Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e860eb1c-95f0-3a4c-a511-da19ff73d8e6.roa
File:                     e860eb1c-95f0-3a4c-a511-da19ff73d8e6.roa (raw, json)
Hash identifier:          fzdLRA2lAoXFfiEkIX1BbyOaK3br0xt6R+WI9kXEWMM=
Subject key identifier:   56:48:F8:D1:3C:50:05:F0:AF:1B:BA:DE:E5:85:8D:0C:36:95:97:FC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CDC67B1C087B0FA7FE983BFD4
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e860eb1c-95f0-3a4c-a511-da19ff73d8e6.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     397230
IP address blocks:        156.154.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:b1:c0:87:b0:fa:7f:e9:83:bf:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=a03ad581-49d4-47a4-9c28-c155785f6fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:ab:68:ed:67:9d:59:a0:fc:d7:ea:33:03:
                    1d:b9:c8:3d:94:e9:32:89:a8:00:7e:48:1c:57:27:
                    e6:4d:ea:0f:42:18:52:ed:e5:5a:d2:21:ae:71:db:
                    f8:3e:23:6a:a9:05:46:74:27:c7:d2:80:1f:dd:d4:
                    0c:b5:74:a3:fa:71:17:4c:5f:28:e4:10:54:c4:6c:
                    23:a9:fa:bb:98:a1:ce:26:7c:49:34:b6:29:d3:d9:
                    1d:39:f1:c8:79:55:cf:20:02:92:35:25:14:89:ac:
                    f0:6c:fc:2f:84:f8:43:c2:2c:2e:ee:de:91:cf:98:
                    06:71:da:2e:cd:09:6b:75:2a:55:54:8b:78:ab:ca:
                    36:20:c5:68:dc:20:35:97:64:12:89:31:c4:c1:50:
                    90:84:f4:16:f7:4e:af:a9:6b:50:1e:81:94:28:75:
                    20:f7:b8:93:27:8a:90:52:d8:f0:68:bb:93:22:5f:
                    dc:ad:1c:05:1b:57:d6:60:c5:c8:6c:44:e2:ef:e4:
                    58:6a:9f:a0:56:40:fc:ab:bb:20:ed:f3:3b:83:44:
                    27:e8:10:36:bb:b1:2d:2d:69:01:fc:48:f8:d1:f2:
                    cd:1d:b8:4b:4b:f4:30:1b:bf:2e:98:e2:da:c6:c2:
                    50:62:ee:e9:4d:b2:4f:ae:bf:a1:74:ad:99:4a:c4:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:F8:D1:3C:50:05:F0:AF:1B:BA:DE:E5:85:8D:0C:36:95:97:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e860eb1c-95f0-3a4c-a511-da19ff73d8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:81:2c:c3:02:76:39:a0:1f:68:59:6d:54:a5:02:14:13:
         f2:14:8f:fb:c6:33:29:6b:11:70:36:75:bc:fe:b4:f7:ec:2e:
         f7:cc:8c:ff:ac:03:5e:19:42:1f:99:94:8d:97:7a:5d:95:da:
         2f:86:f9:22:06:b2:d7:aa:91:7b:f6:19:9e:fd:7b:4d:09:a5:
         45:bb:70:b6:62:00:1f:bd:5e:8b:26:08:05:69:bb:92:34:79:
         4c:05:05:50:d3:eb:a8:1a:d4:54:7b:b4:a6:22:7f:48:61:e7:
         6b:44:01:4f:26:ad:d9:a8:09:d8:c5:76:51:ab:34:03:f1:66:
         76:8f:2e:24:88:da:cd:3e:29:d4:ad:fa:32:48:41:07:fb:66:
         e4:e5:3f:9c:df:68:b4:e0:f4:ef:cf:e6:49:45:b3:4d:3e:b8:
         bf:ce:74:26:83:55:85:be:3b:55:b7:57:8d:a0:3b:fe:72:5d:
         08:a6:10:94:04:aa:c5:20:c0:a6:7f:ff:88:20:42:ac:fd:a6:
         d4:77:dd:cd:41:0b:c6:57:35:1f:c2:24:56:f2:9c:31:bc:8c:
         42:6a:da:18:cf:04:a7:ee:00:ba:3f:11:64:60:1b:f4:fd:fe:
         44:80:aa:fe:dd:75:cf:7d:84:ab:d8:24:4b:a4:fb:8a:da:94:
         7e:aa:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:08:38 2026 by rpki-client