Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b86165a-9611-3c2d-9a5c-afcac48378c1.roa
File:                     2b86165a-9611-3c2d-9a5c-afcac48378c1.roa (raw, json)
Hash identifier:          teovIEAYRePovgcPQE8F+mtIPELQbcjuCRI0gAb+sek=
Subject key identifier:   B9:94:29:98:C3:3D:05:A0:FF:64:7D:F9:7F:AF:D6:35:E5:35:62:6C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A52A387B893E01A40CF80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b86165a-9611-3c2d-9a5c-afcac48378c1.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397216
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:52:a3:87:b8:93:e0:1a:40:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=a893bb67-52bd-44bc-ad58-e386c88c970c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:92:36:52:44:97:25:2e:b6:3e:1b:f8:69:
                    6f:e4:12:c4:9a:c9:88:33:6b:ab:38:f8:0b:2a:d7:
                    ae:6d:f7:9a:da:f2:f5:f2:41:81:ce:f4:8e:4c:b3:
                    e9:c2:4d:1f:dc:1e:5f:ac:7c:b9:5d:ed:11:ed:94:
                    63:c8:e3:c2:1f:4a:05:e0:3e:f4:5f:48:9a:ac:78:
                    82:56:f4:0d:4b:ae:8e:48:b1:b4:69:74:c1:b6:fb:
                    41:92:c4:ff:7a:ac:93:c8:d8:3a:cb:25:13:c9:19:
                    a2:40:05:69:65:99:8d:a9:c8:1f:4c:34:ed:93:38:
                    b8:ce:f3:be:ac:87:10:01:f8:61:1e:8c:7f:ba:d7:
                    01:10:e9:2c:e2:cc:0d:d5:51:f7:af:4b:92:b1:2a:
                    a6:89:5e:c6:93:48:17:1e:34:32:9a:56:49:b7:85:
                    fa:df:53:a5:db:89:2c:99:98:aa:9b:d4:eb:02:3d:
                    38:f0:ab:71:1c:b0:00:8b:f8:1b:a5:af:09:25:a4:
                    4d:d9:f1:23:bb:eb:f3:80:0c:17:c5:ba:90:aa:f9:
                    50:ef:61:d3:55:d2:a8:0b:56:15:86:d7:cb:66:8a:
                    f5:46:69:ea:86:1f:0a:aa:16:cd:ea:d5:cb:d7:a1:
                    a0:88:f7:5f:d8:ff:68:7a:f6:41:9d:63:63:bf:aa:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:94:29:98:C3:3D:05:A0:FF:64:7D:F9:7F:AF:D6:35:E5:35:62:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b86165a-9611-3c2d-9a5c-afcac48378c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d9:d4:51:fc:ab:e7:d1:7e:dd:81:4a:82:da:ca:a2:51:49:
         34:98:78:fa:34:97:bf:77:88:f2:dc:28:b3:84:64:ec:35:8b:
         4a:21:a5:46:f6:85:59:3a:04:7d:c1:ba:50:9b:8a:1d:73:a6:
         f7:40:5e:55:47:f2:dc:cd:f0:90:fc:34:bd:60:2d:bf:38:4c:
         1e:ab:95:36:30:73:42:3d:8f:b8:fb:eb:2f:e9:0a:77:8d:ff:
         6b:d0:f1:65:bb:1d:d6:81:df:07:b8:46:67:e7:f1:99:c6:51:
         1b:90:3a:00:da:5f:0b:35:f7:2c:8d:0e:f6:77:8f:ae:24:72:
         07:94:d8:e0:c0:b2:f2:ea:51:35:60:89:d1:cd:66:e3:43:c1:
         ba:33:66:17:d3:80:91:3b:ed:2a:44:ec:e3:5a:07:ef:2d:cc:
         13:0d:e2:7c:03:00:95:de:0f:48:9b:90:14:b4:9d:44:6d:76:
         d3:87:1a:32:eb:89:f6:87:f7:e7:ac:99:f9:8e:d7:c1:09:48:
         d9:78:52:b2:3f:11:b0:92:70:6e:c4:03:1d:c2:45:ae:64:45:
         fc:4f:6d:eb:d5:f5:bd:6a:3e:bd:83:28:37:4f:dc:be:12:e4:
         6a:cf:d3:3e:5d:35:f5:c5:6c:6e:9a:04:3e:44:7e:1a:68:19:
         a8:f7:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:49 2026 by rpki-client