Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f055150-cb3f-327b-9c1f-11fe84cb2cce.roa
File:                     9f055150-cb3f-327b-9c1f-11fe84cb2cce.roa (raw, json)
Hash identifier:          kUQejuWyJm2+rHq3BaTvQAGB4g4CM2Dxl3t4PN6GvcQ=
Subject key identifier:   D6:06:D0:EE:A7:9C:1C:23:C5:8C:54:CF:D7:E4:3A:54:81:4C:D7:22
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF7178C52814FB3FB428B3780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f055150-cb3f-327b-9c1f-11fe84cb2cce.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        156.154.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:8c:52:81:4f:b3:fb:42:8b:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=fccace49-1bc7-48cb-95f7-0406bab32552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:86:e1:c4:24:af:7c:2c:b5:89:9e:bf:9e:
                    4e:e9:3a:cb:6a:0a:d0:48:85:ff:f0:f6:55:77:fc:
                    68:13:91:1d:7a:98:f1:e8:61:62:86:ea:ef:06:07:
                    a1:d6:32:9e:97:31:f8:62:7f:e7:80:b8:13:b4:97:
                    fb:79:4f:4f:89:e9:b6:3a:40:cd:0c:aa:f4:7c:02:
                    af:ec:36:c0:5c:c7:ee:c4:f7:13:71:79:4a:c8:fb:
                    f3:5e:8e:7a:e7:0f:73:0f:59:d5:94:c9:04:d8:0d:
                    fa:f6:17:36:c4:1c:cf:f8:14:11:6e:c8:00:7e:7d:
                    e9:88:d2:0d:6a:4f:6d:18:44:f8:03:61:c4:3b:76:
                    83:1a:c2:f3:26:97:68:3f:a3:90:0b:95:b2:54:32:
                    de:e9:2f:a7:49:e5:5a:ae:50:e4:04:8c:b2:73:c0:
                    ac:b5:17:c1:81:b4:43:ee:26:af:f7:62:5e:8a:14:
                    df:47:6b:5a:d1:b0:56:53:37:3b:77:29:7c:16:00:
                    65:5d:c6:71:6d:e3:8f:ae:6c:49:66:bf:ac:7e:0f:
                    d9:26:bd:ed:7b:07:25:c9:a7:25:96:8d:73:b9:94:
                    1a:b6:29:ae:c4:31:bf:70:a4:39:2e:77:71:0f:19:
                    35:a4:0e:b1:c5:b3:4b:94:ff:14:4c:6b:77:e2:5b:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:D0:EE:A7:9C:1C:23:C5:8C:54:CF:D7:E4:3A:54:81:4C:D7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f055150-cb3f-327b-9c1f-11fe84cb2cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:4b:76:dc:20:f5:6b:65:94:cc:5d:fe:e8:3e:dc:1b:fa:
         62:43:14:91:59:83:b9:bd:76:9e:e5:a0:75:6c:38:2b:a1:05:
         01:6d:6c:a9:b8:7b:66:68:81:a8:ff:8a:ce:62:f2:fb:2d:cb:
         1a:f3:c6:5a:90:1b:de:9a:ca:12:10:f1:8a:bb:d9:d7:4c:ba:
         ef:e5:e9:cd:fb:60:6a:88:f1:a9:e7:ca:be:54:7e:97:7a:95:
         e7:87:ca:08:d0:71:b7:3a:89:a7:14:a5:c9:fd:35:97:0f:a5:
         46:0c:76:63:d0:1f:78:35:3b:d2:5f:10:12:c5:2b:93:8a:a0:
         c9:e8:54:c8:75:be:7e:3e:fe:c9:9d:01:39:ae:f3:53:63:c3:
         66:a3:ed:a5:56:0a:bc:46:34:05:81:49:e6:42:35:26:ac:d6:
         07:97:7e:47:6d:d4:82:ce:bd:53:33:d3:a6:bc:3c:41:66:f5:
         6a:8c:6a:ae:2b:e6:3f:f7:b2:15:1a:6b:24:72:7a:d7:78:25:
         5a:3e:a7:5e:f9:9e:e3:bb:f5:4c:31:53:37:a6:b4:f1:6b:2c:
         46:58:c0:70:e5:15:17:33:56:f3:cd:02:07:e4:01:46:99:84:
         2b:6a:27:49:55:5e:dd:b5:17:d5:f0:4d:66:41:03:e8:d6:d0:
         76:d2:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 12:31:57 2026 by rpki-client