Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/117e28fa-a7ff-37b8-a03c-2415cab6c7a4.roa
File:                     117e28fa-a7ff-37b8-a03c-2415cab6c7a4.roa (raw, json)
Hash identifier:          5l5sniXX9+VlDH1/4dhZcIu8asG1Zuljhn3ndHp7sX8=
Subject key identifier:   6A:C6:30:5D:CA:7F:21:8C:43:E9:A9:20:30:7C:88:91:67:23:54:F4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA79911A8AA95CF267A24C4E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/117e28fa-a7ff-37b8-a03c-2415cab6c7a4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12008
IP address blocks:        156.154.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:11:a8:aa:95:cf:26:7a:24:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4898e2d1-f88f-4b1f-9736-13d685db07d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:3b:5e:ad:c1:cf:7b:c9:28:4a:42:3a:03:
                    49:26:17:64:ee:11:00:c4:29:4b:82:9c:41:02:98:
                    9f:77:d1:8d:13:83:23:58:da:cb:f7:61:34:07:de:
                    74:01:f4:4c:41:e4:ea:23:a9:24:5e:38:91:2d:8e:
                    50:77:09:08:a7:c2:29:2d:4c:23:45:26:cf:ef:5a:
                    57:86:92:0a:66:a8:64:6f:10:13:f4:b7:4a:18:85:
                    98:45:d0:47:d9:ab:15:59:23:21:5c:a2:e6:ed:98:
                    2b:1d:2c:b2:71:11:44:e3:1a:2c:01:b2:74:2f:23:
                    1e:7a:8b:4c:90:35:da:1e:50:5c:ef:9f:2a:62:f2:
                    3d:ab:c4:1e:13:d9:56:62:94:f4:b4:1f:a3:5e:ec:
                    ff:2f:c4:c1:27:f4:70:c4:c6:af:e6:d2:1a:dc:bf:
                    b8:6f:89:9c:23:ba:60:73:97:5f:38:43:2f:81:62:
                    5e:46:e4:1f:b9:5f:35:da:c6:28:98:09:53:d8:6e:
                    90:2d:15:10:f8:10:9e:76:05:75:ea:3a:ec:ac:b7:
                    02:06:10:88:90:5c:b1:37:2c:5c:b2:6d:77:fe:a0:
                    01:25:28:58:89:71:ad:4f:a0:f1:93:9d:17:d1:2b:
                    77:02:21:d0:c0:ef:96:20:42:2f:78:8f:a1:c6:4a:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:30:5D:CA:7F:21:8C:43:E9:A9:20:30:7C:88:91:67:23:54:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/117e28fa-a7ff-37b8-a03c-2415cab6c7a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:12:40:95:40:05:5b:af:91:39:b6:b5:1d:ac:3a:26:e5:d3:
         76:c4:6e:35:b7:b1:02:1b:95:b9:03:dc:6d:b8:79:b4:0a:2e:
         f4:a7:16:98:73:85:3e:a4:cd:df:e1:d7:33:60:f4:4c:cf:ab:
         37:57:83:29:eb:b6:b5:41:0e:0e:d9:c6:75:87:82:0f:2c:d4:
         a9:e3:c3:4f:62:17:5a:3a:c4:4b:4a:76:d8:23:7c:76:ca:97:
         59:fd:03:bf:84:ee:79:6e:16:49:0d:3e:93:c7:7a:c5:df:67:
         c5:fb:46:2a:9f:13:fc:c5:7e:23:61:c2:fd:d0:38:17:3d:4a:
         f1:bd:1d:ff:71:30:e3:47:5c:fc:27:f4:b3:e2:82:e2:66:7f:
         c7:d3:18:3c:7a:b6:48:02:be:da:bc:5f:ae:d5:2e:4d:1b:61:
         ad:ce:48:ed:15:21:a3:dc:07:a5:19:7e:2d:0d:58:ca:c4:fe:
         ac:6b:4f:d4:86:a1:60:63:4e:0d:0b:04:fa:70:0e:09:3b:a3:
         7f:78:1b:a7:7f:90:16:12:23:26:9a:5c:d2:c1:fc:05:51:8b:
         96:e7:f1:8c:50:37:74:0b:3a:c6:4d:b5:3e:c6:53:95:b3:ce:
         41:f3:ea:52:38:e7:f2:21:fc:8d:ce:7c:d9:d8:a9:16:e9:1b:
         64:e1:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 07:40:18 2026 by rpki-client