Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa
File:                     9ad2416f-6539-3ef4-9992-d4de90c820d7.roa (raw, json)
Hash identifier:          QszR6LYDAzRtgZiRzI4C1SXoOATpALXGU3fnAIYASEw=
Subject key identifier:   91:6A:7E:D4:49:96:7F:2A:37:75:BF:0D:0C:89:58:5C:DD:1C:EE:FA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FF2E90527578396275DE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397220
IP address blocks:        156.154.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:f2:e9:05:27:57:83:96:27:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=0961927b-8da1-40fa-b5e5-a40a241120fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:06:32:bb:15:0c:75:4a:78:ff:18:17:40:
                    11:7b:18:3b:94:00:d4:c1:40:4a:b9:50:04:dd:c4:
                    55:34:c2:de:93:36:c9:40:e3:98:f9:36:99:88:9c:
                    01:b0:fa:b4:f6:1f:7e:b6:26:58:27:ea:da:93:eb:
                    83:2e:72:b3:08:af:b0:84:fc:f8:f1:e1:48:8f:6e:
                    60:9e:bf:b3:81:b0:a3:3b:97:e2:0c:91:bf:a6:ad:
                    bd:74:61:00:9f:6d:bb:14:27:eb:77:da:d1:85:ca:
                    45:87:08:b9:5e:54:fd:68:21:de:13:45:f1:ff:c1:
                    cd:1c:c3:73:f2:a0:46:bb:78:6c:07:b6:4f:c5:46:
                    77:ca:2b:d8:82:54:85:fb:57:cb:08:5c:68:3b:06:
                    88:d6:44:e3:cc:4d:fd:c2:2c:21:61:b0:b9:0b:36:
                    35:5a:e1:ee:c5:f9:27:81:c7:74:89:55:ba:bb:4b:
                    48:5f:0c:6f:a4:6c:d0:f7:96:ad:6b:94:0e:25:4a:
                    52:61:3c:4a:2f:03:7e:98:84:93:a2:23:54:ed:cf:
                    4d:63:40:ba:e9:a0:9e:77:54:6f:73:dd:de:93:df:
                    82:8f:21:34:18:57:f4:4f:ae:20:da:b0:8e:5c:04:
                    9e:e6:0b:77:ae:3b:a2:9b:9c:0d:29:71:0c:bc:de:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:7E:D4:49:96:7F:2A:37:75:BF:0D:0C:89:58:5C:DD:1C:EE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ad2416f-6539-3ef4-9992-d4de90c820d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:cd:15:93:51:9e:41:2d:b3:a2:3f:dd:44:e2:c2:8c:09:
         c4:00:18:df:fd:3f:65:ac:c3:aa:a9:0e:5e:7d:3c:48:a1:8f:
         c2:99:3e:a9:df:0a:2f:98:6c:ab:dd:cd:f5:47:31:82:d0:d3:
         38:ea:1c:d0:47:a7:04:b5:12:a4:6c:af:4a:ed:c2:de:21:d6:
         d3:60:9a:01:cf:df:05:f6:c7:de:e5:60:bc:2b:c5:06:42:2c:
         0d:12:49:e0:2e:33:c5:7b:a8:b8:72:ff:33:9e:77:8a:ee:58:
         27:09:3d:dd:c9:de:9f:ef:8d:8e:ad:0c:3d:d9:6d:e1:0b:91:
         27:02:b5:f9:af:18:e2:4a:d8:8e:8e:72:27:f5:23:9b:57:e9:
         f1:ac:a6:0e:9a:10:29:38:a8:99:bf:d2:a7:f6:a8:a4:5c:a8:
         8c:f8:9b:b7:9a:8f:bb:1a:f5:6f:21:4e:d2:df:ad:e8:0f:b0:
         f8:a4:7b:9f:f1:eb:69:53:e8:2c:4b:d4:e0:a0:31:04:6b:8c:
         00:94:06:7d:ea:e2:2e:71:57:c8:fb:14:de:0f:a9:54:32:94:
         de:4e:21:23:a6:83:5c:ec:7b:9b:44:85:92:95:b9:6e:5f:2c:
         2e:f7:54:6b:90:4b:6c:c7:8e:4b:76:c3:f0:9a:0a:d7:8b:00:
         18:6a:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:24 2026 by rpki-client