Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/94e555b7-4e4a-3df8-ae0c-07c07e989081.roa
File:                     94e555b7-4e4a-3df8-ae0c-07c07e989081.roa (raw, json)
Hash identifier:          YZ/peGXT6tq2ESS3+8go031lpI8X8kXvUvQqtQKOnRk=
Subject key identifier:   CE:02:76:EC:4A:AF:D8:7E:5A:6A:B0:46:0B:C1:ED:54:F6:70:29:EE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09129F84254AE21976147000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/94e555b7-4e4a-3df8-ae0c-07c07e989081.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397233
IP address blocks:        156.154.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:9f:84:25:4a:e2:19:76:14:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=d6501013-11b6-40de-bb8e-0ff9f1cd95b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:99:d3:be:dc:6f:b2:bc:0c:b1:e3:32:76:
                    76:83:3a:9d:34:eb:4f:a7:5d:46:05:32:30:97:a0:
                    6a:33:f0:e6:42:07:e0:49:3e:ac:7a:50:c7:93:f2:
                    3b:de:8b:11:47:e2:e3:1f:75:9c:e1:1c:7f:49:1b:
                    c2:7b:f3:f1:ee:30:b5:cc:35:58:b6:08:35:0b:8e:
                    a7:14:b1:38:0d:39:50:6c:f9:95:b4:f1:d1:41:2f:
                    54:5a:c6:ea:08:71:7b:be:e0:d6:5b:94:4e:c2:44:
                    b7:a0:93:a4:82:fc:47:2f:74:0c:7a:68:45:71:2d:
                    2a:60:6f:96:54:3b:26:e3:22:03:35:23:93:e2:43:
                    59:ea:f8:1a:f2:31:e1:67:13:e7:91:9c:7d:55:8b:
                    84:d2:b7:0a:27:8a:36:2d:46:43:83:b4:57:dd:ce:
                    65:46:b2:b3:0a:05:29:58:64:59:18:c3:f1:3d:2d:
                    f3:4e:e4:da:58:4a:a5:b6:8d:e3:64:20:8e:dd:e4:
                    4e:4c:02:86:93:d1:be:e9:1a:29:9f:57:39:54:a4:
                    8c:21:fe:b4:cd:d8:be:f7:a3:f8:55:1d:06:c3:87:
                    ee:ed:fe:02:cf:af:d5:7e:ee:a7:b2:23:9f:f8:b1:
                    ff:9c:c9:f9:2c:34:5c:38:72:83:84:67:b0:9f:d3:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:76:EC:4A:AF:D8:7E:5A:6A:B0:46:0B:C1:ED:54:F6:70:29:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/94e555b7-4e4a-3df8-ae0c-07c07e989081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:70:fd:91:e3:ad:eb:d4:d7:30:42:bd:37:c7:82:12:e9:e4:
         ed:56:f6:5b:2b:6c:8a:5f:77:b2:08:4a:2b:1b:eb:5f:25:2e:
         47:2d:41:f9:cd:2e:27:41:eb:03:df:72:49:21:87:a3:fe:1c:
         83:34:2e:27:8f:dd:04:51:60:a3:3a:6e:de:a4:65:73:1b:e2:
         eb:d7:11:ac:bf:62:34:08:02:25:58:d8:8f:4d:24:af:c3:3d:
         ec:4a:a6:74:be:0d:99:c0:66:e7:0b:cd:e9:5c:ab:d1:7f:35:
         5e:01:9c:f0:36:68:cc:b2:b6:81:93:98:f9:dc:d0:a9:f1:0a:
         b4:df:15:67:31:97:3f:da:81:81:68:a3:b6:82:9a:f9:ec:9d:
         53:76:f8:23:d3:3d:94:74:21:07:fc:39:a4:6f:03:b1:3d:21:
         e2:d7:7d:f2:dc:e2:d0:cf:c0:74:0f:f6:56:ec:bb:53:46:84:
         51:b0:a9:e1:ec:c6:a2:5e:7f:c0:74:79:a5:fb:50:8c:2f:65:
         80:53:44:6a:f6:9f:d5:66:95:e0:b2:f4:65:27:46:85:cc:db:
         68:05:4c:91:27:fc:9e:2b:36:8c:cc:67:7e:37:51:a0:c9:70:
         a7:9b:18:38:1b:a4:bf:f2:1e:97:60:04:e9:d6:24:7b:f9:72:
         e6:16:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:37 2026 by rpki-client