Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a966f43-5f2c-3614-a744-5ddf972eda66.roa
File:                     7a966f43-5f2c-3614-a744-5ddf972eda66.roa (raw, json)
Hash identifier:          U01hEGT5NJK/UVOebei1KgkLQhUmTVNg0wkMsmVbXTk=
Subject key identifier:   9D:F4:AF:B5:C7:0D:AC:C0:B0:10:C7:81:E6:FD:DD:DD:7B:9D:FC:1C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D59EA7CBC7F7F3BDE683A16A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a966f43-5f2c-3614-a744-5ddf972eda66.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     397223
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:7c:bc:7f:7f:3b:de:68:3a:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=a04d84b0-dce3-40a4-85d4-2aaddad571a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:82:53:ce:b5:19:ab:47:c1:33:ac:32:fd:
                    43:79:a7:e2:57:87:2a:84:25:92:14:49:4c:fd:12:
                    04:98:ee:fb:8f:c0:41:d8:18:ba:0e:e2:ad:f6:53:
                    10:bc:3e:23:ff:95:3a:78:05:a3:d0:cc:4d:ce:88:
                    cd:b9:16:d7:69:f6:23:f9:14:0e:89:4f:a9:d3:c9:
                    6a:08:66:f0:8a:cc:a0:5e:48:71:a9:41:d6:63:35:
                    cb:9a:b6:90:b1:95:38:55:30:a7:12:42:25:a3:da:
                    53:d6:87:55:e6:06:05:92:1f:1f:48:75:a8:72:e8:
                    34:58:74:b6:36:3c:50:96:32:1d:26:88:15:1c:d9:
                    4b:e5:37:cb:0f:07:72:a9:3b:67:25:ff:4c:ef:91:
                    dd:a0:aa:4e:db:d9:e9:25:0c:f0:80:9e:03:c2:39:
                    a9:9b:d8:ec:ec:73:4d:0b:a5:8d:4b:f0:0c:de:3a:
                    d0:54:26:fb:68:5c:b2:39:0a:c6:f8:c8:77:bb:d1:
                    fe:cf:c9:60:a2:0b:f8:5e:d1:8e:44:dd:13:af:50:
                    49:e4:ac:6b:62:95:dd:05:49:3c:f0:5e:f4:cf:77:
                    0c:97:a0:9d:27:29:c8:4c:0b:8d:7f:d5:70:5f:ff:
                    cd:40:d4:d0:52:6a:11:61:bd:cd:2a:a0:e1:58:dd:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F4:AF:B5:C7:0D:AC:C0:B0:10:C7:81:E6:FD:DD:DD:7B:9D:FC:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a966f43-5f2c-3614-a744-5ddf972eda66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6a:d8:eb:43:bf:49:34:76:26:7d:b8:54:6a:da:ef:f1:75:
         5e:86:f5:4e:67:99:dc:da:2a:67:30:9b:d4:cf:c5:11:41:2d:
         de:66:7f:48:6b:83:17:39:de:f9:ce:19:8e:10:6c:5a:b6:80:
         e5:32:db:d9:4f:e1:e7:0e:9d:cf:3a:6d:59:c5:2c:3b:74:6b:
         5c:70:55:ed:ce:6c:c9:23:36:91:9d:9f:20:8f:80:96:52:11:
         27:5b:c5:62:ac:92:ed:07:5c:58:90:48:2c:c1:92:58:5a:20:
         e6:a8:e3:57:e2:50:1f:50:29:55:ab:0e:0f:e9:5f:af:fa:25:
         a0:8f:d3:9e:e4:a6:65:01:3b:83:ce:c0:f5:00:53:cf:16:10:
         eb:c2:f8:bc:42:e2:39:c8:1b:1b:42:9b:d6:7c:b3:f1:79:83:
         a4:df:2b:85:41:e7:f4:c8:9e:dc:27:3f:27:51:a5:89:4b:13:
         50:39:d0:a1:65:0a:b1:fa:b4:48:a6:95:38:3e:42:d9:42:c6:
         15:82:da:6e:51:70:0e:a4:91:f9:c0:4b:db:36:a1:6a:e0:dc:
         c9:5b:ce:1f:72:26:88:05:ad:34:87:72:7d:df:24:18:4f:b6:
         50:b5:fe:88:5d:30:8c:33:55:2b:9d:31:6c:2f:87:7a:4f:c0:
         df:de:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 00:35:05 2026 by rpki-client