Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa
File:                     23644723-5bc3-300f-bf32-56fdc1bfe903.roa (raw, json)
Hash identifier:          vwjpnkCv4BVDDAlQbDnIsWqPbFeHSRltIeWCUFvPGYk=
Subject key identifier:   68:E2:65:19:70:01:C8:88:96:9B:12:AC:66:43:7F:51:51:CF:D2:08
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A420D38C9966AB2FB9200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397226
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:42:0d:38:c9:96:6a:b2:fb:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=09198983-edee-44f6-beba-35351ca7cc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:da:9c:e2:3f:69:2e:c8:80:61:b6:57:04:
                    71:26:21:52:e0:65:31:a9:e0:fa:b4:1d:4d:20:c1:
                    40:7c:2a:15:7c:c6:f6:5a:64:41:0f:58:9a:4c:1e:
                    5a:4a:1c:f1:83:b0:e2:89:bc:c8:72:02:88:f5:83:
                    06:c9:0c:fd:d0:f9:af:64:bd:f2:e7:cb:3a:31:90:
                    4d:db:cf:a2:29:f3:07:cd:8e:c7:87:30:bb:da:93:
                    d5:9e:88:55:04:e8:dc:6c:65:0b:8e:6f:5c:de:06:
                    0b:71:91:ff:b0:22:88:f4:e1:25:36:19:f1:e9:88:
                    f6:4a:68:fc:88:9f:3e:30:d2:51:5c:b6:de:cf:13:
                    e0:93:d7:b3:24:01:cf:c3:47:f5:89:8f:e8:53:29:
                    2a:29:52:25:c5:fe:4d:04:8d:04:df:5a:dc:cc:b2:
                    5c:de:ad:9a:8e:75:e7:53:e3:1a:b6:0c:22:35:5f:
                    4d:84:20:28:a6:f1:a1:8f:ff:5d:5d:2b:86:5e:ae:
                    28:53:c7:2f:59:39:04:dd:84:e1:7b:e7:33:95:2e:
                    46:f4:52:29:2f:e1:5c:03:21:1b:8b:e8:32:ff:ec:
                    41:6b:97:b3:5b:c8:75:4f:77:f7:1e:43:bb:1c:db:
                    86:d9:ef:6d:91:95:87:df:1c:a6:ea:4e:24:64:99:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E2:65:19:70:01:C8:88:96:9B:12:AC:66:43:7F:51:51:CF:D2:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:87:1d:ba:30:36:52:80:a1:1b:63:5b:aa:e8:60:0d:79:25:
         dc:ed:37:a4:a5:a5:a3:4c:e4:5e:cc:7d:b1:c0:2b:ec:27:df:
         ec:3f:3f:68:c5:db:b1:50:80:7c:93:9b:66:fe:f5:2f:ec:af:
         5b:1d:4f:00:52:13:b0:76:15:82:e8:b1:79:8d:d1:e8:8f:40:
         3e:95:6b:45:fc:a4:cd:cc:4d:4a:d9:ba:c6:09:6f:d1:ff:19:
         02:4c:e7:ad:97:52:88:f6:09:2e:a6:30:47:b9:4c:91:64:ba:
         de:fb:f7:67:29:2d:17:d1:23:4a:92:ac:9e:2f:c6:28:13:7d:
         ae:73:d2:14:bf:9e:c0:f1:a2:2f:b2:2a:8b:16:49:e6:d6:db:
         81:1c:56:2f:ad:bb:8b:9c:48:98:92:d6:13:ef:6a:b3:d0:9a:
         af:cf:53:73:1e:26:80:65:49:bd:f7:23:15:b4:a9:ba:61:5b:
         37:26:34:51:d5:3e:6a:19:5b:83:8a:43:c3:23:f3:d3:e1:cb:
         ad:6a:7a:64:bd:94:4c:28:06:8a:45:e6:d8:0c:43:30:3d:cf:
         8e:a7:f4:43:20:fa:aa:67:d0:0a:1f:96:d7:d0:d0:ce:21:55:
         6a:55:9f:4b:bf:6c:3c:fd:44:20:d9:a3:62:5e:8e:24:b9:3f:
         24:90:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:15:41 2026 by rpki-client