Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1acd38ef-a19d-36f7-865e-7da46d26de19.roa
File:                     1acd38ef-a19d-36f7-865e-7da46d26de19.roa (raw, json)
Hash identifier:          IXyRu6F0S09PG/HHdjBiP7orRWN5eGqSfNLzIazJlGw=
Subject key identifier:   B9:66:4C:CA:C7:19:C7:F8:49:11:30:95:38:B3:10:87:91:88:A7:E4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09128AA98570AE5A73781B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1acd38ef-a19d-36f7-865e-7da46d26de19.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397238
IP address blocks:        156.154.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:8a:a9:85:70:ae:5a:73:78:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=97fb7ac5-b8ea-4068-8cfb-1dc2bc058eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:0b:1d:41:da:ea:f5:13:1d:56:e6:c1:c2:
                    c3:1c:11:59:3d:36:37:df:58:72:3f:b8:53:20:55:
                    7d:e4:92:41:6b:26:13:75:2b:c6:d7:75:24:97:6e:
                    28:10:8f:d7:2f:13:f4:de:0d:ce:98:68:63:43:6f:
                    5b:78:8c:fc:b6:47:b4:96:9f:6f:05:37:5c:19:fe:
                    8c:e7:b0:43:55:6e:9f:73:c7:78:08:37:d5:d6:3f:
                    f6:cb:dc:1c:3b:ae:b0:ee:da:50:20:d1:5e:d6:2b:
                    b2:b1:6a:a3:a7:b9:a7:41:1d:6e:18:b4:52:55:a7:
                    2a:bb:ae:5a:f8:14:75:b5:93:4e:47:7c:5b:79:a1:
                    3d:4e:b4:33:30:d3:a4:92:da:35:2f:cb:17:a5:c0:
                    90:d4:99:0f:96:c9:e1:77:5c:26:19:b4:2c:0a:b5:
                    84:f8:8c:25:1a:1a:fe:67:49:55:1c:ba:70:ef:e9:
                    48:a4:ea:fa:fe:b8:ea:62:82:3c:3f:d4:70:27:53:
                    1b:cc:23:76:ae:33:73:8e:9b:81:f5:86:6f:b5:a3:
                    bf:39:3b:62:6f:37:7a:39:1c:55:83:b5:00:68:77:
                    20:c7:93:9c:3b:36:0c:17:f5:fe:08:c4:94:83:de:
                    8a:ef:be:4d:6a:cd:54:69:9a:b7:17:e3:0c:5c:ff:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:66:4C:CA:C7:19:C7:F8:49:11:30:95:38:B3:10:87:91:88:A7:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1acd38ef-a19d-36f7-865e-7da46d26de19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:aa:4c:f9:02:33:fb:65:99:2c:1d:8e:32:37:8b:07:f4:81:
         9f:16:99:e8:14:91:ad:b0:c8:55:76:89:48:d7:d2:0c:00:a2:
         2b:e9:d5:6b:57:47:37:ce:ec:9f:77:e0:d6:44:65:84:45:9c:
         f7:27:a8:6c:de:4c:0e:c6:a1:ff:97:d4:ac:31:61:3c:35:4e:
         27:f1:8b:a5:cb:2b:0c:9e:b9:e5:8f:2f:b0:df:c6:b2:80:96:
         42:18:06:c3:ff:20:a4:85:ad:8b:e6:b4:35:41:5a:94:9f:39:
         8c:4c:03:6c:a4:6d:9a:5e:7e:a0:e1:57:c9:3e:46:bb:d4:da:
         fa:5b:ac:4c:1f:20:cd:1f:56:6f:a1:40:f5:38:5f:3b:16:5f:
         ab:fd:56:e8:9e:ef:05:dc:bb:f6:0d:48:67:31:b0:a3:55:31:
         78:88:92:3a:c5:1a:ec:b9:54:59:ef:f1:f1:bc:7e:dd:c5:e2:
         f9:c4:d3:50:74:6d:02:60:c1:e8:de:cb:a3:2c:00:b3:56:a5:
         1d:81:10:9e:d9:13:a2:60:eb:ee:cf:ae:33:d6:55:05:13:a6:
         f3:ff:81:b9:b4:6b:f1:f7:b8:97:dc:8b:16:9a:16:5e:b4:d1:
         de:ad:c1:7f:c0:bc:a8:ee:e9:cf:ea:d3:39:03:71:00:5d:5e:
         a2:a4:84:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:17 2026 by rpki-client