Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa
File:                     dda9eb20-2d36-33fe-8705-27586da0d749.roa (raw, json)
Hash identifier:          mIduRCpu/LA3HEt/SSNzbDVg9xUFZLVygMCDtoBUcoA=
Subject key identifier:   4A:F8:15:D8:DF:C2:B9:04:C8:EE:9A:0F:7C:D9:4A:F7:29:15:90:24
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D091290B17085BBBFA2190080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397233
IP address blocks:        156.154.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:90:b1:70:85:bb:bf:a2:19:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=4a083003-5131-4e61-b5c7-a18477f60b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:fc:49:e1:1c:d2:5c:be:2c:47:e0:91:80:
                    f7:da:ef:fc:f1:ad:e0:51:2d:93:d1:69:52:f5:a2:
                    63:8e:b9:8a:91:12:a4:d5:bb:fc:ca:d0:a0:20:5c:
                    5a:d4:87:08:ba:0d:2a:e3:95:44:8e:a7:7f:e9:a5:
                    3c:4f:cf:f0:01:1f:c3:a0:e1:14:02:d8:6a:15:11:
                    ec:d7:f2:7d:78:07:4a:92:45:4a:98:38:c8:e9:9c:
                    0c:d0:9a:d7:96:fe:4c:1f:51:3e:c7:8b:bd:2a:fe:
                    0d:d5:5f:f0:14:b6:1c:f7:14:02:65:c1:5f:56:0a:
                    c4:89:b2:81:7e:e0:91:4d:fa:24:88:56:31:12:5d:
                    90:98:dd:9d:6a:f0:0d:c4:50:da:e3:3b:c8:90:a7:
                    5f:43:f3:75:9f:18:f9:c6:39:bc:9a:63:7e:a0:1e:
                    78:bd:ae:5f:cf:37:ab:18:a6:f2:41:4d:ec:01:3f:
                    75:43:c4:dc:9e:ec:f5:79:42:16:7a:64:ae:61:fe:
                    5e:f6:d4:f2:44:0c:2a:d1:6f:70:53:d3:7a:05:4c:
                    9a:8e:e2:41:f1:69:ea:d5:1a:1a:bc:fc:72:8c:33:
                    c8:5d:d3:8c:53:fa:d4:09:86:4c:2c:e1:e3:6a:fa:
                    35:b8:d3:9b:e0:9d:14:c6:37:ee:e7:c6:d1:b7:33:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F8:15:D8:DF:C2:B9:04:C8:EE:9A:0F:7C:D9:4A:F7:29:15:90:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dda9eb20-2d36-33fe-8705-27586da0d749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:df:49:2f:f6:b3:54:f1:9b:24:a7:24:35:52:38:e5:6b:
         93:2c:6d:71:89:c2:b4:e8:16:eb:cc:73:8e:fa:78:15:f6:70:
         84:ba:22:9e:a6:bf:78:cc:a2:30:2e:b5:66:ff:55:a3:c8:fd:
         eb:d9:48:a4:93:56:14:e3:16:a4:93:1d:41:5e:38:fe:5e:0c:
         86:8c:57:46:2e:01:dc:af:cd:88:b5:03:dd:08:59:a0:00:dc:
         74:86:ae:af:d7:cb:ba:35:c2:bc:69:60:1f:d0:dd:9a:7d:4d:
         82:a7:2e:c3:e2:71:8e:64:c6:ad:4b:de:15:c2:38:6b:f6:cc:
         2e:32:2d:a0:59:e9:7b:bf:c0:f5:ed:cd:61:f2:57:7b:e0:bb:
         53:a4:61:36:2d:d3:45:f6:59:7f:6d:9f:47:88:61:4d:65:20:
         ab:11:e8:1a:4d:7c:1c:8d:aa:8f:8d:15:f6:0b:42:ad:be:34:
         7e:7c:16:58:11:b4:63:b1:8b:4a:ea:7f:25:f8:e0:46:8d:79:
         b5:a7:ba:9e:29:8d:d6:13:5b:3e:07:8b:51:6e:45:71:08:f6:
         58:8a:17:9d:54:a8:ab:75:b7:9e:e8:90:b4:cf:5f:40:65:01:
         81:40:41:b2:c9:b0:31:60:54:fd:c7:a3:9a:3e:f6:29:2a:03:
         56:b2:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:12:44 2026 by rpki-client