Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59a39c35-0a55-3b24-8457-9c8892dd21e4.roa
File:                     59a39c35-0a55-3b24-8457-9c8892dd21e4.roa (raw, json)
Hash identifier:          /C9h8qNsffHMBkWpKC0ocEXLRx5jkU7rEsUYzU9aep4=
Subject key identifier:   5E:DD:9A:7F:CB:2E:3A:D3:65:B5:4E:69:E2:38:DE:2B:D7:98:BF:64
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497DF67EF743076AEEFD9380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59a39c35-0a55-3b24-8457-9c8892dd21e4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397239
IP address blocks:        156.154.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:f6:7e:f7:43:07:6a:ee:fd:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=baf4a05a-d8d2-4cfe-80da-407b2ed9305d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:84:ba:be:98:bf:e3:41:29:a1:61:f2:78:
                    54:e5:d7:e7:69:7c:a3:c4:77:8b:79:73:71:ca:05:
                    30:8c:d3:c8:9e:a3:c4:1a:68:6d:46:9c:86:6d:9d:
                    ce:59:ae:29:93:15:3d:4a:92:08:66:8e:78:80:28:
                    da:0f:e3:b5:50:b9:12:5b:be:d3:09:aa:b7:05:a5:
                    9a:a8:e1:39:5a:0c:ee:13:a7:36:6d:59:ed:08:37:
                    1d:f1:5f:65:82:55:a4:17:a8:ed:71:14:f1:e5:0c:
                    ff:1d:27:92:a8:8a:8c:07:41:d5:b0:22:e6:b9:70:
                    8a:07:71:57:4d:4c:3f:54:7f:ed:5e:15:04:08:af:
                    a0:49:05:b4:23:27:44:f2:27:17:02:2b:2f:84:a1:
                    d1:58:f5:a3:ab:0c:42:86:66:cf:c3:c7:0b:0d:41:
                    f4:35:74:25:f8:92:c1:e0:d8:1e:77:04:a2:9a:48:
                    b6:bf:bb:0d:e7:02:1a:ac:fe:b1:54:dc:93:91:ac:
                    1d:64:f2:c2:29:93:2e:9f:09:bf:77:1b:fc:d5:ce:
                    8f:f5:4b:5e:be:71:e3:01:51:b3:fe:0a:b5:06:21:
                    0b:25:47:3f:dd:c0:b9:ff:a4:bd:e9:fd:49:14:9c:
                    de:62:24:7c:ca:b5:bc:1d:a8:01:60:f9:86:94:f4:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DD:9A:7F:CB:2E:3A:D3:65:B5:4E:69:E2:38:DE:2B:D7:98:BF:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59a39c35-0a55-3b24-8457-9c8892dd21e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:60:b4:fd:2f:61:53:1f:57:4b:07:da:39:88:ae:f1:45:a1:
         df:25:57:98:f0:86:1b:93:54:1c:2e:84:41:9f:da:e2:61:13:
         83:0a:68:52:f1:f8:7c:d4:18:91:42:a2:2f:2a:30:0b:f2:6e:
         37:5e:d5:7d:6e:48:37:bb:68:be:2f:46:0b:2c:c2:49:6d:ac:
         3a:76:60:d1:d8:5f:d2:64:25:bf:62:71:37:60:3f:e5:2f:e0:
         3f:e3:34:0f:7d:7b:21:05:4e:54:37:a6:97:05:aa:08:e0:de:
         8c:2d:88:ed:ae:50:a1:72:c8:2d:a1:13:0b:9c:68:76:ee:1e:
         6a:3c:73:27:62:a3:5d:2f:06:28:cb:ea:c9:e8:05:ff:37:dc:
         76:2b:c9:3c:2b:cc:eb:8c:cf:57:68:ae:fa:27:0e:29:57:0c:
         f7:cf:e1:72:08:ed:7e:25:3d:90:8f:6b:98:c3:fc:d5:64:86:
         81:c3:30:28:fb:89:56:dc:8c:b4:cb:f7:a8:74:85:8a:02:f7:
         77:de:93:aa:d5:4b:84:35:7f:48:06:4f:54:75:b1:12:18:02:
         5a:2b:1a:9c:83:89:f6:01:dd:73:fa:76:4a:ea:6c:4c:72:80:
         cc:12:bd:06:37:55:30:b9:a5:c8:33:95:bf:0b:f8:a5:12:07:
         17:c6:2d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:23:36 2026 by rpki-client