Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68a1acd1-0da8-3935-abf0-fed5c3e7e59a.roa
File:                     68a1acd1-0da8-3935-abf0-fed5c3e7e59a.roa (raw, json)
Hash identifier:          EjxKXUB9smY6jaAfRS9a7ND3RvShze0EMdNb7B70YHE=
Subject key identifier:   89:8B:1F:29:C1:B0:31:04:F2:B1:9B:49:25:00:15:CA:3B:7F:87:42
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA79911B384F67F7E7AD11240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68a1acd1-0da8-3935-abf0-fed5c3e7e59a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:11:b3:84:f6:7f:7e:7a:d1:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9da3a950-d57b-4f07-8bac-c15c9aad14cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:ed:33:ab:cb:20:11:33:f0:f6:96:cd:a9:
                    aa:a3:f7:a8:df:e5:83:cd:63:88:6e:5c:c9:c5:ad:
                    b8:f4:5c:f8:73:b4:3e:d5:c9:fc:4c:bc:32:3c:97:
                    a2:17:da:f1:d3:1e:f0:92:82:86:3a:8e:97:92:02:
                    eb:24:8e:99:f1:a5:d4:16:9d:19:69:55:f7:df:94:
                    a2:15:65:18:25:41:35:a2:8b:6a:13:68:8d:74:6d:
                    c9:fd:2c:62:67:b1:01:47:cd:24:79:28:7e:ce:23:
                    8d:93:1b:c5:cc:6e:78:cf:fc:7a:bd:fb:be:7d:62:
                    47:ed:9a:44:7f:7f:74:68:92:68:f3:d3:62:96:56:
                    df:bf:b8:61:8e:7c:f7:92:54:35:2d:bb:ab:4a:f2:
                    ca:6e:e9:a3:c5:29:b6:9a:67:8a:3e:6a:6a:57:57:
                    14:ee:6f:bc:17:8a:46:e0:c6:b1:b4:f3:cf:08:88:
                    8d:20:6f:1b:5d:29:2e:a2:89:c5:88:4f:42:34:59:
                    71:61:48:43:d8:d4:a2:0a:6d:93:51:a0:d2:66:82:
                    88:d3:2b:95:3d:a2:ec:36:eb:46:d8:9c:28:1e:52:
                    22:3e:5e:d3:bd:23:8b:5b:06:be:41:ff:92:51:33:
                    07:da:e4:14:5c:81:b1:df:ec:c2:23:72:32:97:df:
                    4c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8B:1F:29:C1:B0:31:04:F2:B1:9B:49:25:00:15:CA:3B:7F:87:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68a1acd1-0da8-3935-abf0-fed5c3e7e59a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1e:8b:f4:01:69:95:39:57:ef:57:a2:dd:15:14:ca:af:37:
         79:90:af:2e:71:6d:88:e7:db:42:b3:64:5f:7b:b9:9d:a8:00:
         7b:01:4e:ae:8c:55:0e:9a:3f:ea:cc:f7:03:16:b4:0a:dd:b6:
         c8:88:ef:c8:e9:9d:bf:fa:47:18:12:b9:4f:3a:45:57:ca:12:
         76:6c:35:fc:ed:bc:a9:ea:54:10:69:27:6d:dc:40:95:c8:d5:
         d1:a2:f8:ed:eb:9a:c1:9f:b2:7b:9e:29:6e:9a:e9:fd:fd:7f:
         f8:c9:e3:18:08:f0:19:73:61:0f:36:c6:a1:fd:45:41:7a:a0:
         5c:e2:36:58:92:a1:a8:8d:4f:92:c0:d2:62:40:64:02:92:c9:
         27:53:2e:1f:33:a7:cb:87:1b:d1:7e:19:47:94:8e:67:ca:6f:
         90:18:e6:0b:b7:13:c2:b9:b8:d3:e2:da:ef:7e:71:57:bc:46:
         ff:16:88:de:54:b8:59:a7:1e:02:4a:c9:09:bf:de:a6:73:1a:
         78:23:55:7b:c5:33:4b:1a:05:96:cc:e1:32:68:e3:d2:90:0c:
         6e:49:fc:fa:26:c6:b4:bf:97:57:0f:c8:d2:f6:6e:f3:1a:5a:
         d5:64:f2:f6:ec:23:61:de:29:81:7b:e6:cf:28:6b:8c:df:3c:
         40:7b:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 12:31:51 2026 by rpki-client