Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa
File:                     00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa (raw, json)
Hash identifier:          BgokHd9rLl0OzAOYchd5sStU9XjZVTf3C63y2dJza/k=
Subject key identifier:   B8:EB:40:56:D5:9E:70:8C:55:A2:E4:3D:FB:B6:1E:6F:C9:80:7D:CD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4C08639EEBBD92E11BC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397237
IP address blocks:        156.154.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:c0:86:39:ee:bb:d9:2e:11:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=f700fcae-5238-4c03-a470-11df16c7c107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:c8:2b:7a:c5:dc:e7:ac:8d:c8:6c:02:a4:
                    24:28:56:75:dc:5c:a3:70:04:1e:b7:68:99:85:b3:
                    95:59:a5:dd:1e:4a:d1:10:f2:d8:4f:5c:94:96:b4:
                    59:be:50:1b:fc:2b:f0:4f:fe:1b:a6:2c:5c:80:38:
                    4d:7b:98:f7:5e:29:6a:45:4f:a2:72:b4:14:9b:52:
                    87:0b:d4:df:66:5f:12:36:ec:79:13:77:10:cf:28:
                    39:0a:fc:a2:d8:72:9e:b3:75:de:8c:87:83:d5:9d:
                    bc:f2:8a:57:35:4e:e3:33:ed:b0:54:13:ac:37:fb:
                    6e:19:91:52:4e:c9:34:4f:c2:f1:7e:97:27:7e:1f:
                    6a:34:21:9e:ca:ea:5c:d8:91:09:40:6d:8a:53:1c:
                    5b:16:91:f8:f9:f3:07:1f:21:ed:91:36:f1:44:f5:
                    ef:df:ef:b9:e4:44:73:0c:3c:3c:44:57:d6:f1:02:
                    5a:a5:1a:39:a5:7f:2b:83:10:5e:d0:ac:e7:cb:92:
                    e6:d9:53:a4:16:a0:f6:f0:d7:3e:52:02:6f:e3:14:
                    df:73:34:74:7b:33:42:c9:58:54:0a:9c:12:7b:97:
                    0d:f1:12:cc:af:bf:e5:67:89:00:54:e7:bf:f7:e3:
                    3b:99:d9:81:40:69:85:7f:20:18:29:3d:4b:37:d2:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EB:40:56:D5:9E:70:8C:55:A2:E4:3D:FB:B6:1E:6F:C9:80:7D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:06:59:30:36:0b:4a:99:4c:09:bc:15:9f:b1:22:4a:c2:
         ba:e3:4e:d6:d6:da:ed:ee:f0:19:81:4f:b2:63:91:45:18:5c:
         e2:65:37:a9:b2:8b:93:a5:98:55:68:94:8a:82:d9:94:b7:4c:
         b0:a8:e9:e3:ff:b3:bb:a9:a7:b1:85:85:d8:52:21:c6:fd:cb:
         0e:9f:a8:ba:1f:e2:ac:dc:f5:40:26:11:ed:a6:04:e8:93:bf:
         92:55:63:75:fc:43:8f:ed:35:73:8d:b9:09:19:81:8a:59:88:
         75:b7:ed:79:a7:00:1d:69:ad:35:8b:73:4a:03:22:eb:ca:dc:
         50:33:6c:9d:75:bc:2c:78:d3:aa:d0:9a:e2:35:ef:9c:0a:4e:
         86:1c:18:8b:bd:c3:13:7a:5b:dd:ac:dc:94:6e:1d:ce:49:38:
         4e:c4:31:7f:f3:1a:1f:e3:14:16:af:60:62:39:ac:50:2b:6e:
         0f:b9:56:e8:d2:c5:ed:3b:5f:f8:75:7e:38:74:54:18:67:0a:
         c0:9d:da:e0:18:f4:9d:91:b6:58:83:07:81:c2:55:e0:83:10:
         ac:63:31:cb:b1:cf:25:f8:89:6f:fe:90:34:fd:bd:3f:7f:1e:
         f9:f4:d1:34:df:c5:77:73:a7:b8:0f:77:ee:71:c4:38:db:89:
         74:85:9a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:26:24 2026 by rpki-client