Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c82d3e82-c4aa-34c8-8219-fd341850170c.roa
File:                     c82d3e82-c4aa-34c8-8219-fd341850170c.roa (raw, json)
Hash identifier:          ZXqE7DvgXmHqar/YP5ot733QSmXZ/tBlf697bToJG6E=
Subject key identifier:   DA:08:1E:49:95:7A:76:73:E0:4A:B6:6C:AF:E6:5B:13:E1:F0:11:25
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09127BA121C4391A7215CBC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c82d3e82-c4aa-34c8-8219-fd341850170c.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397224
IP address blocks:        156.154.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:7b:a1:21:c4:39:1a:72:15:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=0c4f4747-3c97-4b51-ae6e-f6e18fcfc617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:e0:ae:2c:e7:94:1d:10:1c:a4:6e:b4:1d:
                    6d:6e:a1:a2:d0:84:c2:c2:32:aa:26:eb:6d:25:41:
                    70:b6:6a:5a:d7:b5:bd:9f:e7:8f:a5:71:22:2a:c3:
                    af:14:be:1f:ee:6f:9f:fd:07:22:25:e0:d8:b4:f1:
                    37:3e:cb:36:c1:32:82:f0:98:93:b8:a7:9e:56:6c:
                    49:63:f2:a8:b5:e1:93:16:08:67:14:bb:fa:c1:8b:
                    06:35:70:d9:d3:e5:3a:cf:83:2a:30:cc:c4:f5:f8:
                    53:01:e3:59:ba:f9:24:47:eb:64:d5:4a:cf:c4:14:
                    66:a8:66:2e:7c:92:0c:f9:eb:92:79:34:87:4f:ee:
                    8c:d5:ae:17:3e:a9:13:92:04:1b:88:53:60:32:ee:
                    0d:e9:9a:b4:83:ee:2d:4f:03:ac:69:ae:d3:89:0b:
                    dc:fb:5e:ce:bb:6e:d0:73:8d:f2:b4:c5:e8:aa:06:
                    14:8f:b2:f6:a3:b8:57:50:d1:a8:97:d5:1f:89:cf:
                    fb:46:85:c2:5d:aa:2b:ed:ac:ad:84:0e:a4:e1:f8:
                    97:ad:f8:db:85:00:18:aa:21:f0:f3:d9:96:40:83:
                    fc:25:61:17:fa:f7:e5:55:fd:82:48:f3:0e:8a:45:
                    0f:cb:1c:0e:90:78:8a:a3:dd:b5:be:39:69:ca:f8:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:08:1E:49:95:7A:76:73:E0:4A:B6:6C:AF:E6:5B:13:E1:F0:11:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c82d3e82-c4aa-34c8-8219-fd341850170c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:b3:27:18:32:09:74:91:63:4a:4f:77:1f:ff:a1:1f:a0:
         56:a4:b0:b8:cb:27:be:67:71:a6:7d:f1:b8:9d:3c:60:2f:93:
         94:fc:32:0a:73:05:18:1a:0b:c6:8a:35:7e:0d:3f:d1:37:b0:
         37:54:e8:a9:23:cb:2a:4a:1e:17:15:f9:8c:70:b6:ce:a9:1e:
         b8:64:11:22:cf:7f:99:23:3b:b3:af:75:5f:e9:ea:73:c5:c6:
         d1:2b:f4:19:6d:43:28:65:2b:1d:4b:69:c7:c8:c8:5b:85:86:
         6b:68:13:c2:79:0b:d1:ab:14:e7:f5:06:40:52:d1:06:9d:74:
         a2:ed:02:0d:e2:72:b9:81:06:95:59:d0:b2:9d:b8:43:30:39:
         ac:92:d2:0f:67:69:f4:5a:27:46:27:6b:c2:a6:31:55:07:b7:
         69:0f:b1:14:9f:48:a4:5c:4f:f6:9a:06:9e:a4:24:c3:70:41:
         2b:f5:b8:af:d5:32:a0:87:08:b9:19:3f:39:69:c2:4d:3b:fe:
         44:7c:85:a0:a5:c3:7f:54:95:a5:47:26:9b:36:00:d5:4a:2c:
         0e:1c:0f:24:ad:2b:24:d9:6c:25:78:e5:0f:69:19:57:7d:8c:
         aa:ea:a6:17:47:31:2d:79:f1:a5:2e:8d:24:ac:24:29:70:8d:
         d5:ee:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:09 2026 by rpki-client