Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa
File:                     29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa (raw, json)
Hash identifier:          B1Sbclx7JCxr9o5nSZhRY53CmHl8UhdZoiKC8z7uCEA=
Subject key identifier:   2A:C7:BB:01:E6:30:F4:86:BF:16:D5:E9:15:B8:B0:15:D0:7D:D4:2D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FF71EBEF008BBCABA9100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397213
IP address blocks:        156.154.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:f7:1e:be:f0:08:bb:ca:ba:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=1d4d1c4b-c09c-4233-b242-173a5d9b9d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:52:32:1e:a7:e4:93:98:34:28:55:e5:eb:
                    b2:9a:7a:75:6d:00:99:05:35:8e:76:f1:76:7c:78:
                    46:33:13:b1:36:b6:6f:d5:98:c5:63:fc:1d:18:5d:
                    d5:d8:5b:c6:6f:b6:b8:87:1e:e9:11:d1:15:e4:97:
                    76:30:e3:36:0c:19:8a:91:01:f8:23:2b:17:1a:5c:
                    b0:45:6d:33:95:37:48:29:73:12:38:4e:77:10:a8:
                    99:6c:6f:2c:94:af:04:e4:53:d5:74:25:4d:07:cf:
                    41:47:08:ae:08:5c:3a:9f:78:f2:49:2e:b9:b6:2f:
                    ed:a2:90:de:ba:3a:58:7f:09:e6:3b:09:54:b0:4e:
                    24:bd:8d:5b:68:da:ed:77:8b:86:8e:3d:5c:ad:31:
                    7e:b5:43:4c:d4:d2:f2:45:a8:2d:32:79:47:8e:b7:
                    3d:06:d9:72:4e:3b:d3:e4:30:7e:ab:c6:ef:fa:08:
                    fd:b5:5a:97:1f:8a:58:16:e4:9e:54:28:48:9d:a5:
                    69:d4:20:a9:b9:0b:fe:18:02:d6:8c:cd:1e:e6:7f:
                    3e:ec:28:37:49:b8:b5:4d:e9:53:30:1d:de:b1:63:
                    bc:b8:73:34:52:81:01:e9:fc:3f:ff:1a:58:55:29:
                    8c:dd:ce:64:99:18:74:e4:25:69:fe:0d:30:e3:c8:
                    05:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:BB:01:E6:30:F4:86:BF:16:D5:E9:15:B8:B0:15:D0:7D:D4:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/29dadc8f-792c-379d-ae1a-2d2312ab57fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b2:33:0d:ea:d4:98:c4:b4:2e:88:81:aa:0f:2b:96:8e:b3:
         db:88:fd:66:3a:5c:8e:7f:00:1f:d5:c6:dd:de:9d:b3:0b:15:
         21:b6:15:11:5f:92:1c:bb:6f:7a:a3:69:c6:f9:6b:98:fe:86:
         ee:db:53:2c:09:0c:15:40:8a:04:79:8e:f4:01:5c:fe:cf:b7:
         db:e8:a8:cd:36:13:ef:3b:eb:68:86:3c:e8:1d:c3:b1:e0:11:
         d1:29:56:b1:5f:48:47:a3:44:0b:a4:4e:d0:e9:77:67:66:90:
         72:e3:f5:b2:71:03:01:58:13:a8:9c:bf:08:31:63:9d:c1:c1:
         35:bb:2a:e2:0f:e2:d4:1e:23:9e:9b:eb:2b:3f:5c:9f:81:33:
         49:ef:e3:eb:08:37:d9:6f:b5:05:5f:1b:e6:fb:7e:a0:83:9a:
         cf:e3:b6:b3:c5:14:e0:f3:b2:f5:61:6d:cd:c5:dc:dd:88:43:
         0d:e8:e8:c7:05:61:4c:62:18:19:da:76:13:8d:17:bb:90:03:
         50:da:5b:6b:a4:cb:53:c3:d8:e2:64:2f:30:1a:93:76:f3:95:
         65:6a:2e:39:ea:79:39:aa:13:96:da:20:b5:b7:73:ff:95:e1:
         3f:3f:fd:2d:78:06:51:fa:92:81:c1:4b:69:99:9e:fa:e7:64:
         23:03:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:10:20 2026 by rpki-client