Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3cb37a2-a100-367a-bfa5-7da27e860e8a.roa
File:                     e3cb37a2-a100-367a-bfa5-7da27e860e8a.roa (raw, json)
Hash identifier:          OzwKZh4Laclnc8jjPaQUZDbSk3iO/NEMVHuIu+qD+V8=
Subject key identifier:   59:6A:3F:89:FD:3A:CA:FA:BF:59:B7:14:23:4F:70:62:91:F1:F9:88
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FE83E7D01C44ED383C880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3cb37a2-a100-367a-bfa5-7da27e860e8a.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397228
IP address blocks:        156.154.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e8:3e:7d:01:c4:4e:d3:83:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=9a12f587-7ff6-457e-8b6b-1036bcfc5ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:a8:66:bb:b9:e1:9f:df:ce:78:32:76:f2:
                    ee:ab:93:d0:66:78:ad:8b:6b:05:45:eb:a1:5c:f3:
                    5d:b9:49:40:c5:ea:67:88:17:49:b7:48:59:3f:91:
                    f1:30:01:5d:10:17:53:6f:ac:58:ea:9c:a9:9d:9f:
                    f8:2a:77:31:52:d0:94:41:73:89:ec:62:88:e7:ce:
                    c0:6d:07:3f:47:fa:be:66:67:8f:df:9a:4f:1e:ee:
                    43:8f:1f:55:c7:d3:80:6d:69:85:ef:c7:ce:42:bd:
                    99:d6:9e:f7:80:98:7d:62:dd:27:17:27:67:50:dd:
                    01:fe:1a:f0:a2:74:db:12:aa:16:e8:f0:1e:02:1b:
                    57:d8:8a:dc:e3:a9:7c:d7:70:f0:e4:48:7e:5b:66:
                    43:eb:b7:eb:bc:60:b5:a2:e2:d0:b0:73:41:93:e7:
                    65:93:de:75:91:4b:b2:3c:4a:b2:98:31:dc:53:55:
                    d7:f7:11:28:04:51:76:30:75:d8:a8:23:17:d0:17:
                    8a:54:37:b4:ea:a9:af:26:4b:6c:c8:11:41:e7:19:
                    e8:df:5c:83:81:dd:8b:cd:05:41:3d:55:ad:ae:6c:
                    13:97:be:e0:0b:dc:2d:eb:72:e3:a5:e4:64:f7:50:
                    96:b5:f3:95:45:e6:28:c1:48:5f:99:d1:32:5e:af:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6A:3F:89:FD:3A:CA:FA:BF:59:B7:14:23:4F:70:62:91:F1:F9:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e3cb37a2-a100-367a-bfa5-7da27e860e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:15:4e:3f:1c:68:81:6a:cc:fd:d6:73:8b:91:c5:ed:d1:85:
         7c:3c:a8:ff:d6:a0:0c:17:6c:57:e6:83:a3:1b:78:44:80:0a:
         27:bc:81:36:d5:fa:12:bc:72:68:8e:72:a1:41:9c:f4:b5:88:
         44:f8:87:98:87:54:d7:88:e9:81:d5:2a:37:8b:48:96:7c:db:
         92:2d:96:4e:94:2d:f2:5b:82:ad:3d:18:21:c1:5f:5f:44:22:
         94:fc:6b:ee:26:75:a4:91:80:c9:4f:17:3d:51:b2:21:e9:1e:
         bf:44:e2:96:40:c4:4c:e1:87:fe:45:d7:48:b1:35:1c:ea:ef:
         75:78:1b:32:6f:e0:23:a9:49:81:97:86:97:98:63:e2:56:ad:
         96:62:be:9b:bb:1a:c2:7b:3e:dd:de:8c:5c:1f:e5:0f:c0:d7:
         c6:4c:d5:09:ad:ed:e1:96:bd:c8:2a:ab:2f:c6:03:27:70:af:
         e5:35:85:6a:92:87:8c:9e:b7:00:ce:b3:05:10:90:d7:21:42:
         1c:ba:1c:a6:86:71:34:c4:af:bf:50:8f:aa:b1:4c:36:10:d7:
         03:37:37:6b:e4:23:7c:b4:f1:90:cd:b3:fa:c2:9e:ad:c6:b7:
         87:f4:5f:90:e1:8b:e7:8c:9c:ba:36:0f:57:d3:e0:7b:1e:67:
         40:19:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:22 2026 by rpki-client