Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5aeedee-c3b2-3e13-a91b-dc6fab95d4fd.roa
File:                     c5aeedee-c3b2-3e13-a91b-dc6fab95d4fd.roa (raw, json)
Hash identifier:          4UeoN0LNUUmp1irp877hwrD60O1EOieHO7PeMZ6/f4U=
Subject key identifier:   B1:4E:F9:36:3F:A6:5B:B5:FC:1A:22:1E:F6:73:FB:83:AE:97:5A:51
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DA11ADFB33B731B1B29C6BDA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5aeedee-c3b2-3e13-a91b-dc6fab95d4fd.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     399153
IP address blocks:        156.154.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:df:b3:3b:73:1b:1b:29:c6:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=f44c6459-5d78-4235-8f49-9a24fee80825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:a1:cf:f6:cb:a4:f1:ad:db:c1:47:00:5c:
                    7d:2c:6b:d4:36:35:fc:90:83:38:96:d8:3e:96:86:
                    79:1f:96:6e:02:ac:03:da:5e:96:49:a2:15:09:18:
                    8f:42:e5:fd:df:57:77:08:87:4b:75:4e:b2:0c:6c:
                    74:74:99:81:b7:7e:e4:4b:ca:bc:c4:4e:f8:5b:b8:
                    66:fa:ee:7c:ee:7f:a7:b8:41:1f:3e:1f:63:46:2a:
                    7a:5e:10:ad:4e:dd:b6:e1:07:13:cc:a9:47:13:30:
                    05:3f:60:3b:66:7c:67:c2:67:9a:fa:62:85:49:a1:
                    6e:6c:e5:97:72:60:98:df:c1:cd:5e:33:64:99:90:
                    55:f6:0e:c2:16:ff:a1:94:9b:db:14:92:20:53:e5:
                    fa:3d:ea:a5:9f:10:ed:32:ca:3d:8d:a7:a9:03:b7:
                    ed:f7:2b:28:d9:09:18:31:5b:3f:dd:a3:ad:91:eb:
                    f7:04:48:c6:48:b1:bd:db:81:d9:12:fe:6c:b5:5b:
                    13:d8:03:38:ee:8e:62:5a:8f:3f:1c:9d:f0:66:c9:
                    67:e3:6e:2d:26:dc:f5:05:4f:87:fc:ff:6c:f2:06:
                    b9:a4:4d:ba:47:d6:f0:99:62:0f:7c:f5:8a:68:e5:
                    e2:9b:69:35:66:5c:6b:c2:7b:44:ae:54:dd:79:ff:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4E:F9:36:3F:A6:5B:B5:FC:1A:22:1E:F6:73:FB:83:AE:97:5A:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5aeedee-c3b2-3e13-a91b-dc6fab95d4fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:d6:59:c8:7f:78:7c:3b:70:66:8d:a0:15:10:3e:23:19:
         60:74:a6:fd:00:4e:74:f2:12:bc:10:bf:25:85:3e:92:7f:44:
         13:67:aa:35:7c:55:0c:30:30:ef:4e:97:5c:6e:9f:4e:2d:a7:
         ae:3b:cd:fb:61:87:60:ee:08:dd:92:54:57:ca:ad:59:3b:50:
         c9:58:69:be:95:8b:e3:c8:99:6a:40:bc:62:c2:8d:38:95:c9:
         e1:41:e3:14:3f:84:27:f4:63:d8:73:50:5f:b9:00:52:29:df:
         96:50:d2:67:e1:f7:33:7b:e4:9b:80:23:e8:a1:0c:d6:9c:25:
         47:7f:a3:39:ab:51:2e:61:b5:7a:68:08:dd:d2:32:43:ef:ad:
         e5:10:fc:34:cc:00:6e:8d:3d:17:86:9d:c1:99:bd:bf:13:98:
         22:1c:6a:4a:57:01:15:2f:9e:e1:3f:f8:f0:05:21:d6:ec:2a:
         e7:64:07:a7:e4:59:80:79:9c:00:cc:bf:67:9a:80:1b:e2:99:
         93:ab:d9:01:74:10:39:10:a7:78:5b:46:b1:b3:d7:dc:2c:92:
         39:64:57:94:aa:c4:60:20:38:c0:a3:be:40:1f:a9:c7:72:d4:
         45:a7:67:5d:cc:47:2f:e3:ab:4b:f3:a0:05:45:b2:c9:71:fd:
         c0:97:c1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:36 2026 by rpki-client