Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa
File:                     98243c64-ddb7-3b76-8b95-d2b34357f71b.roa (raw, json)
Hash identifier:          er2QAdifiGuDC/AeZwXpF7n9nQaaGToXFvtvoAVmNuc=
Subject key identifier:   4B:0E:1B:8E:07:BB:8B:86:FA:58:72:66:CD:F9:AE:D5:9A:35:2A:34
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09129ADEBBE24E62BD24F550
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397227
IP address blocks:        156.154.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:9a:de:bb:e2:4e:62:bd:24:f5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=4e61004b-6df0-4fff-acda-0292cc5fb85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b7:81:61:d9:50:1b:88:73:18:b5:f9:03:8f:
                    3e:f5:1a:cd:98:b7:01:0b:a1:bf:f6:cf:a9:62:8c:
                    02:86:72:49:74:86:c0:8e:04:4a:87:0f:53:ec:b2:
                    90:8c:7e:65:33:f6:66:9f:33:bc:4c:a3:c3:27:92:
                    01:43:20:de:d1:13:e9:fb:0d:5e:30:aa:2d:04:94:
                    25:cb:00:f8:d8:67:c1:b5:1d:b0:90:f8:1a:80:38:
                    5e:b3:f1:68:5e:a5:3f:b2:59:97:d9:ae:3a:ab:b4:
                    15:d9:09:6e:1b:a9:52:00:19:08:0a:a6:cb:78:b1:
                    b4:df:a5:84:53:1c:aa:3e:bf:98:b4:d9:a4:88:96:
                    4c:25:f3:9f:43:80:7f:76:f2:e9:53:66:f7:b6:62:
                    f9:0e:be:d8:ec:a6:33:71:c3:07:01:10:23:c9:42:
                    75:c1:24:24:b9:5e:45:97:f3:ba:2b:55:a7:82:ad:
                    7b:18:e6:19:7a:26:d4:46:4f:2e:d6:1b:b3:9c:5e:
                    80:26:bf:86:7f:3e:56:e1:eb:58:79:e3:7b:1d:94:
                    d2:e7:7e:9f:d5:30:ff:c2:8b:55:86:c4:5e:b3:d3:
                    94:aa:51:3a:3d:6b:94:36:2f:c3:b2:1c:8b:c8:1e:
                    81:7f:b2:c2:ce:4b:6f:74:9b:5f:b4:b5:85:e7:f1:
                    98:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0E:1B:8E:07:BB:8B:86:FA:58:72:66:CD:F9:AE:D5:9A:35:2A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f1:85:b1:bb:b3:97:7f:08:3d:68:ac:c2:b4:3a:59:9b:42:
         2e:1e:60:19:8f:86:6c:44:09:69:b0:50:7c:dc:1c:4d:c7:e0:
         d5:0a:33:08:89:9d:2a:e1:c7:d0:4f:7c:77:23:52:00:bb:21:
         2d:b0:d7:fe:85:81:8a:3e:0e:a6:31:16:c6:ad:cb:9e:de:ae:
         db:07:73:a6:e5:1d:de:65:fa:0e:09:63:3c:cc:2e:2f:97:aa:
         fc:29:8f:a9:b2:7b:e9:f1:9a:16:12:50:a4:3d:2e:0d:f9:9d:
         6f:7f:ef:95:e1:89:36:6d:1c:2d:15:11:7a:c1:e5:46:75:40:
         0d:36:a1:aa:ee:73:b8:9b:69:19:bc:9b:85:b5:c8:31:84:ed:
         85:e2:d3:a1:8a:87:f4:42:01:8e:9b:24:cf:b1:92:91:fb:47:
         94:e0:69:c9:11:bb:a0:c6:8f:ba:a8:16:11:b4:45:e1:ca:30:
         a0:8c:13:2a:d6:a1:15:45:a5:f7:5b:8b:dd:f6:46:7b:38:fc:
         57:2b:c5:e1:af:82:7c:9f:93:f9:57:ba:a6:09:ae:6d:cd:63:
         c1:06:ce:69:82:ab:b5:4d:e2:29:ed:26:3a:22:d5:54:7a:86:
         66:68:b3:14:2a:bd:39:88:8e:d0:e9:49:06:f2:a6:ad:88:c3:
         3d:6d:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:01 2026 by rpki-client