Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01b9e03f-a287-37cc-88a4-af4b68be061d.roa
File:                     01b9e03f-a287-37cc-88a4-af4b68be061d.roa (raw, json)
Hash identifier:          f61yhp4wlYCySaMvk9r4XhEzwbo0hgySMP8+uUWEUQc=
Subject key identifier:   4D:23:7B:76:CE:94:E8:21:8B:8A:57:4A:8C:46:03:14:6E:B9:A5:DD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D0912991DEBB62549894EB800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01b9e03f-a287-37cc-88a4-af4b68be061d.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397232
IP address blocks:        156.154.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:99:1d:eb:b6:25:49:89:4e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=dadf017f-6ee5-45ad-8bb9-4133d1609266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:17:ea:d9:ee:62:2c:a2:d1:74:67:ff:c6:
                    43:2e:af:6a:f1:b2:0c:8c:f4:8e:0e:9c:26:dd:90:
                    44:d8:f8:4c:83:fb:88:95:10:20:15:37:32:8f:f3:
                    5d:d5:17:28:02:16:7f:b7:18:58:67:40:66:11:da:
                    83:2f:95:53:c9:0e:4e:95:f5:41:df:c5:7d:42:d5:
                    c1:a1:39:b1:8c:71:e9:c1:f0:d3:bc:d6:7b:bd:85:
                    2f:eb:18:ce:e8:a3:79:88:b4:3d:f9:c1:14:d3:37:
                    bf:b7:c0:3f:2b:97:21:b8:67:09:ae:bd:81:ec:5d:
                    10:a4:f2:1d:f0:c5:c7:c7:41:39:18:69:03:27:b2:
                    b5:bc:3e:ec:4b:a5:3c:9a:52:0c:4d:50:26:c6:0a:
                    5f:46:b5:89:bc:0b:72:f6:78:5b:8a:6b:09:8a:b6:
                    6c:d8:9f:58:60:b2:45:13:39:b6:b0:17:ce:e5:c8:
                    b1:8c:32:88:2b:d0:b2:e4:e1:12:96:27:fb:af:ec:
                    7c:a0:5a:8c:a4:8d:f8:15:fc:dc:78:6d:d6:5f:ff:
                    90:a0:bb:aa:39:fd:70:50:9c:25:23:c5:94:06:e0:
                    3c:6e:98:f8:d9:86:17:03:94:5a:65:ac:f8:50:17:
                    ed:77:40:a4:f4:0a:23:b0:14:d1:1e:8e:03:e8:aa:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:23:7B:76:CE:94:E8:21:8B:8A:57:4A:8C:46:03:14:6E:B9:A5:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01b9e03f-a287-37cc-88a4-af4b68be061d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:be:db:74:75:c1:0b:7c:82:6c:f9:e6:ce:99:2c:b6:64:5d:
         25:56:79:19:7b:76:8b:fa:95:d5:5a:1d:34:1d:04:e8:a6:81:
         26:17:31:8c:ee:2d:80:8d:87:0d:2f:23:35:8d:15:80:3f:26:
         19:59:a2:9f:f9:a8:e3:53:c4:0d:b7:78:b4:af:5e:f6:0c:d7:
         71:02:5a:54:ac:a8:a9:86:dd:77:82:3a:b6:df:02:9c:f9:27:
         73:d6:df:4d:84:91:68:ae:1a:30:de:f2:7f:7a:37:a2:d7:ca:
         df:7c:e0:ff:9e:86:b8:c6:df:78:5d:82:1e:06:f6:2b:37:ab:
         99:14:65:fe:13:e7:72:c8:c6:66:82:eb:18:27:ee:87:ae:33:
         5d:1d:f9:62:b7:28:7c:ad:f7:0f:89:bd:98:91:20:5f:88:41:
         5a:74:4f:d5:d5:b8:17:d8:7c:66:55:3d:21:23:9f:7f:6a:ad:
         f7:f3:bc:f5:38:6d:f5:8a:79:c6:8e:a3:a8:80:62:2d:7d:79:
         3b:e1:aa:52:be:67:a8:e7:01:34:1f:10:71:ec:a2:7b:c1:0b:
         d8:83:e5:a4:da:76:48:c2:62:6a:44:85:d6:e8:71:38:7d:d0:
         7e:c6:94:a4:ca:f2:3f:c4:cd:6a:32:2d:4f:42:5c:47:dd:29:
         c8:c0:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:34:26 2026 by rpki-client