Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6b4201-75a0-3979-8f25-e46f334b1f9d.roa
File:                     ee6b4201-75a0-3979-8f25-e46f334b1f9d.roa (raw, json)
Hash identifier:          A9b03bOL5zmOeaxan9DoRKGFsqomOaNHDR9rvdFuFnU=
Subject key identifier:   09:B7:8C:CC:A5:A0:B0:07:15:F5:D0:26:87:B4:99:13:9C:9E:44:C7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DA11AE053B57D2052C326FE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6b4201-75a0-3979-8f25-e46f334b1f9d.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     399167
IP address blocks:        156.154.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:e0:53:b5:7d:20:52:c3:26:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=1a421d3b-b044-47a3-b1f7-d778b8e9c067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:a9:d5:bf:98:cd:cc:70:5d:b7:0b:c0:41:
                    80:57:11:d8:d7:57:cf:f8:99:04:cd:e3:49:0a:97:
                    27:e0:46:00:a5:69:a8:c2:f0:3e:ad:b9:ed:d4:00:
                    1b:c2:e8:4c:7c:5b:a3:81:f8:89:ca:a8:ab:46:db:
                    2d:51:35:86:a4:14:4b:90:80:06:ee:43:b7:8e:57:
                    4d:0f:de:08:56:8b:b6:94:e4:04:7e:bf:20:fc:01:
                    bd:58:63:0a:9a:03:31:15:31:00:07:87:61:5c:98:
                    f7:6a:f8:ca:8e:27:74:69:e3:50:24:11:b7:fe:ca:
                    5c:a1:56:e1:34:0f:60:bd:29:e6:3e:9c:99:41:42:
                    4b:f8:01:8a:39:de:f3:2f:bb:b3:51:a7:03:75:ac:
                    c1:ca:4a:80:f1:2f:40:b7:43:64:10:ef:6c:bb:5f:
                    d7:e0:da:05:83:83:6c:27:49:f4:0c:2c:9c:96:51:
                    78:75:e6:37:6d:ce:1e:bc:94:13:4e:33:7b:90:b5:
                    bb:0c:80:ae:fd:04:3b:2d:2e:26:44:61:10:07:01:
                    0a:46:9f:f1:03:dd:3b:5f:21:96:9d:b0:0f:99:a6:
                    50:d4:c1:bf:52:ca:74:a9:79:93:3f:d0:c8:14:16:
                    e0:62:24:f8:8b:a7:d8:87:0d:f3:95:32:a6:0f:4f:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B7:8C:CC:A5:A0:B0:07:15:F5:D0:26:87:B4:99:13:9C:9E:44:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6b4201-75a0-3979-8f25-e46f334b1f9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:79:9b:08:de:fe:63:e1:c0:d2:64:8a:d8:47:f4:99:2b:
         a1:fa:2a:20:c3:3e:8c:17:92:8f:3a:0e:ea:d2:bf:bb:07:d2:
         36:56:d7:e9:17:fb:74:7c:3c:8e:56:42:0b:22:07:cb:23:f9:
         12:e4:3f:32:bd:5e:00:54:4c:1a:38:30:d1:3f:25:0e:73:fe:
         a6:18:e5:7f:c9:c5:e9:4e:f7:c7:19:3f:0b:67:35:46:c1:67:
         d8:6a:a8:98:f1:37:e6:b8:bb:73:04:63:73:7e:22:a4:fb:3b:
         f7:b5:db:fc:a8:f9:62:16:5a:16:1a:a7:60:06:2a:ce:30:44:
         b9:9d:1b:d1:e8:6e:81:f3:0d:54:a3:4a:d1:20:d3:cb:db:a0:
         0d:e4:ab:aa:d9:9e:eb:81:0a:4e:9e:79:1c:22:a6:50:b6:9e:
         26:db:85:b1:cd:5c:d6:4c:23:06:2a:42:85:b0:d4:ff:ee:6a:
         34:0f:5b:de:67:b2:f0:26:74:d2:6a:23:6f:87:b3:5b:49:fb:
         66:14:d2:54:3a:f0:55:27:61:10:f9:21:fb:a8:75:20:2a:30:
         57:44:d9:f5:f5:59:bb:2e:72:74:59:f8:9d:3a:05:ac:91:15:
         05:39:06:d5:19:ad:82:19:a8:df:bb:94:54:ee:e6:e9:50:9b:
         ef:5f:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 20:27:49 2026 by rpki-client