Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6268633-223b-3e61-9e61-f31ce9c820ca.roa
File:                     e6268633-223b-3e61-9e61-f31ce9c820ca.roa (raw, json)
Hash identifier:          pXP/8E7lUsZPAKE0Nejmr5o2CoGBg/+oDMDBGIP3hX4=
Subject key identifier:   A4:2E:47:F8:D4:14:E1:8F:F6:62:29:24:24:AE:24:FB:C3:09:35:F8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A506E146979C3D04897C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6268633-223b-3e61-9e61-f31ce9c820ca.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397216
IP address blocks:        156.154.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:50:6e:14:69:79:c3:d0:48:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=dd25e2e6-ef71-486c-9fb4-31015256a125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:11:ee:95:6c:36:5d:d5:07:6f:fe:8e:93:
                    51:de:d6:84:b0:85:b3:54:34:48:e7:f5:0a:f6:b6:
                    67:ce:3e:a3:9e:d9:b9:03:5e:a5:54:a9:74:63:6f:
                    b8:1a:93:aa:38:d5:60:15:69:11:4b:ae:30:5f:28:
                    dd:82:d1:c9:69:16:f8:66:9d:30:b2:a5:30:cd:c8:
                    23:5e:c0:5f:a4:94:c6:bc:d6:6f:91:f0:7c:be:d6:
                    75:44:b4:80:2b:15:86:87:77:1a:8c:8e:cb:3d:2b:
                    a9:4e:ba:06:70:a7:e3:6d:77:50:11:d2:ab:5d:c4:
                    db:57:9b:6c:96:1e:37:07:8c:f7:07:07:d9:fc:a2:
                    dc:02:78:d4:53:ec:4d:d4:91:b2:48:f5:ac:50:12:
                    65:35:c1:9c:2a:d6:e4:cf:8d:3a:31:4e:1c:3e:f7:
                    47:0f:0a:c7:28:b6:b0:b2:36:2e:08:24:97:47:ff:
                    74:86:80:f4:36:af:00:df:58:fe:20:80:a5:72:24:
                    3c:9b:0e:c9:64:37:d0:ad:40:54:6d:a0:0c:5d:40:
                    6a:6f:f2:75:d7:2a:51:1e:20:81:03:3d:51:e8:de:
                    05:46:be:55:b5:18:79:a0:5b:97:17:74:65:dc:8d:
                    ab:a6:2b:6a:01:19:98:21:e1:91:04:75:d6:25:67:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2E:47:F8:D4:14:E1:8F:F6:62:29:24:24:AE:24:FB:C3:09:35:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e6268633-223b-3e61-9e61-f31ce9c820ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:0b:88:f2:ad:16:d0:c7:fb:76:bb:6d:af:66:81:84:03:
         35:b0:21:bf:a1:fd:dc:e0:8f:3b:c2:23:99:d5:19:f3:5b:35:
         c5:47:e8:92:d8:ae:92:a7:96:4d:76:2e:91:78:32:25:e2:71:
         4e:6a:ed:b8:42:0a:9f:4d:13:c4:76:8e:86:11:04:ef:d7:44:
         01:89:85:3b:c5:14:86:8c:5e:20:04:a3:b1:43:90:78:75:9b:
         7b:b8:76:9f:9f:9c:7e:14:3d:ca:98:9b:a2:53:02:c4:b6:46:
         b4:01:29:eb:c5:1c:b7:26:52:26:f4:48:7e:e3:41:68:a4:32:
         68:58:2e:92:80:c1:43:47:15:59:6e:a3:9b:71:44:17:55:e9:
         d4:a1:70:65:ef:0f:aa:27:f1:9e:5b:46:7d:f7:45:c8:d5:d1:
         97:6e:aa:04:8a:85:ce:d3:83:18:79:ba:f1:1a:be:b6:9e:23:
         f3:38:4a:79:75:24:dc:0f:38:d3:58:3b:29:73:70:f7:c2:a0:
         4d:77:18:35:af:b1:1b:2e:2c:0a:d4:ed:d9:3d:37:8e:33:2f:
         07:c0:ac:19:5d:6f:b1:ec:5c:ce:7d:90:03:b3:3f:2d:88:73:
         31:9d:1a:c5:cf:40:b0:20:4c:4f:00:73:ca:8b:61:6a:c9:e1:
         8d:44:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:47 2026 by rpki-client