Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb12d01c-1e3a-392a-8546-241dd2d22124.roa
File:                     eb12d01c-1e3a-392a-8546-241dd2d22124.roa (raw, json)
Hash identifier:          jEDVPJn/pAQxszcjgS4BKXIUZdrCzrhoaVhIkgBmjxw=
Subject key identifier:   0B:AC:29:8F:D7:3E:0E:FC:F6:23:2C:6C:30:32:74:EE:32:31:48:03
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B0AD6A7D22EF9FE3A41BA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb12d01c-1e3a-392a-8546-241dd2d22124.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397219
IP address blocks:        156.154.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:ad:6a:7d:22:ef:9f:e3:a4:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=46f4d698-18e0-43af-ad8d-0692aee731ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:16:17:16:16:3b:37:18:a5:f4:e3:d6:6b:
                    f8:ab:ad:5d:62:2b:89:cb:98:6a:9d:22:72:6c:63:
                    bd:85:37:17:fc:3b:14:0d:0e:e3:75:c4:a2:47:15:
                    71:44:74:90:1e:24:52:6f:45:6c:ef:08:7e:e4:de:
                    ae:aa:db:21:e0:5d:51:36:71:7d:d3:53:97:17:52:
                    42:73:44:fa:52:d2:97:c0:6a:24:45:d8:35:9b:63:
                    cb:c5:4b:34:46:a5:0c:dd:25:24:f7:50:08:be:49:
                    4c:95:cf:70:7c:3b:25:a2:70:37:03:67:d4:82:77:
                    0e:94:9b:c6:fe:b4:00:79:b6:cd:34:ea:f5:c4:a9:
                    f4:1e:6b:83:d6:aa:3e:a9:94:4c:5e:a8:68:53:ee:
                    67:8d:94:a9:39:bc:96:f6:5d:56:24:8a:2c:25:24:
                    64:36:b0:37:09:ce:1d:51:41:51:0a:31:66:89:7f:
                    50:6e:9f:87:49:85:07:de:00:bc:3a:65:96:75:0e:
                    30:72:95:69:6f:82:01:4b:38:9d:47:df:7a:e8:aa:
                    13:9c:4a:51:b2:42:e7:ea:6a:1b:b9:66:fb:95:91:
                    4d:5e:11:eb:55:68:3c:96:8e:00:4f:aa:84:03:bf:
                    ca:1b:b5:a6:dd:2d:9a:67:4e:30:21:85:59:f2:51:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AC:29:8F:D7:3E:0E:FC:F6:23:2C:6C:30:32:74:EE:32:31:48:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb12d01c-1e3a-392a-8546-241dd2d22124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:77:74:e7:4f:00:d4:16:5e:5d:a9:59:84:71:54:b4:1d:
         d7:22:f1:6c:1b:fd:4e:fa:66:2e:49:ff:36:16:d8:a0:15:19:
         fa:3f:d5:91:48:76:6e:10:f3:ad:69:3a:fd:30:66:e0:fa:82:
         35:d8:54:41:88:86:76:ae:25:24:2c:ec:f6:be:80:5c:1d:fd:
         0d:bb:44:3c:72:2b:fa:2f:eb:2c:a9:1c:c1:e6:25:5e:51:06:
         8e:40:4d:e1:d7:c0:76:27:29:c8:46:b8:12:a7:9b:b6:b4:38:
         44:9e:e6:b7:86:67:96:08:06:f4:53:12:82:c5:11:fa:50:2d:
         62:71:f6:89:60:41:3b:26:c7:9f:d8:bb:02:e0:60:18:8f:cf:
         1c:e0:b5:ce:b9:e6:c9:ae:f3:95:46:d2:ba:53:38:8d:34:fc:
         a4:99:4e:2c:48:8f:f8:85:13:fd:e1:bb:79:5f:d4:87:56:de:
         12:ef:cd:ba:b0:71:ca:ee:fa:e7:dc:d7:83:4a:59:77:8c:92:
         6c:01:d9:01:cc:fd:a1:99:70:34:aa:aa:75:06:ae:e8:ec:ad:
         51:b7:55:4a:96:d1:fb:39:4a:1d:48:2b:e5:a5:ec:cf:b2:cd:
         f0:08:57:2b:40:d7:7b:5a:4a:7b:76:c7:b4:1f:a7:af:0d:53:
         b0:2b:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:07:34 2026 by rpki-client