:e4:45:37:94:f4:05:
         a3:ff:74:e0:66:dc:98:ba:fd:1c:a3:13:b6:e7:4c:c0:af:27:
         49:33:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 01:40:55 2026 by rpki-client