Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f382ba1-e739-37dd-a95b-01175c8d5992.roa
File:                     2f382ba1-e739-37dd-a95b-01175c8d5992.roa (raw, json)
Hash identifier:          XVyzs23C/O0Ho/tZc62kPPV9GL2WZJEv3Kq1Eb7Kd2U=
Subject key identifier:   6A:CE:BD:AB:28:0B:F2:7C:A7:C0:37:2D:15:6C:7B:17:68:9E:99:DF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09127B180022533CAEF91500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f382ba1-e739-37dd-a95b-01175c8d5992.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397215
IP address blocks:        156.154.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:7b:18:00:22:53:3c:ae:f9:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=4ab32e77-cf80-4744-a859-56db8fa04118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:d5:75:da:f7:5d:bf:e1:f5:22:0e:80:2f:
                    42:0d:3f:1d:c6:78:d9:82:d3:42:fc:51:f1:68:7a:
                    f6:ee:21:a3:b8:2c:1d:8d:dd:ed:dc:c8:91:c4:94:
                    27:da:0e:4c:a8:0f:7f:05:0a:98:bb:55:68:2b:62:
                    92:f6:33:e8:d6:77:e1:21:c1:70:69:06:64:87:ea:
                    f7:6d:a7:f3:5f:33:73:db:f2:da:d6:60:21:73:b8:
                    90:34:af:4c:10:9d:fc:e5:bd:d2:8d:e6:12:c3:af:
                    06:a9:53:76:f8:9c:58:1a:61:ba:e3:8f:71:d2:3f:
                    27:e3:09:60:1d:d1:7c:37:eb:32:d8:50:3e:21:07:
                    62:87:f1:a6:a1:ec:90:71:31:48:9d:aa:3b:7f:d4:
                    9e:bc:28:ea:db:ee:49:81:52:21:00:28:30:47:21:
                    36:4d:7c:6b:a6:2e:4d:4b:fb:10:85:74:78:c7:f8:
                    a7:6d:4e:0d:97:23:c8:c7:25:72:4c:e5:65:49:c4:
                    66:2a:a7:95:5c:e6:99:1a:28:e8:db:3b:4e:e5:ac:
                    ad:d3:52:c3:99:d4:08:ce:0c:13:12:46:de:b4:09:
                    15:7d:6d:0b:47:ce:2c:96:29:67:1a:de:02:d6:cf:
                    a9:a4:bc:9e:d8:97:ba:f2:f5:51:a7:65:b1:60:f4:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CE:BD:AB:28:0B:F2:7C:A7:C0:37:2D:15:6C:7B:17:68:9E:99:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f382ba1-e739-37dd-a95b-01175c8d5992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:b1:e6:50:a3:90:cb:ba:1c:ac:8b:66:df:d0:58:b0:a3:
         18:2e:cf:bb:c9:a7:9d:89:d0:7a:82:71:fe:c5:52:d4:b3:64:
         0a:d0:34:3b:f5:d8:f3:a2:7c:55:8d:2a:3d:cc:1a:8d:30:8b:
         87:11:84:47:f0:5d:1f:a0:1b:17:f9:1d:30:68:54:a7:44:10:
         88:85:84:7c:0e:f0:8b:ca:89:c5:92:99:36:54:da:d8:48:e4:
         41:22:51:df:c9:cb:b4:57:85:31:e1:1e:a3:af:df:1c:00:d9:
         e7:56:85:d2:c6:f0:93:23:c6:7a:c5:d8:a9:34:1e:a9:5b:d8:
         c7:22:41:62:97:d2:34:2e:ee:42:da:6d:19:41:dd:44:da:b1:
         bb:a8:b3:3b:35:7f:f8:5c:88:2d:b2:e5:0e:87:09:af:89:06:
         fa:06:ba:0e:e0:82:dd:4b:61:cc:3c:ea:97:ec:3b:a1:8b:54:
         d2:7f:a9:2c:d7:38:14:17:c4:06:7b:8c:01:16:fa:06:85:26:
         af:83:63:0e:f6:8f:a0:ee:ae:7b:a2:91:8f:ff:57:93:bc:89:
         08:bb:ec:bc:47:bd:65:02:36:80:6f:25:24:7d:0e:dd:63:d3:
         3f:47:15:5a:fc:86:b4:dc:e8:09:fa:17:b9:82:0d:13:23:d5:
         17:f2:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:09 2026 by rpki-client