Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27012133-cc79-3c9a-8287-7facabe41e02.roa
File:                     27012133-cc79-3c9a-8287-7facabe41e02.roa (raw, json)
Hash identifier:          VSkeIJfIZb2Q7bA5DFhs7yorEXezRgMa4Pa2B9JzUvE=
Subject key identifier:   54:15:EF:5A:D8:F1:F1:E3:A7:50:36:3C:26:01:FD:72:95:BA:4B:60
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD6116A98BE9025B7734800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27012133-cc79-3c9a-8287-7facabe41e02.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397223
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:11:6a:98:be:90:25:b7:73:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=aa907fe0-7a6a-4ba0-bd42-4a09046beb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:3c:d6:a2:49:a8:dc:1e:d1:42:f1:d1:bf:
                    a1:d7:04:54:ef:86:d5:90:8c:15:41:a2:83:d3:d9:
                    62:7a:ca:2a:d2:fe:67:5e:26:23:ee:4e:2b:fd:44:
                    ff:95:a0:c6:9c:d3:20:d6:5f:44:98:c0:95:1f:9f:
                    24:84:ce:38:86:b9:b2:a3:c6:69:bd:c3:9f:e8:40:
                    d5:ee:86:58:e0:de:23:8c:80:0b:c7:46:6e:07:7f:
                    be:ec:31:aa:0c:03:2e:a8:55:ce:10:16:c9:12:44:
                    3d:2d:50:50:f1:7e:98:6b:06:9b:82:fb:bf:7f:11:
                    6f:3e:c6:3a:f5:6b:69:74:c4:84:49:92:d3:90:ac:
                    e6:14:85:5a:64:00:07:30:26:82:4b:06:4f:a8:4e:
                    57:29:92:e4:24:97:e5:ae:f2:ed:1e:2f:f4:48:83:
                    f5:ad:51:e2:d0:59:89:c9:a0:c3:64:21:8f:de:fa:
                    aa:fc:64:3a:56:ae:29:12:c4:f4:e1:f5:c6:75:1f:
                    1e:94:67:89:f7:46:00:bd:11:b5:9f:d2:23:ef:fe:
                    5e:85:ec:93:20:9e:81:55:2e:6d:dc:4c:e5:3b:90:
                    60:ed:55:51:1e:76:7e:d5:8c:26:57:74:e4:c0:06:
                    3b:6d:61:8b:f2:b7:6a:9a:c3:f7:5f:19:11:98:4c:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:15:EF:5A:D8:F1:F1:E3:A7:50:36:3C:26:01:FD:72:95:BA:4B:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27012133-cc79-3c9a-8287-7facabe41e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cc:b2:d9:4a:d2:c4:33:98:b4:6a:33:f5:34:1d:d4:5d:9a:
         f9:4d:e1:79:f9:50:42:76:51:75:58:0c:9e:70:ac:49:42:09:
         d7:87:98:c1:31:08:fc:57:d2:9d:45:2e:98:aa:8a:35:5c:8e:
         e3:0f:12:fe:88:89:e5:8d:57:9c:b5:a4:86:b5:b3:86:f8:46:
         26:e2:f7:6b:90:90:b7:15:49:6e:7e:cb:61:28:84:25:4f:86:
         37:75:c9:78:a8:b9:55:c4:5f:88:a2:7f:bf:43:38:af:1a:c6:
         83:7e:6a:11:7d:98:ce:e7:71:bc:5f:b0:f1:84:6f:53:f1:0e:
         01:24:e8:43:d0:a0:07:df:75:bc:23:4b:50:c6:08:f7:00:5e:
         57:70:69:38:67:1e:5d:86:c3:9b:86:b3:85:cd:18:b4:96:ff:
         ad:51:f7:cc:81:8b:78:05:d8:b2:7f:81:5c:f4:b1:70:ba:8c:
         a1:10:82:d5:fe:d8:b5:4a:79:7e:d0:cf:6c:a1:85:1a:c9:5a:
         6b:45:1e:0c:af:95:7f:a7:f7:a8:48:4e:a6:4b:cc:41:41:45:
         32:63:62:c0:ca:b1:7f:54:65:c2:74:da:17:61:a9:4a:ca:fd:
         b2:bc:a3:a1:e8:02:cd:2a:b1:73:12:16:94:10:5f:bb:9d:bb:
         1f:63:10:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:09:16 2026 by rpki-client