Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b72522f9-6ef0-3ef9-b0ba-3170e2255a30.roa
File:                     b72522f9-6ef0-3ef9-b0ba-3170e2255a30.roa (raw, json)
Hash identifier:          y6wRGlkBNppZB6Zq6eiqe6HaFMHTaPEo8RSY3RlV9hw=
Subject key identifier:   DB:3C:8D:A8:1B:FA:A3:32:BD:A5:85:E4:29:D2:FE:02:A6:19:BD:FB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D59EA7CDEA3FEC03544BF27B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b72522f9-6ef0-3ef9-b0ba-3170e2255a30.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     397240
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:7c:de:a3:fe:c0:35:44:bf:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=369d0a15-81ce-4143-96b9-eddd096338e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0c:2b:49:f8:1c:c1:60:4a:af:99:a5:9a:a6:
                    f6:bc:cc:6a:16:2f:7a:12:ac:b0:4a:42:76:76:8a:
                    09:05:65:f1:e3:79:5e:42:3f:e7:86:53:18:e6:91:
                    31:88:94:f9:ce:4e:71:91:da:4e:1e:42:3c:2b:fd:
                    cc:d5:88:ed:d8:9b:78:41:a5:9f:be:eb:47:d1:b2:
                    70:e4:15:24:02:68:d0:6f:df:04:8a:02:1f:d6:7a:
                    d9:58:56:73:b0:ed:dc:9e:91:03:25:d2:9f:22:ec:
                    fb:3d:62:19:7c:1f:03:13:57:01:43:0a:46:06:f6:
                    eb:a4:88:81:4a:2e:7c:0a:ae:64:aa:99:37:fc:c9:
                    3f:8e:f3:5d:a2:77:c1:16:1c:cc:13:d0:a5:f8:07:
                    70:fb:04:6d:bd:9b:47:2b:15:04:cc:e0:d0:f2:08:
                    02:9f:33:9b:c3:09:d4:c5:63:18:7d:2f:0e:44:00:
                    91:24:7b:13:c5:c8:6d:5a:e1:5c:04:9a:95:eb:21:
                    cf:4a:6a:14:77:30:40:d7:dc:88:55:42:e0:4b:41:
                    e4:38:90:9e:86:22:ff:fa:e9:9d:1d:af:a4:3c:08:
                    0b:16:d0:fd:b0:a6:cb:40:e4:3e:69:a3:72:34:c5:
                    34:53:90:f9:d2:dd:20:34:34:63:29:df:aa:7d:0d:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3C:8D:A8:1B:FA:A3:32:BD:A5:85:E4:29:D2:FE:02:A6:19:BD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b72522f9-6ef0-3ef9-b0ba-3170e2255a30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:f7:53:7e:d0:10:09:9e:e1:74:e8:5c:4c:22:57:e2:61:
         9d:f1:85:ba:d5:8d:0d:42:70:bd:6a:5b:50:74:ea:16:4a:a2:
         02:a6:95:e4:21:fa:9f:34:cc:81:cf:e2:20:7f:d3:35:60:88:
         f7:7f:4c:c4:18:b1:75:9d:4e:3a:32:56:61:5b:36:7e:7d:e3:
         15:2f:83:06:68:4d:69:16:cd:f8:86:cd:be:d5:e2:82:44:a0:
         84:28:9d:a1:21:f6:5a:c8:c9:89:45:0e:fa:21:7e:1d:27:6d:
         87:49:a1:58:fe:2b:af:35:7d:8b:f2:a4:97:bd:ef:8c:93:a7:
         96:cf:40:26:5b:ba:cb:41:4e:aa:bc:6b:45:e9:0c:dc:0e:09:
         21:37:2d:7c:74:87:45:ba:a1:91:a1:cc:f2:2b:3e:1e:98:be:
         80:bc:9e:76:4f:2e:47:b1:6a:37:2f:59:f8:d9:bd:be:bf:d2:
         91:5e:53:c4:24:85:c5:48:ed:5a:aa:80:77:90:f5:03:db:32:
         a6:8b:a5:4a:e7:32:71:57:e7:fa:10:13:dd:8f:56:1b:96:22:
         bd:81:97:66:47:b2:4c:a8:dd:16:da:75:dc:f1:79:89:c7:e7:
         9f:fd:6b:32:6c:2d:3c:60:21:18:1d:25:ab:83:7e:1f:ca:a5:
         c7:5c:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:10:41 2026 by rpki-client