Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbf2c10-0591-3093-baea-dd92653f74f8.roa
File:                     1cbf2c10-0591-3093-baea-dd92653f74f8.roa (raw, json)
Hash identifier:          Kno6LTbRTk01VLy5vcY5MjDz+OSlMqXHRMKwPcVnDfg=
Subject key identifier:   64:0A:02:69:F8:12:3E:4A:BF:14:7E:53:96:E9:FA:8E:D7:64:81:05
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4C609D1FF405FE15A0280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbf2c10-0591-3093-baea-dd92653f74f8.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397228
IP address blocks:        156.154.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:c6:09:d1:ff:40:5f:e1:5a:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=99207c76-e7eb-4f85-9d27-26f6d82a8b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:58:fb:00:0d:93:b3:64:75:45:1a:72:c2:
                    3e:58:95:b6:e6:fd:2c:3a:71:67:2c:51:2c:c9:c6:
                    74:66:12:ff:79:51:c6:5d:84:af:ea:5c:dd:d7:4d:
                    2e:d3:00:55:84:45:95:83:2e:58:2a:63:70:a3:fc:
                    36:7d:be:36:81:e3:fa:25:a2:2f:cf:8a:38:4a:63:
                    e8:52:77:3b:34:83:13:c5:18:97:d2:e1:b8:04:b8:
                    08:ab:4c:16:51:ad:4a:2e:f0:4c:85:e5:01:ff:e3:
                    97:dc:03:62:3a:29:90:24:b7:b0:3c:cf:c6:8d:71:
                    a5:49:79:73:f0:b1:1b:af:cb:52:9f:23:46:6a:f6:
                    9f:bf:a2:6b:af:98:47:e3:13:79:82:65:5c:7d:81:
                    90:aa:c3:54:7f:e6:78:7f:22:dc:59:70:ce:42:84:
                    59:80:ac:2f:70:87:47:4b:bd:e5:02:60:a3:43:63:
                    c1:93:67:48:12:72:76:e9:49:33:d8:19:96:3b:31:
                    04:50:f5:93:f0:90:5f:16:5d:59:5e:9c:a5:ef:79:
                    7d:a0:9a:ff:f8:c3:9b:54:65:04:ec:a9:7e:15:4d:
                    a2:8a:36:03:6d:54:cb:bc:81:30:ad:d1:42:e4:0d:
                    3c:85:ea:5d:2f:15:9e:6f:db:78:14:96:08:19:72:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0A:02:69:F8:12:3E:4A:BF:14:7E:53:96:E9:FA:8E:D7:64:81:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbf2c10-0591-3093-baea-dd92653f74f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6d:a8:27:0c:4e:70:96:1f:3e:ee:85:8c:dc:ac:fb:68:1a:
         86:df:5d:60:a7:54:c1:6d:23:e7:4d:58:06:d2:cc:0e:92:d0:
         cb:4a:54:e4:70:b2:ac:03:4e:9a:b6:a8:44:3a:82:6d:25:cb:
         b1:69:45:1c:71:26:c7:ca:7c:e8:ff:77:55:a3:75:5f:71:51:
         42:eb:6b:d4:df:0e:37:49:f9:57:dd:14:07:42:75:08:73:9b:
         16:f1:eb:25:b6:62:41:9c:d4:9b:61:1b:98:56:90:d7:d8:07:
         eb:41:df:df:d1:13:e8:04:ee:d9:c5:1e:02:99:98:d2:34:69:
         75:09:5e:c3:08:f8:0b:98:98:70:4c:73:7a:cc:bc:ed:b2:43:
         e3:11:c5:47:da:ee:f5:9d:42:78:6a:d5:ac:11:f9:d2:d9:89:
         07:4a:e1:78:31:ae:ea:6c:06:a2:6f:b6:6f:ab:ad:4e:c7:28:
         eb:60:79:a0:5d:f5:91:25:b3:b1:e7:34:c3:c9:9b:51:3a:79:
         ce:b3:30:93:d2:88:fa:f6:0d:84:37:00:58:a1:cf:62:73:5c:
         e1:e0:74:51:47:5f:80:86:6a:ea:86:c0:65:ed:1b:96:b9:8a:
         cb:19:a3:38:cf:a6:19:30:87:c1:e7:75:cb:24:b2:a6:67:52:
         8f:15:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:32:34 2026 by rpki-client