Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa
File:                     fa9231de-b6f0-3b35-96d4-ec826dd73191.roa (raw, json)
Hash identifier:          LxgXvFgU6ZmY9JT/YXT7yn2xVdfX4isiu2x7tVS2cn4=
Subject key identifier:   4A:FE:5C:E4:94:F1:C1:CA:AE:69:E0:93:B2:7E:2B:58:3D:0A:77:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D59EA7C9A5928CF202988BB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     397238
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:7c:9a:59:28:cf:20:29:88:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=b6d51ff8-4836-40ea-82fd-b7d1e3b9ec1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:2b:a0:2d:97:79:50:5f:b9:92:c0:5a:28:
                    20:6f:cb:8b:93:73:14:51:b3:ff:a0:8e:3f:d9:1b:
                    4c:66:a9:51:db:7a:db:8c:1b:fc:71:56:61:54:fc:
                    d1:ff:ed:42:c4:37:0c:c2:9f:3c:8a:60:99:92:ee:
                    3c:4f:9a:c0:2a:9c:ea:6b:cb:7e:5d:eb:53:0d:ae:
                    4d:c0:28:3e:cc:2c:88:b0:56:12:0b:de:3c:e8:f6:
                    0b:af:70:a7:29:24:52:b3:44:9d:a4:8d:ad:88:26:
                    82:8f:44:08:a4:01:65:20:cd:44:37:ed:51:0e:f0:
                    40:3d:fb:75:41:30:8e:df:99:42:39:cf:dd:08:fa:
                    70:50:04:2c:f8:7f:d7:5f:65:91:6c:49:04:32:8a:
                    9d:40:94:cf:48:73:eb:db:ba:e8:4e:0b:1c:74:36:
                    7f:d9:0d:fe:94:20:f0:03:c1:3f:07:c6:c8:4a:e2:
                    5b:3b:c9:54:25:a9:89:5c:2c:36:21:65:e4:97:26:
                    6d:ee:2e:2d:83:df:80:47:76:42:f2:97:83:11:eb:
                    b9:33:02:c2:db:fd:b4:f3:ad:81:9b:0d:39:2d:02:
                    8d:81:78:2e:90:91:81:75:3b:6d:25:09:b5:7c:f9:
                    f6:73:09:ad:1b:ac:11:3c:0b:55:2f:04:c2:cc:68:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FE:5C:E4:94:F1:C1:CA:AE:69:E0:93:B2:7E:2B:58:3D:0A:77:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d6:6d:87:eb:b9:da:38:86:a5:50:21:02:84:7b:a3:32:f9:
         e7:81:bd:d0:ff:97:4a:e1:c7:ba:51:a2:9b:1d:9c:eb:8f:bb:
         76:02:7e:3c:29:22:ae:3b:4f:08:d2:be:8f:72:00:d6:f4:59:
         82:41:31:b5:e5:d0:45:61:1e:5e:58:c9:83:fe:8a:bf:77:9f:
         65:1a:e3:59:af:e9:70:cb:ab:4b:c0:a1:7f:ac:16:f4:29:eb:
         12:46:02:a1:33:b1:5b:dc:94:bc:60:92:c5:33:5d:d3:4f:c0:
         f9:f0:02:76:a0:11:e8:56:a8:a3:90:70:d4:cb:a2:6a:b3:2c:
         a9:09:d5:b0:4d:fb:2e:ab:b3:de:dc:c2:f5:8a:cc:b3:d7:6a:
         0f:b4:bb:e2:45:7c:5e:0b:01:b6:66:8b:bc:2c:8e:8f:b1:a1:
         82:81:d0:48:69:44:a4:f2:79:21:51:8f:5b:a1:85:78:c7:02:
         be:0d:6d:0e:14:6b:a6:a5:d2:f5:a3:e2:88:f6:63:15:80:aa:
         83:62:59:ba:cf:1d:b4:a0:5b:d3:ac:a4:e4:4e:68:6d:a0:18:
         ac:67:f3:da:c5:0d:ad:41:17:0c:d6:02:6c:29:0f:5e:f5:16:
         ca:0b:44:e3:77:b4:0d:e7:fb:1e:95:26:b0:12:e4:c2:56:95:
         4b:e3:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:52 2026 by rpki-client