Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a6b0b0a-928d-3f06-9eb6-b1db02545989.roa
File:                     7a6b0b0a-928d-3f06-9eb6-b1db02545989.roa (raw, json)
Hash identifier:          5cJoPOu1ttrijNdL+yOFG/bA9RsQRrpocdmN1TLq7fM=
Subject key identifier:   C4:3A:01:21:DA:74:3E:A7:9E:FE:DC:02:6B:8B:7D:43:96:17:A5:78
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D8EF7E2AB529C2C0F4CF6ED80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a6b0b0a-928d-3f06-9eb6-b1db02545989.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     399167
IP address blocks:        156.154.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:e2:ab:52:9c:2c:0f:4c:f6:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=9f338039-c0a9-4321-b6ca-48fe01ae558d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:ef:de:b2:f3:fc:90:50:88:a1:6c:7b:c2:
                    9d:48:78:7b:79:b3:17:1d:6e:44:75:0f:98:5c:8f:
                    52:3f:25:84:c7:eb:93:76:9a:dc:37:cc:aa:ab:7c:
                    d7:bd:e3:34:f5:3a:dc:d5:74:ae:44:2b:0f:d3:fb:
                    4a:7a:3c:c3:46:ac:90:09:43:63:ac:b5:3d:b1:d7:
                    a6:88:c9:92:f8:83:e7:ef:5d:a3:14:fc:9e:33:b3:
                    13:04:ef:e8:55:bc:9c:87:7e:51:d7:2e:79:44:0d:
                    5b:65:64:43:95:cf:39:32:fe:bb:95:f6:41:87:de:
                    13:30:d0:9c:bb:bd:9c:4b:df:ab:d1:66:97:50:91:
                    76:17:7e:07:32:25:d4:0a:32:f1:e5:3d:f5:a9:82:
                    5f:74:23:ac:50:ea:be:67:9b:25:58:a6:1d:be:be:
                    93:61:7f:8e:21:9d:8f:e9:cf:18:22:a1:00:4b:3b:
                    56:b3:01:3f:28:db:7b:97:fc:49:03:c7:d5:10:8c:
                    1a:ab:fc:cc:6b:ae:46:9b:a2:6e:76:67:d2:de:f8:
                    b0:08:c1:60:9b:fd:3e:66:37:9e:ff:87:c0:bc:b2:
                    b2:cc:21:64:2b:bc:ea:b5:24:0b:0f:8f:6e:42:a5:
                    cc:03:84:11:31:36:01:a6:ef:19:4b:3d:37:79:41:
                    7c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:01:21:DA:74:3E:A7:9E:FE:DC:02:6B:8B:7D:43:96:17:A5:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7a6b0b0a-928d-3f06-9eb6-b1db02545989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:15:7c:6e:2f:3c:b1:d2:cb:f6:39:fa:cc:16:e6:88:c8:e0:
         cd:bc:c4:78:7f:41:91:e0:99:8a:94:dd:77:85:99:e0:ab:8d:
         d4:48:38:da:d3:8d:19:6d:30:3c:ed:e4:dc:0c:f3:a6:36:0b:
         99:e0:9f:29:64:93:5b:6b:19:25:9f:4b:d2:5c:23:55:80:01:
         18:af:48:a9:0c:4c:57:a9:3b:ae:b9:d6:97:1d:f7:36:35:65:
         77:1a:98:ee:ec:6c:f4:9e:a9:0c:aa:2e:ba:cf:14:4f:a2:f9:
         f6:5a:de:47:04:2b:a3:bc:eb:a3:82:3b:c1:27:d3:54:4b:e0:
         9d:4e:c8:75:eb:85:e2:73:26:83:ae:1d:87:ba:f8:6f:4c:7e:
         0e:6e:b0:d3:60:62:1e:e6:ec:e4:f9:9e:fc:32:45:e9:8d:87:
         aa:a8:f4:f5:a0:e5:69:8f:e1:18:13:02:32:e4:78:93:36:4f:
         2a:60:5c:20:7c:7e:a1:1f:20:04:67:8c:6f:87:ca:a8:08:6a:
         23:a1:bc:14:6c:d3:60:ba:e3:a9:49:1b:df:77:4e:c5:c2:71:
         8a:00:bf:16:3e:5a:f9:82:7c:03:d1:81:b8:f0:87:fa:4e:a2:
         30:3f:69:76:6a:8e:6d:e9:76:e4:ff:2b:a7:26:38:d9:32:be:
         9e:64:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 20:28:19 2026 by rpki-client