Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e30368c2-e38d-36a9-8f25-c8ef44065c96.roa
File:                     e30368c2-e38d-36a9-8f25-c8ef44065c96.roa (raw, json)
Hash identifier:          gKgOkQjafjA0A9zOO9D592w5CvHGh8swaQ1NVC9L+eY=
Subject key identifier:   32:3E:7B:DF:B6:D9:3B:32:31:19:40:8B:CD:52:41:59:02:02:D4:6F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09129C54D30BB71B35CDF180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e30368c2-e38d-36a9-8f25-c8ef44065c96.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397217
IP address blocks:        156.154.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:9c:54:d3:0b:b7:1b:35:cd:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=64b6fe29-9dbd-4386-aed3-7c2640324496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:c8:4a:36:76:fe:7b:47:6b:03:76:b8:1a:
                    0b:1e:3f:0a:c9:8e:76:b2:bc:b8:c9:d0:16:df:33:
                    56:9f:fb:df:3f:4d:d5:2b:22:5e:63:e2:b7:23:a0:
                    92:fc:f5:9e:c2:24:c4:60:62:e9:2a:9b:bd:80:db:
                    58:9f:01:22:fb:f9:cd:54:80:66:c6:7a:b9:1b:d4:
                    8e:18:80:82:62:7a:0a:65:69:25:aa:d3:fb:44:b7:
                    e4:9e:4b:69:74:9c:ef:01:aa:c9:bc:f9:8b:af:9f:
                    a4:6c:d1:81:2c:63:7b:e8:35:b1:c2:a4:af:6a:27:
                    84:4f:8a:f8:3d:d8:c6:f0:9f:aa:35:9b:02:e8:c6:
                    41:98:ee:93:0f:4a:d1:66:a2:ec:88:b0:5e:88:83:
                    ca:b6:4e:b4:de:53:d9:d0:8f:54:0f:e0:3c:ed:7b:
                    82:39:fd:04:93:e3:8b:2c:07:4c:23:f8:3a:70:57:
                    d3:c3:52:5a:3b:0f:95:ae:cf:03:94:a6:fb:cd:78:
                    e3:03:89:32:4e:2e:cc:63:d2:e1:75:5a:86:8e:6f:
                    ef:85:fa:df:2a:90:d3:9a:1e:40:4d:9a:ba:9c:a5:
                    f9:d6:1c:3e:a6:cf:ce:1b:e4:36:60:2c:49:c8:f1:
                    22:ef:d3:5d:1a:2d:52:07:fd:4e:80:59:96:4d:30:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:7B:DF:B6:D9:3B:32:31:19:40:8B:CD:52:41:59:02:02:D4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e30368c2-e38d-36a9-8f25-c8ef44065c96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:ac:5a:af:dc:e9:66:be:46:9e:49:e6:c6:39:49:f5:2a:
         26:88:d4:4e:c2:9c:a1:98:d3:7c:8a:7e:42:51:d3:82:cf:99:
         fd:17:c6:f4:b2:2b:02:7c:17:3b:6a:4f:89:03:65:82:3c:34:
         01:67:8b:74:98:81:a4:7e:0b:24:70:4a:22:2b:ae:fb:3e:dc:
         27:06:01:55:4a:9d:eb:24:27:32:5e:7c:16:07:14:75:c7:c0:
         63:b0:29:f8:3e:f6:02:6e:1d:fb:29:8d:ae:22:5a:29:0c:e4:
         81:8f:68:ad:34:d5:f9:4b:11:20:76:2d:94:3d:00:82:02:ed:
         4b:c4:5a:1b:3a:f5:a9:94:f1:cd:c8:b1:63:09:af:10:ec:42:
         ba:93:0f:95:d5:9b:91:89:c5:d3:57:8a:2a:5d:6f:8b:d7:23:
         6d:ac:5f:60:88:65:df:f3:2e:7c:ef:7e:40:f9:b4:cb:ad:2e:
         cd:4b:85:04:d7:e8:7f:40:2e:c5:1d:7f:22:b1:28:af:f1:9e:
         67:74:55:a6:18:66:ed:25:f4:0c:0b:ca:b3:e5:72:93:31:cf:
         d8:db:7c:f6:35:d2:6c:7a:67:2f:fa:55:00:3b:23:b4:ca:24:
         c8:17:70:a8:d9:b0:39:3e:52:34:8e:ea:38:e6:92:ec:eb:98:
         4d:70:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:30 2026 by rpki-client