Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0eabea2b-d654-33e9-a12f-26215c9b9bf0.roa
File:                     0eabea2b-d654-33e9-a12f-26215c9b9bf0.roa (raw, json)
Hash identifier:          ssleJFaDL2nRD8QdncvFVoVaqs72qflnwVeaPkXRb2s=
Subject key identifier:   82:95:DC:50:D4:DF:A0:06:A7:45:0E:81:7B:C0:6F:AD:8B:C7:EF:95
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D0912934A91D293BCFF11B380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0eabea2b-d654-33e9-a12f-26215c9b9bf0.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397240
IP address blocks:        156.154.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:93:4a:91:d2:93:bc:ff:11:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=cd66cc19-8219-4601-aa5f-da910957ffdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:54:a5:af:9d:0c:52:d2:9d:db:89:83:6f:
                    d2:b5:30:56:ef:cf:b2:f0:67:b0:23:50:f2:bc:12:
                    b8:98:36:b8:95:b7:5d:2a:ea:82:e8:ad:5f:03:1d:
                    94:19:9c:e6:29:84:37:ac:0f:0b:4e:b4:6d:6b:ad:
                    8d:16:20:84:94:22:2a:f9:71:54:7d:12:bb:f6:1f:
                    76:92:73:e9:a7:73:ee:e1:5f:ac:db:8c:1a:91:ee:
                    06:5f:98:0d:8e:27:5d:73:b0:b6:0c:3b:e4:40:ea:
                    d2:32:e1:ef:af:a8:86:13:77:77:57:c0:99:e1:10:
                    da:8b:77:41:ab:74:48:75:3d:c8:a6:64:1b:a8:6b:
                    d1:8f:c0:0b:db:f8:ee:e7:24:7a:4a:54:93:ee:e8:
                    36:7c:fe:c3:1e:d6:32:2c:9d:ba:bf:bf:ca:ef:c1:
                    9f:5f:b6:3f:4d:8b:74:3b:a2:6d:c2:d2:45:8b:7e:
                    5d:51:d1:46:9c:a3:8a:ed:34:42:cd:8e:70:3c:a6:
                    04:54:ed:ea:c4:32:e9:01:ad:9d:19:1b:26:80:c2:
                    c3:95:ed:69:f9:5d:80:fa:46:c4:91:98:db:bb:17:
                    6d:ec:26:c9:57:b0:13:c2:a5:68:c1:da:3c:d4:4f:
                    0b:5e:b4:4d:d9:76:4e:d3:5e:ea:f7:12:68:4c:b8:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:95:DC:50:D4:DF:A0:06:A7:45:0E:81:7B:C0:6F:AD:8B:C7:EF:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0eabea2b-d654-33e9-a12f-26215c9b9bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:fa:a9:37:05:09:c0:d3:13:c1:68:d0:5f:c7:72:43:12:
         f5:d8:5e:69:1c:c3:fe:ea:a2:59:6a:5d:d0:da:ca:f1:49:8c:
         6e:76:12:0c:73:c3:d7:83:6d:c2:4d:f2:d1:4e:1e:f1:73:a2:
         a6:69:8a:c9:a2:aa:2f:9a:d7:5b:e2:fc:79:91:57:c9:8e:1a:
         20:66:3e:cb:f7:68:cf:a6:9c:cc:d0:92:9f:50:95:76:e0:3c:
         d3:38:88:82:b8:f4:71:e8:17:16:77:bb:f5:8c:cb:f9:c5:25:
         94:8e:ab:00:62:8f:1d:b8:8f:51:8d:9c:d8:89:6c:9c:d1:3f:
         dd:df:63:7b:0b:b4:7c:97:9b:56:5d:9a:4a:6b:ff:86:c3:69:
         51:ab:a1:06:bd:e2:6c:09:d9:05:56:8d:3b:45:72:be:3c:a4:
         67:b9:16:07:75:f2:84:90:fe:20:88:32:24:e2:56:a2:82:14:
         bb:86:7b:21:5c:e9:bb:aa:9a:a3:9e:70:aa:06:8f:4a:d5:dc:
         1d:48:8a:f4:4d:f1:12:15:b6:20:95:30:c3:42:f0:0b:dd:fe:
         6a:1c:5a:07:15:bf:a3:c1:5b:ef:31:42:78:5c:1b:2d:1f:05:
         8e:01:cd:5c:d0:0d:71:a4:9d:b3:86:02:c3:65:7b:74:80:f0:
         75:24:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:42 2026 by rpki-client