Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa
File:                     0f709cff-1636-3383-868d-85240b9b89e7.roa (raw, json)
Hash identifier:          DkLU7iMz+F0yn3ALtD0Kz3CzoFoh5LzFxGZ1Ror9VBU=
Subject key identifier:   D9:C5:7B:93:8B:B3:02:70:15:32:76:58:A9:25:B8:7C:A8:3B:37:90
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FEE2BD3F6EC3269800E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397220
IP address blocks:        156.154.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ee:2b:d3:f6:ec:32:69:80:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=de054475-8747-4ea0-8050-05ddd7262d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:68:4f:d0:96:16:ea:9d:58:14:22:e8:d9:
                    b5:72:85:40:1e:71:32:75:f9:04:57:d9:f9:18:06:
                    a6:18:f4:5e:7f:9d:fe:8f:bf:53:7c:f0:32:d4:11:
                    a0:34:77:31:4d:f6:2a:6a:87:6d:2b:74:2a:3e:85:
                    85:7c:ba:46:f4:4b:2d:16:13:fb:e5:38:c1:11:8b:
                    84:c3:3f:02:de:e1:02:e4:ad:31:77:ef:23:5e:a6:
                    28:ef:31:42:74:6e:e7:34:c8:3d:f9:ad:f0:02:c9:
                    a3:ec:e6:4f:79:1d:7b:b0:82:a6:16:98:33:39:99:
                    36:d7:db:67:77:74:0e:93:fc:36:90:8e:30:e2:6f:
                    e7:13:1b:6a:8b:f4:b2:18:c5:87:89:50:09:89:fd:
                    e6:cf:89:34:b5:b2:b4:7d:3a:a8:6c:7c:d2:f6:8c:
                    5a:a8:01:0c:20:62:fd:a5:8b:2d:0d:f5:1a:2e:f8:
                    e3:ab:ed:9d:94:dc:f4:f6:64:89:89:d7:76:03:57:
                    d6:da:c2:97:59:8c:bb:b0:16:9e:fb:44:a1:aa:26:
                    37:b5:79:9f:ec:6e:a8:30:bd:d1:14:74:49:2e:13:
                    88:62:d9:83:fb:85:f2:51:8e:4c:c3:4b:fb:b0:cc:
                    d6:a8:db:ea:4d:35:a9:2c:b3:c1:5f:d7:28:7f:a1:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C5:7B:93:8B:B3:02:70:15:32:76:58:A9:25:B8:7C:A8:3B:37:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f709cff-1636-3383-868d-85240b9b89e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:8e:d3:21:c8:ed:02:c9:a5:92:c9:59:f1:31:a9:43:4e:
         e3:4f:55:44:d7:4f:d3:b7:4a:05:b5:9b:4f:2f:bc:9c:94:00:
         24:8d:8e:dc:03:eb:1e:a4:e4:99:1e:ca:32:36:20:94:cd:df:
         f2:53:c1:d7:3f:08:db:98:0a:97:2e:3c:9b:63:c4:be:c2:65:
         a1:36:06:81:3a:94:be:0c:97:84:8b:6c:4e:18:6a:02:92:76:
         e5:87:76:fd:31:e8:5d:d7:d4:7c:c6:9f:c3:e1:52:f4:ce:d4:
         3c:3f:3c:59:52:14:cd:f8:e3:06:d0:2e:0e:0e:a5:6a:37:da:
         aa:ff:48:f5:0c:05:0e:fb:55:ad:ff:b8:e0:89:4d:77:e6:85:
         10:f7:9b:00:38:39:45:21:22:31:ed:0f:2a:9c:3e:fe:1a:7f:
         d3:1a:d9:34:6b:35:28:a2:82:b0:c7:9b:4d:d5:e2:2d:b4:3b:
         77:13:7e:bb:d9:25:3b:68:f9:af:ae:de:83:4b:b6:2d:b5:52:
         d0:38:35:66:8b:ef:9e:ee:98:13:72:e8:cb:eb:16:50:40:aa:
         00:44:20:9e:8d:9d:93:4d:d2:c9:fd:11:10:83:db:22:20:23:
         e1:35:b4:52:13:b3:f8:fa:c0:54:ac:ae:fc:14:a0:97:83:69:
         72:f3:d3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:10 2026 by rpki-client