Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fed81adf-2168-3795-ac77-2fd3dcba3957.roa
File:                     fed81adf-2168-3795-ac77-2fd3dcba3957.roa (raw, json)
Hash identifier:          jizG6KGudaSRfMNYt2E3fyaQz2YuoO0O8rkrqfRE30g=
Subject key identifier:   2D:6A:4D:69:EC:39:BD:83:CE:6C:2D:E6:98:89:E8:07:B1:E5:6F:17
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D59EA7CC7E9E804EA9A969700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fed81adf-2168-3795-ac77-2fd3dcba3957.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     397222
IP address blocks:        156.154.58.0/24 maxlen: 24
                          156.154.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:7c:c7:e9:e8:04:ea:9a:96:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=8dc58a18-3197-40fc-8ae3-f149ed5fcf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:53:d1:cc:af:03:d0:39:77:9b:e8:a2:da:
                    45:97:4a:55:bb:e1:c5:35:87:65:40:25:05:b6:93:
                    ee:d3:81:a0:f2:33:b5:61:71:d6:42:13:66:93:3e:
                    ed:3a:8b:ad:3d:9d:5d:da:da:46:bb:9b:30:a5:c0:
                    d0:e8:0a:e5:6b:8b:72:bd:cb:cb:b7:0e:42:33:15:
                    49:99:4a:aa:3b:c7:f3:22:81:88:69:9d:34:66:3a:
                    2a:cf:9c:89:fc:8a:c9:a6:06:03:d3:35:d7:b5:9d:
                    59:31:42:be:c5:d7:7c:35:a4:be:d5:ed:9c:a8:30:
                    df:2c:1f:64:5a:8c:29:a9:6d:99:07:ec:da:32:ed:
                    52:27:26:d1:c6:99:fa:99:55:e6:9a:cd:28:9a:02:
                    d5:d0:2d:00:b8:e8:5d:c6:25:dc:7e:66:ee:e2:b4:
                    d8:29:d9:57:19:0d:97:7b:08:ea:de:dd:39:02:3d:
                    86:b4:e3:c3:c7:3e:3d:18:7d:56:71:f4:38:fd:38:
                    43:61:58:60:18:cb:02:7f:eb:39:14:45:af:bc:a1:
                    d3:75:93:7f:d0:de:e6:55:d3:0d:57:7c:d6:9c:c4:
                    1d:ba:85:59:ff:3b:37:8d:30:f6:55:a5:df:dc:7f:
                    18:1f:77:75:2a:ee:d0:6f:20:3f:db:e2:7b:0b:34:
                    33:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6A:4D:69:EC:39:BD:83:CE:6C:2D:E6:98:89:E8:07:B1:E5:6F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fed81adf-2168-3795-ac77-2fd3dcba3957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24
                  156.154.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:06:ad:77:53:b4:d1:0f:eb:78:b9:4f:5a:17:f8:58:3d:
         a3:04:cc:44:a4:3c:82:6d:df:5c:d0:2b:9b:35:3f:4b:26:6a:
         52:14:97:fb:78:ac:f1:4c:cf:d6:c0:ab:94:6b:45:79:63:97:
         7d:34:ee:7e:fa:a9:de:02:25:9e:fe:98:03:16:7a:d5:c8:c2:
         b1:5d:af:d4:d4:6d:65:31:f3:2a:c6:e0:50:73:ce:01:9e:8e:
         3d:e9:bf:5c:06:48:2b:10:71:50:c2:81:ec:89:cd:95:80:93:
         88:b6:4f:f1:0b:0a:72:bb:ba:84:bf:78:7f:b7:26:a8:c5:2b:
         28:ca:03:ba:6f:86:b0:ee:bd:fb:84:7d:c5:da:44:66:0c:55:
         e7:db:23:0d:5f:88:99:90:a9:aa:30:9b:bb:3d:6c:1c:11:66:
         a4:e6:06:34:16:38:bb:31:5c:2b:97:da:ee:4c:04:5b:6c:32:
         d8:40:56:6d:d1:d9:79:77:63:2b:87:32:1e:d8:5b:9e:c7:65:
         8a:44:4e:24:b9:06:2b:2b:c5:ed:d2:07:6f:20:fb:ba:b4:62:
         ba:6c:66:60:88:40:21:a2:2a:8f:04:8f:d7:ab:24:76:db:d3:
         35:c5:9c:67:7f:3e:d6:fb:49:98:d8:23:a5:b9:89:cd:bf:74:
         3b:d1:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:00 2026 by rpki-client