Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6acef5dc-e0dc-312b-9d5f-f70613ff372f.roa
File:                     6acef5dc-e0dc-312b-9d5f-f70613ff372f.roa (raw, json)
Hash identifier:          G/tXjkvVXDIWQIwtzqclLO0Igj6dQWl7FxLtLyzAcko=
Subject key identifier:   59:1D:F9:AB:76:AA:01:AB:AB:64:A3:A4:AF:EC:42:6E:41:A4:4B:DF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09127AD808BD0931E689E900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6acef5dc-e0dc-312b-9d5f-f70613ff372f.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     12008
IP address blocks:        156.154.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:7a:d8:08:bd:09:31:e6:89:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=46f486f3-4bad-451d-963b-84c05617edf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:df:44:95:a4:04:89:b6:e5:b9:3f:24:04:
                    55:1a:7d:56:fb:34:3b:ec:78:b4:29:cc:d9:30:e5:
                    3e:1c:17:da:4f:f4:d0:d6:52:2a:00:95:5a:cd:ef:
                    d3:e3:8e:77:a2:f2:b8:a2:d1:91:ab:74:6e:dc:d9:
                    49:e3:b0:fc:e8:24:e6:35:0c:40:56:8d:a9:78:9f:
                    7a:15:05:5a:f7:6c:19:8f:2a:9e:04:79:5e:05:82:
                    8e:98:6a:45:a9:bb:05:6c:96:e2:e3:7d:b7:27:e5:
                    e0:7f:84:55:d9:94:26:9d:f4:6c:e2:cf:cb:94:df:
                    93:38:df:68:ad:5b:b3:82:e8:44:ef:10:4d:6f:1f:
                    2d:5f:55:fd:b2:0b:0e:b3:61:b2:5b:73:b6:8e:d5:
                    6a:17:7a:d1:e4:e7:b9:56:ef:1e:2b:df:3e:1b:21:
                    31:dc:11:8f:a1:c2:8d:69:d6:04:3a:65:6f:f4:cf:
                    96:ba:b8:97:58:98:c6:16:5a:61:75:0a:c8:0e:0f:
                    31:c2:b7:ea:b6:0d:92:30:c8:2d:34:d0:2e:63:2a:
                    9a:f4:41:04:18:d5:2d:df:fa:5d:a2:f6:d8:95:df:
                    13:9e:06:64:d1:39:27:95:69:76:79:9f:6f:52:b4:
                    94:e7:2a:02:ad:83:8c:80:5e:d7:5c:f0:51:47:60:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1D:F9:AB:76:AA:01:AB:AB:64:A3:A4:AF:EC:42:6E:41:A4:4B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6acef5dc-e0dc-312b-9d5f-f70613ff372f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:16:a0:34:c7:b3:78:94:39:5d:b8:12:23:0f:16:14:31:
         c2:43:3b:d5:86:cd:58:d3:4d:2c:e8:86:0c:ad:31:b2:90:be:
         b4:a0:9c:21:af:10:2f:6c:7b:bb:62:23:ec:4c:0f:6d:6b:79:
         48:23:e6:36:37:1b:90:22:7f:f3:48:1f:d9:12:63:78:74:78:
         6f:41:d7:07:ef:cc:8d:22:d1:89:e8:61:e7:53:aa:98:49:3e:
         a6:7a:0f:0f:d6:9e:b6:63:db:19:6f:27:93:43:9a:ed:ed:2e:
         08:d1:6e:3a:77:c2:ff:ac:36:55:f8:b1:03:db:27:8c:51:66:
         e9:06:e6:63:bd:52:ff:36:d3:a7:de:7a:a0:86:18:20:c7:fa:
         00:76:40:41:36:a7:2e:d3:c4:83:3f:8c:63:02:d6:ee:5e:fe:
         76:9e:c3:42:92:91:72:2e:a0:b2:38:4b:9c:0a:7a:d3:a1:45:
         6e:2d:a9:fd:50:2f:71:1c:08:e9:82:08:96:f9:3f:d4:6b:83:
         b8:c6:f1:a0:20:8e:dc:5f:83:e0:b9:92:d1:c9:19:58:28:b9:
         da:95:4c:6a:35:8d:d4:82:e4:e5:54:e0:c3:f1:06:2c:80:19:
         0e:b1:d8:a3:93:20:8d:d0:bf:92:f9:14:a5:9d:eb:6c:81:b6:
         9b:5f:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:45 2026 by rpki-client