Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7bf9dcc-0f92-3de3-bc3b-93bf83e0becc.roa
File:                     e7bf9dcc-0f92-3de3-bc3b-93bf83e0becc.roa (raw, json)
Hash identifier:          NW+JIGnUYJlAvTGZl3ji6sjAe1I1FEvqBURsKNQ1Yvs=
Subject key identifier:   1D:3E:02:12:86:A5:AC:18:76:39:B9:FB:2D:85:8F:D1:4E:58:20:DC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A2B7A7125AFBB567C0400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7bf9dcc-0f92-3de3-bc3b-93bf83e0becc.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397222
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:2b:7a:71:25:af:bb:56:7c:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=b7506397-6963-4a3a-839b-af8cd13e1109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:7e:c4:f9:39:7b:ec:e5:e2:70:23:42:61:
                    74:a4:39:3a:16:8f:77:bf:6d:7f:4c:cb:17:28:30:
                    41:2e:b7:ff:a8:49:f0:65:0e:2b:28:d1:4b:70:20:
                    e9:e0:b5:b9:d2:67:b8:e5:60:98:ef:68:50:0b:f5:
                    d6:5f:de:c9:77:c1:8f:14:dd:7a:cf:96:c1:e4:14:
                    be:ab:c1:36:40:26:e2:34:4e:2a:d6:5f:bb:40:7b:
                    56:d1:d0:b6:e2:f0:d3:b9:56:62:b7:53:8c:71:48:
                    6f:f8:4f:63:21:ae:d2:db:3a:e8:3b:a3:98:c5:23:
                    8b:b9:2d:9f:7c:3d:86:b9:08:27:fd:73:16:20:6f:
                    d3:e8:25:af:ae:c0:f5:86:fb:82:80:70:59:a8:b0:
                    c7:8e:69:d5:3b:e0:47:38:c1:d5:c1:94:0f:fa:30:
                    37:99:f6:e2:67:3c:8a:25:99:40:25:84:36:39:a0:
                    d1:c7:17:19:dd:d9:a7:75:b3:fa:b8:b2:c7:e4:0c:
                    48:d4:4f:5f:05:a4:19:18:36:54:06:57:8a:e7:de:
                    b6:0b:45:dc:ee:19:59:d3:77:b1:d5:e1:84:49:73:
                    d1:36:a2:82:4f:53:eb:12:d9:59:44:41:23:05:30:
                    c1:73:63:fd:a9:12:28:0e:39:ca:69:39:cf:7f:30:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:02:12:86:A5:AC:18:76:39:B9:FB:2D:85:8F:D1:4E:58:20:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7bf9dcc-0f92-3de3-bc3b-93bf83e0becc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:70:cf:39:3f:54:5b:c6:cc:bf:94:02:9c:7d:29:5c:a1:
         e9:ef:57:c4:f4:a1:73:dd:be:94:3a:a8:85:4c:f3:03:a5:9b:
         78:92:a6:1c:39:e4:3d:61:f8:8a:2d:dc:6e:4c:e5:8e:70:52:
         50:b7:0f:4e:3d:4b:54:13:cb:af:af:41:0f:d0:f9:e4:d0:64:
         f3:f5:6e:56:08:5e:8b:6d:1c:61:5a:ff:64:ae:ec:7e:34:bb:
         b6:37:4b:24:90:5e:4b:2e:63:0b:3a:c4:49:80:fb:40:12:8d:
         b0:d0:06:3e:8e:4f:08:63:9a:d5:e3:9a:29:62:fd:e2:58:68:
         14:1d:d6:f2:eb:35:25:bc:1c:12:09:cb:72:d4:04:cb:dd:ff:
         4a:9e:3f:e3:c1:e6:52:d4:db:18:32:dd:84:40:34:06:33:a5:
         1d:59:3b:22:25:b3:c7:3e:1d:c2:e5:53:e5:ed:1d:51:5f:e2:
         b6:e2:5a:0a:1e:a2:7c:19:19:2c:5d:cb:a7:1c:c9:4b:2d:28:
         3f:40:fa:74:78:94:48:8d:94:29:0a:ec:e9:7d:40:13:1e:a2:
         d6:11:0a:9a:7d:de:73:bb:c2:3d:6e:45:30:d3:93:98:a3:70:
         5c:7a:7a:8c:02:d6:a9:db:0c:07:16:3b:7f:37:ed:ff:e3:23:
         de:77:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:14:22 2026 by rpki-client