Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdffbd5-2d22-3c06-9aeb-31cac2c1ec01.roa
File:                     dfdffbd5-2d22-3c06-9aeb-31cac2c1ec01.roa (raw, json)
Hash identifier:          owlQwXQ+zmfSYKpEvrberQyddbOs9PCJIPOX9LosCd8=
Subject key identifier:   96:64:70:03:9F:2B:38:C7:49:56:01:09:A5:0B:12:FC:D2:2E:B8:FD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA787E2AE1A7312F5A7202A20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdffbd5-2d22-3c06-9aeb-31cac2c1ec01.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397226
IP address blocks:        156.154.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:e2:ae:1a:73:12:f5:a7:20:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=03219889-5dfb-40b9-8160-570feb2832f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:09:e8:0d:5f:3d:69:4a:2e:be:ad:07:83:
                    ae:8b:d1:ac:df:c2:2e:bd:4b:2e:d1:77:f8:19:fa:
                    61:83:24:5e:0c:bf:cd:d4:c5:0a:fa:92:94:ef:24:
                    65:cd:79:8e:18:2c:ad:6b:e8:fd:9d:34:26:9b:70:
                    cd:d3:36:ef:c6:9d:fe:bd:e1:1d:b1:1b:75:55:f2:
                    a8:e3:ba:92:c8:0c:55:1b:ab:b1:d0:66:97:44:48:
                    5e:19:4f:df:c7:4b:09:e4:cb:ac:bb:8c:f8:ba:7f:
                    da:42:3e:4e:f3:0d:4f:23:b6:5b:cc:c3:d9:b3:68:
                    99:f2:3c:c9:bd:d6:32:af:fe:1f:e5:9e:2b:74:1b:
                    42:9b:ee:61:52:7e:da:be:95:6b:48:e4:30:e1:28:
                    61:c5:6b:8e:df:f7:f1:d4:1d:f6:0e:cf:80:50:89:
                    b0:87:00:b7:32:ca:27:5f:02:ff:9a:d7:de:89:ce:
                    bb:38:0a:e4:52:35:fc:a0:f5:c7:5f:74:ab:c2:25:
                    13:33:91:9a:2b:36:fb:2b:16:b0:b3:80:8b:48:0a:
                    4a:b9:3f:24:e7:fe:f6:01:18:69:3a:b3:ab:a3:b6:
                    75:b7:cf:fb:ce:94:ed:bd:be:bd:d0:eb:d2:fa:05:
                    b8:e6:86:44:9c:83:aa:85:2c:23:c2:49:cc:d4:55:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:64:70:03:9F:2B:38:C7:49:56:01:09:A5:0B:12:FC:D2:2E:B8:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdffbd5-2d22-3c06-9aeb-31cac2c1ec01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:f0:be:8e:9b:2b:01:1c:3a:7a:f9:4e:9c:dd:e8:9a:dd:
         a7:81:f0:da:2c:7b:9b:86:e6:3e:3f:20:71:59:05:4c:fb:ab:
         bc:9f:c4:d2:81:88:20:32:4e:05:b8:d8:5f:7b:e3:1d:a2:2a:
         92:88:e3:9c:d3:d0:dc:16:c2:a8:1e:ec:a8:a7:39:c2:ab:6c:
         04:6c:ef:6b:5c:84:32:37:77:45:9b:7c:fa:ba:a1:6e:5f:88:
         43:4f:d0:ab:fe:54:d5:10:9f:05:97:1c:da:3f:88:d8:1e:20:
         c5:b3:24:f0:00:66:ed:cf:5f:cc:af:dc:9d:d1:72:3a:34:de:
         2a:b3:48:e1:66:cb:7b:81:88:d8:f1:04:61:50:9d:59:14:3c:
         a9:69:5b:23:6d:d9:48:14:d5:6e:0f:64:97:c9:e8:66:a1:b4:
         1b:b2:ac:e5:63:58:e3:ec:7e:e5:56:85:a7:37:ba:04:30:aa:
         f1:e1:55:ab:ca:9c:0f:f1:16:9a:e6:24:ba:dc:dc:cd:1b:27:
         38:14:e5:91:0b:6d:8f:95:fb:bf:88:ac:13:bf:9f:05:bd:2f:
         c5:c7:78:8c:eb:8b:d7:08:73:00:52:db:1f:f0:4f:df:6a:f3:
         73:23:bc:a2:65:94:10:1a:88:57:d1:99:62:2e:78:cf:9f:87:
         16:c7:d5:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh+KuGnMS9acgKiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDMyMTk4ODktNWRmYi00MGI5LTgxNjAtNTcwZmViMjgzMmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ0J6A1fPWlKLr6tB4Oui9Gs38IuvUsu0Xf4
GfphgyReDL/N1MUK+pKU7yRlzXmOGCyta+j9nTQmm3DN0zbvxp3+veEdsRt1VfKo
47qSyAxVG6ux0GaXREheGU/fx0sJ5Musu4z4un/aQj5O8w1PI7ZbzMPZs2iZ8jzJ
vdYyr/4f5Z4rdBtCm+5hUn7avpVrSOQw4ShhxWuO3/fx1B32Ds+AUImwhwC3Mson
XwL/mtfeic67OArkUjX8oPXHX3SrwiUTM5GaKzb7Kxaws4CLSApKuT8k5/72ARhp
OrOro7Z1t8/7zpTtvb690OvS+gW45oZEnIOqhSwjwknM1FXWJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZkcAOfKzjHSVYBCaULEvzSLrj9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGZkZmZiZDUtMmQyMi0z
YzA2LTlhZWItMzFjYWMyYzFlYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAM68L6OmysBHDp6+U6c3eia3aeB8Nose5uG5j4/IHFZBUz7q7yfxNKB
iCAyTgW42F974x2iKpKI45zT0NwWwqge7KinOcKrbARs72tchDI3d0WbfPq6oW5f
iENP0Kv+VNUQnwWXHNo/iNgeIMWzJPAAZu3PX8yv3J3Rcjo03iqzSOFmy3uBiNjx
BGFQnVkUPKlpWyNt2UgU1W4PZJfJ6GahtBuyrOVjWOPsfuVWhac3ugQwqvHhVavK
nA/xFprmJLrc3M0bJzgU5ZELbY+V+7+IrBO/nwW9L8XHeIzri9cIcwBS2x/wT99q
83MjvKJllBAaiFfRmWIueM+fhxbH1SI=
-----END CERTIFICATE-----
Generated at Wed Aug 19 07:40:09 2026 by rpki-client