Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fabb9c8e-7c19-35ee-b7bf-60dcf499e548.roa
File:                     fabb9c8e-7c19-35ee-b7bf-60dcf499e548.roa (raw, json)
Hash identifier:          8hGysGad5+6ws3PXp+31C3vAKjfo+jvwSSUUFklzUFE=
Subject key identifier:   69:3E:64:27:41:14:50:96:3D:C2:5F:05:B3:2F:71:3F:E5:16:E3:B3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09129DF382EE536A2E80E280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fabb9c8e-7c19-35ee-b7bf-60dcf499e548.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397242
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:9d:f3:82:ee:53:6a:2e:80:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=68b8baf1-0b65-4c81-ab72-b8cc72ecbf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a7:88:ef:5b:33:57:e1:92:23:94:d5:d7:19:
                    fb:31:99:b4:21:9b:21:87:ef:1f:2f:66:e7:6f:a8:
                    80:8d:90:14:d3:0e:72:44:f8:60:fc:82:a3:4b:69:
                    bd:4c:1f:db:36:c1:b9:4b:4b:09:de:d0:69:a0:cf:
                    c7:bd:d5:31:89:48:21:60:6c:d6:4f:48:26:90:1a:
                    75:28:56:51:4e:44:da:08:00:61:b7:83:f7:ed:08:
                    9a:4b:f0:ec:fb:68:14:8f:5e:0a:3d:f9:29:d7:55:
                    ea:4c:1a:67:70:6b:fa:0f:57:d7:af:b8:72:c8:a3:
                    34:e8:27:93:e0:bd:8d:8d:0e:86:62:dd:7a:ad:51:
                    46:52:4e:be:aa:ee:02:6e:ec:c9:61:95:db:19:3b:
                    30:b7:dc:b5:ba:1a:db:46:5e:f4:ac:66:a3:7b:72:
                    1a:e0:cd:ab:36:a3:32:ea:39:c8:89:25:bc:f6:6b:
                    cc:2a:dc:d8:aa:03:b7:37:87:5a:30:cc:f5:9e:fc:
                    36:ac:ce:1e:96:72:99:70:e6:ec:5c:97:3e:6d:31:
                    9c:c2:73:09:ad:5f:ce:92:bf:68:d2:3a:bf:15:03:
                    af:d7:8f:ac:82:e6:d3:9d:6b:45:cd:86:7f:3b:08:
                    5c:5c:f8:fe:d5:fc:be:29:73:ca:91:02:ad:e6:df:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:64:27:41:14:50:96:3D:C2:5F:05:B3:2F:71:3F:E5:16:E3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fabb9c8e-7c19-35ee-b7bf-60dcf499e548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:d9:a6:b2:d7:11:65:0c:ff:2c:9a:7c:ab:27:21:fc:90:
         4a:f5:8d:a4:37:c8:c1:6a:52:79:d0:b0:40:08:79:01:06:67:
         10:b1:42:d6:fb:87:94:c4:89:0a:52:46:d0:fc:52:03:ee:cf:
         1f:14:68:0b:3b:d3:3b:53:89:43:d5:ea:cb:08:55:59:fe:0e:
         d0:69:4c:43:f9:83:70:01:54:91:67:df:0a:e0:be:f6:e3:7a:
         4d:70:f5:c0:e0:b5:d6:51:d8:58:08:11:ce:39:a8:5b:a5:d3:
         ef:55:14:6b:f0:42:e9:d2:d1:6f:49:a4:2b:1b:2c:f3:1b:28:
         94:c2:99:23:6d:76:8b:fb:dd:0e:bf:83:21:1c:c8:a7:b4:c2:
         64:09:74:ac:51:56:c5:b9:a3:ac:87:6e:6c:8f:dc:b5:f7:89:
         d1:80:8f:25:3e:f5:2a:a0:45:1b:67:ac:00:bc:92:29:65:f8:
         e1:eb:4e:2d:2b:cb:02:4e:64:b8:69:c6:a9:b6:ca:84:d1:fc:
         82:af:db:3d:73:7e:75:23:92:bf:1b:44:c1:94:c5:eb:17:c0:
         53:bd:e0:ca:d3:2c:49:9d:46:30:0c:25:57:9e:33:c5:9f:8a:
         14:e0:a4:1d:54:b5:54:7c:9d:d3:71:1b:6d:96:db:0b:1e:69:
         af:5a:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:11:45 2026 by rpki-client