Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa
File:                     daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa (raw, json)
Hash identifier:          WPOz8NBDXQP4Lrtey6dL9KWpOf3/+UInK0Xy2+I1PfI=
Subject key identifier:   FC:FA:71:9A:D8:15:36:03:20:3B:91:3D:B8:1F:D6:67:3B:21:AA:2E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09129D4AE614518D89722228
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397232
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:9d:4a:e6:14:51:8d:89:72:22:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=69c63075-712c-4a6b-a3a7-2779e69173cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:00:39:9d:3f:1c:6c:4c:ce:69:8d:d7:57:
                    8e:6d:27:07:35:6e:d9:2c:1e:e6:6b:9c:62:f5:9d:
                    ff:d5:6c:4e:12:cb:fd:b6:2c:fc:dc:6f:be:e9:58:
                    32:9d:97:d5:30:37:69:d5:ec:f2:15:87:c8:d2:ef:
                    40:13:e0:f4:8a:da:4e:23:d1:f2:d2:91:e5:ce:b6:
                    57:85:e3:27:c5:64:2f:a3:d1:94:60:b3:4f:23:22:
                    6b:5d:7e:3d:5c:d7:36:84:53:b6:7c:73:8a:08:7d:
                    bc:1a:7d:74:55:af:72:98:cb:a9:bf:00:05:ae:e6:
                    a1:99:be:1a:b7:62:fd:6f:49:5c:69:df:92:69:98:
                    f3:15:59:67:8a:94:13:a7:6a:11:54:65:1c:99:82:
                    8f:4c:aa:8c:cc:74:a4:3f:6a:83:1c:ba:07:93:f9:
                    cb:ca:48:a8:81:1e:c7:6b:4e:f9:9e:4e:eb:53:c2:
                    16:fa:5f:89:0d:f7:8a:6a:56:c6:28:b5:d5:b2:75:
                    85:cd:59:52:37:5b:36:53:42:f2:d0:57:7e:09:b5:
                    8c:94:2a:bd:0c:09:27:b0:45:82:a8:4a:82:01:f1:
                    c5:2c:37:79:25:74:fc:b9:b5:9d:76:0b:be:d2:82:
                    ae:b9:d6:d7:0b:a6:77:7e:3f:3a:3a:4d:d1:cf:7e:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FA:71:9A:D8:15:36:03:20:3B:91:3D:B8:1F:D6:67:3B:21:AA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:a9:a7:e1:79:1c:aa:e1:e5:cb:e4:0b:e7:5f:5b:a9:5a:
         da:26:f4:51:3a:54:51:a6:73:42:1c:8a:65:cd:12:e0:9b:1b:
         26:76:a4:aa:7b:b5:dd:9f:c2:46:78:c8:f4:63:af:1f:26:57:
         4f:59:f3:ff:b9:3b:8a:55:4c:bd:71:ac:01:0c:98:f6:38:b0:
         1b:2c:f4:35:2c:25:bd:53:75:a5:ce:f8:10:aa:fa:3a:df:74:
         77:16:4b:44:3c:1d:00:71:1a:a4:30:40:89:26:70:d8:cb:87:
         4a:9b:e4:4a:35:42:77:19:17:7c:17:b9:24:9d:1b:3c:0b:07:
         d8:46:29:4b:a2:78:21:64:13:72:53:aa:3f:c5:eb:05:a8:ba:
         39:93:18:c2:b6:48:92:81:e5:54:44:42:c3:2b:84:30:bf:27:
         3d:c0:6b:9f:b6:10:17:91:d8:8a:02:df:85:bb:a4:8d:a6:06:
         57:b8:3d:49:d6:15:dd:76:88:e5:9f:a4:df:f1:bd:94:33:79:
         3c:a7:56:d9:0f:2a:5a:7d:10:e2:c7:e9:41:00:d9:e9:be:e7:
         76:2f:ca:d7:b6:1f:4b:e2:51:28:f8:c4:7c:61:42:96:7b:38:
         5b:d3:87:2b:da:0d:ec:b1:a4:d8:ae:c4:80:96:29:92:a0:a4:
         26:3d:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:33:14 2026 by rpki-client