Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa
File:                     aeef4753-8f66-39e0-bfb7-8558d699d846.roa (raw, json)
Hash identifier:          HhH4ztyFPSDQEey3A6T21E/JKM7ds1UPRkoRO+6p8MQ=
Subject key identifier:   01:C0:22:F0:40:20:FB:61:A5:79:5D:D0:CF:32:73:00:46:78:AB:6B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A44F3E4ABE3C3151AE9C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397238
IP address blocks:        156.154.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:44:f3:e4:ab:e3:c3:15:1a:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=b78a89a1-30c0-4bed-a70d-3b5fbed22137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:fa:9b:48:12:83:d3:8c:03:b0:48:cc:45:
                    25:59:47:85:24:11:9d:af:c8:5a:b2:8d:06:a6:ef:
                    53:c2:5d:51:58:b1:f4:9f:a7:f2:c5:7b:c6:f5:df:
                    f8:75:cd:49:b2:18:4c:10:a8:52:ed:3f:69:8c:92:
                    c9:9c:b7:d7:ba:1a:72:35:d1:71:cf:30:54:b5:2a:
                    cb:35:d6:42:00:39:b8:98:22:43:eb:f8:7f:ac:ed:
                    77:d5:45:b0:89:cc:cb:d4:cb:f2:dd:d2:0c:0c:56:
                    15:a5:22:76:79:dd:af:90:a5:2f:b5:8a:ef:08:76:
                    a6:54:09:dd:4a:89:ec:39:9f:1d:84:e9:8c:cf:0c:
                    09:10:4a:28:ed:f0:67:a5:1f:b3:00:4e:f8:15:ef:
                    59:0d:8b:e9:db:ba:27:b4:24:b0:c8:2c:68:82:6e:
                    fb:22:52:15:9f:1f:12:f9:d3:df:55:e1:83:a3:46:
                    61:a9:b1:f7:99:c0:0f:30:a8:08:47:34:28:e5:f5:
                    18:3a:a6:6e:12:26:43:2e:3e:c1:02:7c:78:91:16:
                    95:34:ae:96:5e:77:e4:59:66:64:dd:31:98:ea:ad:
                    73:dd:72:5e:3b:c5:3b:1e:a5:76:1a:23:87:d8:b7:
                    17:e2:37:03:23:85:bd:c6:60:7c:d6:f1:6e:a1:72:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C0:22:F0:40:20:FB:61:A5:79:5D:D0:CF:32:73:00:46:78:AB:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:85:18:89:ff:cf:34:5a:e7:08:40:f0:4a:2c:7b:16:93:81:
         8d:04:55:e9:bc:60:58:ee:46:47:42:a5:56:cf:c6:ac:35:78:
         e1:78:3b:d5:2a:c7:d1:d8:9c:ee:e3:b9:63:78:ed:ee:30:5a:
         01:26:44:8c:7c:6a:35:7b:33:bb:d4:e9:72:b5:4c:c8:b6:45:
         af:fa:39:19:e2:f6:85:70:28:de:5c:3e:c4:00:82:c4:12:dd:
         5e:fe:00:1c:4c:6b:82:fb:13:09:aa:43:41:3d:70:54:bb:24:
         cc:32:ec:5c:f8:54:d8:58:b7:f3:b6:f5:1e:51:fa:d2:e1:3b:
         05:df:80:b8:01:d4:fc:db:77:e2:4f:b3:23:29:f1:a5:98:e1:
         5e:34:88:51:fc:e4:40:47:b2:75:ad:75:d2:7e:4f:20:1f:30:
         14:c4:88:1b:9a:a2:18:19:94:98:fc:34:c7:45:8d:0f:e1:13:
         2f:7a:ab:be:62:89:99:f6:4a:c3:c2:f9:d5:d2:47:24:3b:66:
         5e:f4:d1:14:bf:1a:40:ce:ea:af:59:09:b0:74:aa:65:c0:24:
         3a:8c:d8:5a:a1:30:2d:af:08:be:f1:07:c4:c6:80:1e:22:3c:
         60:4b:ec:65:11:d0:57:c4:e9:1d:14:0f:6c:32:f8:ef:33:a6:
         58:15:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:46 2026 by rpki-client