Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc905a3c-c24e-35b3-a004-e03739e0caf0.roa
File:                     cc905a3c-c24e-35b3-a004-e03739e0caf0.roa (raw, json)
Hash identifier:          zwv91FY7PzuI9nOqHAvkKPhATRP0S2sB+jJzW8ZyMrE=
Subject key identifier:   27:F4:16:7A:C0:E2:5E:AB:F3:5B:53:FF:D5:3D:6A:37:C5:EC:AE:3D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FED644E6E49C038BC2D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc905a3c-c24e-35b3-a004-e03739e0caf0.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397236
IP address blocks:        156.154.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ed:64:4e:6e:49:c0:38:bc:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=144d24df-ebdb-42e7-968a-4e76309d4d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:d4:74:5b:33:3b:3e:d6:d7:ef:83:cf:81:
                    78:9a:96:e5:ce:27:ba:ee:08:b0:5f:2b:a5:62:23:
                    ac:86:3c:cf:d0:ee:95:22:3a:d6:ee:08:83:5a:9b:
                    e2:1b:27:c6:d1:b7:72:93:9d:4c:1a:5b:c0:e9:7f:
                    19:d5:c2:e9:17:1e:ee:92:b9:c9:40:71:fb:a2:ca:
                    1c:63:72:72:3d:25:b6:b5:be:cf:93:e2:c8:ca:2e:
                    cf:53:16:d2:ec:6c:09:e1:86:6e:19:c5:cf:89:a7:
                    df:ae:68:49:a9:e2:4e:80:5f:78:70:0e:fd:d0:90:
                    c9:68:dd:8b:e9:92:10:20:48:e1:b1:2e:7c:c5:78:
                    b9:ba:ed:be:dd:e1:f7:38:5e:cc:43:65:4f:2b:32:
                    a5:cd:76:7a:16:01:bc:3f:1f:60:c2:73:c8:0b:db:
                    f1:d8:d4:02:22:f7:bd:d6:c3:c2:eb:a5:f8:48:a1:
                    21:ca:1d:7e:43:f1:2c:82:54:26:6b:b9:c4:60:6d:
                    81:a1:c7:4d:b1:ee:c4:26:98:38:86:ee:41:f1:3b:
                    b5:81:04:ac:80:fd:c0:e2:21:11:8d:5c:0f:0c:a4:
                    34:94:d0:de:0f:7d:39:26:95:57:18:f0:31:ef:cc:
                    7c:29:22:8b:c6:a2:5d:72:06:90:7b:72:dd:9b:d1:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:16:7A:C0:E2:5E:AB:F3:5B:53:FF:D5:3D:6A:37:C5:EC:AE:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc905a3c-c24e-35b3-a004-e03739e0caf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:0a:c9:56:b6:f5:2a:45:b7:04:dc:c8:ef:f6:ab:ac:99:
         ee:ed:00:71:94:22:27:0f:83:97:cf:6e:2b:ae:79:c3:0e:93:
         b2:e2:46:4f:f3:22:68:e9:7b:ab:91:ed:ff:fc:cc:f5:85:db:
         2a:80:fe:63:9e:83:38:32:3e:07:14:e6:26:28:14:93:6d:4b:
         a3:26:20:9d:2f:cc:af:74:bb:67:55:43:5e:a5:42:2c:49:5e:
         4e:d5:6b:cf:8d:62:e5:11:f9:8d:79:26:c5:80:f1:ca:43:a6:
         d1:b1:af:af:14:59:4c:f5:16:d6:ba:0a:77:e6:3f:8b:dd:88:
         1e:65:26:d7:b9:fd:8e:fe:ff:1f:44:3e:f7:3b:1c:85:b4:80:
         04:49:f8:48:f5:df:00:21:94:92:38:8d:89:d2:ca:9e:22:5e:
         34:3d:ff:2c:03:ca:cf:28:77:41:1b:f0:80:8c:c9:b7:66:32:
         f2:41:9d:5b:c9:f2:cc:27:5b:78:6e:04:3e:63:63:0d:48:49:
         35:e2:9c:aa:c4:27:fe:8b:72:e0:c3:50:6d:cf:e0:a5:ac:d0:
         da:f0:9f:ff:2d:e3:40:ce:98:fb:3d:df:13:ea:b9:46:b3:9c:
         83:13:5c:74:b7:7d:88:e9:fd:92:be:f6:61:ed:49:8c:13:d1:
         14:e1:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:09:09 2026 by rpki-client