Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27fea46a-905d-3491-b014-1e3230ea1763.roa
File:                     27fea46a-905d-3491-b014-1e3230ea1763.roa (raw, json)
Hash identifier:          QnaLrOL4duYSnC3EXFYUqsMT776F/nze4BSSRhI6FFI=
Subject key identifier:   F1:40:E8:08:9F:D9:C5:D1:03:29:FA:10:77:93:9D:79:FA:64:5E:46
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D0912A17AA95D262487E91D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27fea46a-905d-3491-b014-1e3230ea1763.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397230
IP address blocks:        156.154.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:a1:7a:a9:5d:26:24:87:e9:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=294ea8ca-f128-4509-9867-121dc7d83078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:98:bb:d0:79:73:d7:6d:75:b8:69:99:a3:
                    e0:eb:af:e4:44:e9:30:6d:bd:51:97:f8:03:29:20:
                    82:5c:24:45:7f:10:6f:a5:f4:4b:0b:2f:81:7a:1e:
                    58:ef:11:ba:68:2a:69:e1:8d:e6:60:1c:c1:71:53:
                    37:ce:b8:7f:ac:c7:6a:2c:ea:b3:8c:d6:45:e9:e6:
                    05:70:b1:dd:71:b9:d9:47:9d:a6:d5:93:05:17:22:
                    6b:fa:ac:7a:87:4b:53:78:90:9d:c8:e7:7e:64:a7:
                    22:d1:46:49:c8:e5:2a:d1:97:2e:fe:78:1a:24:3c:
                    43:45:34:32:5c:27:f6:2c:11:1f:34:82:df:f5:d7:
                    ef:df:84:44:b0:17:3b:46:b8:18:4a:22:63:f3:3c:
                    b3:b5:12:7e:77:1c:b8:7e:db:4a:2a:f2:de:98:3a:
                    50:d1:af:4f:11:13:96:0a:ec:81:df:02:09:49:ad:
                    f2:e4:44:2e:a7:53:1f:6e:6a:90:0d:02:6e:42:c0:
                    de:8c:a8:05:1f:26:d8:22:40:b4:85:5d:f4:94:41:
                    53:d3:ae:6b:2e:5f:ca:d1:04:72:12:28:e9:d3:ac:
                    2d:5c:ed:34:cb:15:81:ae:57:7d:be:22:ad:b1:c7:
                    46:3c:59:58:d2:a9:75:f0:a3:94:b0:25:72:c2:4c:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:40:E8:08:9F:D9:C5:D1:03:29:FA:10:77:93:9D:79:FA:64:5E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27fea46a-905d-3491-b014-1e3230ea1763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:81:ad:10:f2:33:57:a7:5c:74:68:93:a7:bd:e1:e2:72:
         e3:db:bd:3f:01:30:63:b7:d4:23:8c:7e:df:5d:42:4a:7a:bb:
         39:16:a6:c9:68:25:41:87:3a:9c:73:ae:b3:8f:6b:36:ea:ae:
         d7:a9:b0:a2:df:af:78:1a:84:99:4f:26:48:dc:cc:8e:bb:30:
         78:22:ee:e7:20:16:a7:08:d0:ec:f0:66:df:74:65:38:13:1a:
         91:e2:0c:53:25:46:4a:ad:df:69:63:d6:79:9c:6d:8d:57:e5:
         e1:7b:87:12:e5:e7:79:cf:1f:5f:da:a1:4d:8c:79:6e:97:79:
         83:b0:3c:af:f4:d2:52:4c:df:f3:89:fc:0e:ec:06:4b:b5:82:
         b3:88:a8:83:7a:ac:bd:fc:17:56:e4:cd:30:70:7b:97:d9:bb:
         35:10:6b:c1:36:11:3b:4e:be:10:89:6c:50:fb:a8:40:b7:e0:
         7b:1d:1f:17:e0:54:80:97:ac:c3:90:05:bc:48:e9:7f:ee:20:
         eb:b3:05:0b:43:5e:24:4a:51:91:24:1a:84:e2:f1:b8:17:a3:
         13:5f:6a:71:c5:5a:67:37:e9:82:80:1f:a8:77:bc:6b:8b:25:
         9b:80:d1:0d:f7:40:a2:6f:53:53:92:ef:44:8d:7e:ad:fe:28:
         b1:49:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:15:39 2026 by rpki-client