Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01a21319-50f8-3e72-a3f6-eaca8c301135.roa
File:                     01a21319-50f8-3e72-a3f6-eaca8c301135.roa (raw, json)
Hash identifier:          +3xO8FMys5ltgzzy4bFIAslZj1jhAXdOqSXcdqnIEzo=
Subject key identifier:   5C:AA:7D:5C:9D:FA:82:79:9A:DB:CA:14:3D:4D:AE:68:7C:2F:24:CF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CEFF255DBC24A8234A48227B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01a21319-50f8-3e72-a3f6-eaca8c301135.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     397224
IP address blocks:        156.154.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:55:db:c2:4a:82:34:a4:82:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=5c1f13b1-56b7-40d9-af58-06b16348d5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:ec:4a:b9:5c:18:e7:c8:35:3e:c2:a9:88:
                    21:4d:ae:1f:3a:e1:06:5f:ee:1d:42:df:1f:58:82:
                    39:78:b6:40:69:2d:42:9e:d2:92:2f:2f:ec:09:cc:
                    c3:9d:d8:23:38:e3:0e:b0:38:58:d3:47:36:6b:76:
                    f4:4a:e0:97:14:f4:53:79:ab:c6:a4:61:a0:92:b7:
                    72:d4:71:b3:23:e5:77:15:80:69:66:2b:24:f1:16:
                    62:94:af:87:6b:fa:55:2f:b1:cb:6a:81:a4:a7:33:
                    8a:07:96:7e:8e:f3:37:11:c6:1b:23:be:6f:4c:34:
                    db:29:26:a4:15:90:ee:84:b7:65:50:62:bf:f6:19:
                    db:7e:e6:eb:7c:a9:09:89:c9:9a:0a:b0:b5:da:ba:
                    7b:1f:9f:7b:29:3c:da:e4:03:d5:72:56:e5:e1:42:
                    d7:74:28:f3:4d:39:cf:59:50:f1:5d:ee:12:be:4c:
                    5b:34:ab:47:9f:68:38:38:6d:b0:0f:0f:d5:bc:ed:
                    e5:11:9d:da:00:39:51:87:16:3a:b2:e2:fb:34:da:
                    63:bc:a7:43:e0:d1:12:86:0b:70:34:25:97:d9:93:
                    1f:e0:4a:40:e6:4e:58:d9:aa:ec:2d:c1:0d:8e:12:
                    d3:76:0e:80:ef:93:39:2b:76:54:36:08:04:a4:1a:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AA:7D:5C:9D:FA:82:79:9A:DB:CA:14:3D:4D:AE:68:7C:2F:24:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01a21319-50f8-3e72-a3f6-eaca8c301135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ee:3c:0d:c1:56:ca:d3:50:62:e7:31:e3:b9:e4:d8:02:a1:
         04:2a:6d:1b:15:4c:84:16:8f:12:42:a3:5b:e7:f0:24:96:fc:
         b3:45:8b:39:59:10:5a:64:0b:6c:be:f9:55:bc:92:df:75:63:
         05:62:5d:1f:18:6b:c1:0b:1f:f0:da:a0:8f:0f:10:ed:9b:84:
         41:ad:ab:e9:eb:a4:ce:57:7b:7d:84:18:d1:79:1f:20:eb:d5:
         bf:69:4e:e5:66:97:35:c8:62:30:7f:04:04:7f:48:a9:84:4a:
         e8:7c:9a:9f:b4:6e:f2:39:5a:19:12:ad:3b:f6:5c:7f:0b:9c:
         4f:cd:90:4e:9c:d5:07:d2:d3:bb:b1:85:41:33:91:ec:8c:5f:
         ef:91:11:78:38:07:bf:4c:f6:b9:74:72:2e:9b:0d:88:30:58:
         85:99:cc:52:49:ae:9f:1a:29:84:62:22:24:83:5c:5c:40:26:
         ef:5c:e3:fc:43:63:ea:f7:e3:ae:33:70:cc:68:11:fc:77:a7:
         19:26:70:d7:88:ae:36:7e:bf:73:e4:a9:bd:a3:d3:11:ae:fa:
         97:e1:60:6a:60:22:26:4c:01:16:28:4e:09:9e:c1:6b:71:93:
         28:66:d8:3f:ca:f7:13:9a:56:20:ff:70:7e:24:65:fd:1f:69:
         23:37:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:57 2026 by rpki-client