Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3268be4e-f8cb-32f8-b22e-958b16262926.roa
File:                     3268be4e-f8cb-32f8-b22e-958b16262926.roa (raw, json)
Hash identifier:          nEGcXKjrEOACNDxEI3ThvQuQKeOTQ9X2bA+tO9TOA3g=
Subject key identifier:   32:02:EB:93:66:7A:14:79:9A:E8:4F:19:A7:13:44:AA:70:FE:D5:50
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09128C82C9606F1315421980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3268be4e-f8cb-32f8-b22e-958b16262926.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397234
IP address blocks:        156.154.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:8c:82:c9:60:6f:13:15:42:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=884e4936-183a-40f5-90ba-a74aea92c354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c5:41:78:26:cb:95:51:4d:82:79:46:5d:d0:
                    d7:66:a4:1a:0f:ff:b7:da:c9:6e:a0:df:7d:ef:51:
                    60:f8:23:e1:b8:09:67:51:c3:9f:b8:f6:e1:c9:9b:
                    ae:fb:44:4e:55:8d:e3:42:1e:d8:35:d8:21:d4:08:
                    0f:b0:15:31:96:f8:de:e3:f6:09:e6:5a:40:b7:1e:
                    11:5c:6b:1c:f7:ed:da:e7:c6:34:df:4e:21:82:33:
                    c5:67:cf:38:41:66:13:25:97:58:5c:ea:ec:94:9b:
                    40:23:9a:09:49:d7:52:8f:c7:91:1c:8b:68:21:32:
                    0a:09:75:31:4e:8e:4a:8f:fe:c3:53:b0:56:52:6a:
                    b0:e8:84:fe:43:32:7d:45:00:37:08:ce:42:c8:b4:
                    0e:73:8e:2b:3a:f5:9f:3c:f2:43:3a:4f:02:4d:4a:
                    6a:3c:aa:bc:20:e9:0b:37:40:02:a5:0b:7e:bf:0f:
                    0e:5c:9a:6e:9d:21:8c:6a:d5:e0:54:5b:5d:8c:fc:
                    80:fb:e0:3f:43:f6:1b:0a:3f:d8:45:0a:af:67:68:
                    ae:e6:a4:3f:e7:dc:c6:42:b4:b2:d0:89:64:83:3c:
                    b0:37:15:2b:03:f7:87:f2:53:13:fc:fc:59:70:8b:
                    e4:01:d4:92:51:91:6f:54:df:6f:6f:1a:4b:9c:eb:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:02:EB:93:66:7A:14:79:9A:E8:4F:19:A7:13:44:AA:70:FE:D5:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3268be4e-f8cb-32f8-b22e-958b16262926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:fa:a3:61:11:e2:0d:f8:87:dc:da:32:19:03:cf:57:8c:
         cb:b5:8c:ea:d5:9b:3f:1c:dd:fe:73:37:2d:50:9e:0a:bc:f2:
         1f:f1:81:08:dc:35:65:dc:a8:86:39:1f:7b:9f:3c:1c:a3:33:
         de:a6:76:1d:1c:ed:3a:c0:77:25:e2:5a:13:c0:f5:ae:14:07:
         80:20:d8:3e:84:09:5b:11:a9:ee:8d:ab:0a:6b:1b:49:e0:b3:
         3f:56:61:12:a8:4f:69:bd:2b:49:87:e8:52:8e:2a:20:36:74:
         cb:13:ad:d2:24:2c:70:84:a6:97:6b:de:40:98:0f:41:1b:dc:
         57:74:50:2b:22:fe:99:9b:3c:4b:c5:3b:1d:ae:34:64:13:f8:
         ac:b7:45:fa:c1:73:a5:db:62:da:d4:41:02:72:2c:70:cc:78:
         f8:df:13:03:5d:47:a0:b3:a9:83:2a:2a:88:5d:9d:aa:a3:0e:
         85:d3:8d:88:85:a8:26:bd:8f:cb:b6:4d:73:a4:3c:42:ce:63:
         bf:ff:04:e9:ff:44:30:d5:5d:39:3f:9c:ea:f8:c5:78:f4:67:
         a5:19:b2:14:fb:ba:c3:62:44:3f:76:b1:ef:b9:5e:e7:46:ba:
         85:13:08:f6:36:70:96:e5:ef:31:37:50:16:6f:09:0e:93:9c:
         e2:58:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:41 2026 by rpki-client