Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71924634-873b-3daa-adad-43e19071b618.roa
File:                     71924634-873b-3daa-adad-43e19071b618.roa (raw, json)
Hash identifier:          v/C/sD5TWoXjqLxDA8T3n75N/rTezqS3Q7VKDCjRiPc=
Subject key identifier:   F4:D0:7D:E1:AA:C2:F9:C5:D4:D1:DF:71:41:B2:A5:BC:53:90:84:F1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CDC67BE7383BF3C663B928180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71924634-873b-3daa-adad-43e19071b618.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     397227
IP address blocks:        156.154.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:be:73:83:bf:3c:66:3b:92:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=69d23397-beeb-4014-b9b0-32a71dbb9ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:2c:d2:0b:c0:2f:67:7e:6d:70:90:c7:fd:
                    a3:8f:71:d6:0f:c4:ee:58:8a:d4:91:5e:25:ee:8e:
                    56:ce:18:18:8e:26:f9:9b:b2:34:b7:c8:50:d6:53:
                    40:72:4e:e0:82:9c:59:74:9f:c2:1c:6a:ca:90:52:
                    a0:de:2c:93:0f:51:1b:81:e1:04:cf:40:15:98:39:
                    c6:82:66:4d:4e:e3:c9:6c:90:35:a5:ae:7a:bc:0e:
                    a6:7b:2d:3d:65:b8:ce:46:3b:69:b3:c8:98:6b:6d:
                    1c:68:ac:d2:29:21:86:58:93:62:a6:53:e7:e3:a9:
                    55:55:c5:3f:6a:84:9e:81:18:20:47:2a:56:51:90:
                    31:91:c3:52:f9:11:3f:4a:35:26:da:a8:e9:7d:16:
                    a0:97:1f:8b:92:ea:aa:35:81:0e:89:6b:1e:2f:fc:
                    ac:fa:fe:bd:a9:97:46:af:9a:65:6f:e9:b2:bc:e2:
                    74:d3:ad:46:1e:df:b9:d6:b9:63:06:ae:c8:6a:12:
                    d7:e1:36:99:88:23:5c:86:53:4b:17:ee:21:21:7c:
                    d7:48:44:b7:dd:83:a6:fa:c9:e2:a6:92:14:4d:75:
                    26:b0:4b:00:12:c6:53:cb:ec:ad:fb:0f:8b:9b:04:
                    60:99:08:7c:e7:a8:1e:c6:d9:ba:c1:f9:80:62:f0:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D0:7D:E1:AA:C2:F9:C5:D4:D1:DF:71:41:B2:A5:BC:53:90:84:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/71924634-873b-3daa-adad-43e19071b618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c1:59:08:fe:1e:8e:60:ea:dc:b3:87:27:ec:d4:b0:0d:63:
         4f:a5:73:ce:56:64:2c:8b:18:5a:43:1b:a6:b9:78:f2:3d:a3:
         3e:3c:31:06:9c:f8:e3:51:25:e4:61:05:5b:ff:4f:30:5e:6b:
         2c:48:d6:2e:b1:b5:89:97:a2:47:d4:99:0f:b0:71:85:f3:60:
         08:6e:9b:86:49:ba:e7:b9:1f:39:6b:23:ed:72:78:4f:88:85:
         f3:73:8d:cb:15:aa:9a:b2:b6:14:3b:3b:1a:04:44:68:ab:29:
         30:88:77:3b:2f:2e:90:0a:02:dc:24:b8:af:d7:be:20:20:48:
         f0:c7:9d:27:b6:c8:d4:3a:8f:8b:36:01:ec:bc:bb:c5:7e:71:
         ac:9b:c7:f1:7f:01:52:a2:50:9d:bf:c4:1e:b7:0f:94:0f:5c:
         55:81:8a:08:85:97:e7:0f:ca:2d:cf:4e:49:5a:98:70:4d:06:
         8e:2f:f3:56:8a:08:98:86:e1:de:7c:89:fa:7e:57:95:a0:c7:
         2f:0c:7a:a9:db:0c:51:d0:9e:19:31:4f:02:a6:bc:7e:77:60:
         f0:5c:e1:82:d7:8c:7d:48:10:d8:cb:41:72:9c:5b:03:68:ce:
         50:6c:7f:86:ec:97:9b:a7:08:73:37:9c:10:01:6a:e3:92:b1:
         54:35:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:05 2026 by rpki-client