Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9430b751-01dd-31d7-8b6b-addcb4d92efb.roa
File:                     9430b751-01dd-31d7-8b6b-addcb4d92efb.roa (raw, json)
Hash identifier:          I2cqVmWlB9JnR3VWaAfw2OIBxW3rCT/wWajBJ0DEOKk=
Subject key identifier:   C9:45:95:C8:1A:F2:FC:15:09:05:5A:8C:22:85:45:84:BA:F5:76:4A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD60DCE4FC78B22F6A56C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9430b751-01dd-31d7-8b6b-addcb4d92efb.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397243
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:0d:ce:4f:c7:8b:22:f6:a5:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=04be6924-bb33-4fc4-95bc-b21a2e29a7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:b4:89:13:79:16:b0:0b:5a:2d:86:20:e2:
                    7f:92:33:ab:44:42:01:4c:67:47:44:5b:dc:9f:99:
                    11:18:ee:59:fa:ec:91:6c:44:26:72:6d:01:17:b9:
                    26:fc:d5:aa:dc:4c:ec:e8:d2:e5:0d:09:34:00:c5:
                    53:40:a2:0a:c3:d3:e8:87:a8:ad:b1:90:99:d1:2e:
                    fe:dc:6f:21:e1:43:f2:9b:3e:98:2e:cf:e9:6e:84:
                    57:9d:6c:31:39:17:2c:f8:fd:ff:ec:e7:a9:2a:aa:
                    85:fc:cb:59:a3:e1:93:3a:aa:ae:d8:16:48:34:39:
                    fb:fc:84:88:7e:8d:c9:f8:4c:69:05:02:30:94:fc:
                    8a:5a:13:e0:81:bf:d6:aa:44:b1:87:89:f8:8e:1e:
                    cd:6f:4a:ab:32:2f:1b:33:16:bb:fa:58:b6:3d:8a:
                    74:8f:2f:94:f4:2e:61:dd:d0:55:73:d7:0b:79:15:
                    3c:b3:b6:4e:4d:ff:9c:5e:06:34:3d:f3:db:c5:78:
                    39:a1:59:bf:9c:d6:6e:ec:91:f8:f5:71:c0:c7:05:
                    f1:e4:ca:6e:c4:07:39:6b:c9:3c:30:83:f1:bc:10:
                    ae:01:42:fa:90:d4:8a:15:ad:4b:a0:80:b7:52:57:
                    ee:6c:19:70:0a:55:33:c1:d2:81:28:f6:01:6f:e5:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:45:95:C8:1A:F2:FC:15:09:05:5A:8C:22:85:45:84:BA:F5:76:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9430b751-01dd-31d7-8b6b-addcb4d92efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:02:d3:ef:5c:25:78:97:84:6b:78:13:72:05:d2:9d:c4:91:
         a9:51:6a:cb:07:c1:30:d0:7b:be:51:73:a3:b8:f5:5c:28:d4:
         28:7c:86:9a:3d:3c:ca:cd:32:98:9f:13:b1:5f:50:70:56:be:
         c4:76:4f:41:a7:d7:86:a8:39:ea:5b:8d:0a:fa:f7:49:27:fe:
         5d:1e:5b:cc:20:54:d7:e0:b0:54:38:69:18:08:90:d8:64:68:
         e0:76:fd:54:6d:f8:1e:38:b9:dd:e9:80:e3:ff:c0:c6:56:84:
         d5:44:94:5e:42:5f:38:a2:53:28:c6:d4:2a:cd:f7:eb:62:7e:
         78:e6:0f:b5:81:55:49:cb:92:53:9c:ff:25:e2:a6:53:84:bd:
         fd:9d:ea:ce:4a:0f:dd:55:48:bc:6f:5a:8c:d8:ce:ec:a3:c0:
         f3:e1:7d:ef:b1:83:b4:9d:9f:75:85:35:f1:86:5a:87:39:9b:
         4b:03:98:56:4f:53:40:23:e5:e2:e2:66:d1:c4:a5:95:f4:6f:
         89:17:8c:4f:7f:83:f5:f8:a0:51:c3:f2:a4:e0:56:6f:d3:e2:
         07:48:dd:56:37:f3:d4:1c:77:35:7b:97:a7:de:62:21:ba:83:
         7c:7f:06:0e:5c:3b:e1:9a:4d:19:d4:6a:da:7c:1c:e8:0f:e0:
         7a:61:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:02:13 2026 by rpki-client