Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1471199d-f6cf-3c38-9162-a066ccab47b5.roa
File:                     1471199d-f6cf-3c38-9162-a066ccab47b5.roa (raw, json)
Hash identifier:          iji/DWzcsMOec2QNnkpVVtlKsm5qZjKhBPtuDiYL67Y=
Subject key identifier:   CE:AF:F0:56:B9:C6:7F:28:30:C9:04:1D:F1:B4:43:B9:0E:BC:08:F4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA7996A15B92DDACF419EFF20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1471199d-f6cf-3c38-9162-a066ccab47b5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397238
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:6a:15:b9:2d:da:cf:41:9e:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b85ff6b1-b441-48ba-9e73-3b8b31b2df9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:b8:5c:7c:ab:19:a5:af:63:88:48:8c:74:
                    9b:1d:f9:27:71:35:cc:63:81:c2:58:1e:f7:31:ac:
                    01:79:88:7f:70:5c:6f:bc:8c:22:00:76:b9:f2:1a:
                    36:03:ac:cf:ed:fc:08:db:b9:e8:7b:14:26:6d:61:
                    fb:10:73:9a:1b:e3:2f:4e:06:a7:98:4e:a7:83:61:
                    fe:ad:87:d9:0b:f0:5f:01:2f:17:8a:67:56:d7:83:
                    4f:5f:0d:69:1a:f6:7d:bb:2a:cf:e2:48:0c:d2:8d:
                    73:c7:c7:1e:bc:7e:7a:0c:4c:ec:64:00:82:55:97:
                    0d:cd:70:e9:e3:5c:96:a0:8e:11:8c:0f:0f:06:59:
                    74:22:47:78:11:0f:e7:87:12:15:e8:50:99:f4:56:
                    3f:db:2b:77:4d:f9:1f:10:ea:5f:ba:52:8c:87:dd:
                    12:bd:b5:68:c9:5a:1e:31:77:3f:df:86:1f:ce:81:
                    22:51:34:83:b6:8a:4a:7e:c3:c9:59:7a:b6:96:39:
                    3d:fc:07:0e:d4:fb:2d:16:35:66:75:c8:45:02:31:
                    ce:f9:b0:1b:e4:a1:ec:4c:c4:eb:83:ad:ca:70:b5:
                    b4:23:ac:8b:bb:55:48:3b:8b:55:a3:71:4a:54:26:
                    f9:1a:18:52:eb:9a:18:45:df:40:f3:4b:4b:71:69:
                    7d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AF:F0:56:B9:C6:7F:28:30:C9:04:1D:F1:B4:43:B9:0E:BC:08:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1471199d-f6cf-3c38-9162-a066ccab47b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:60:d6:6c:a6:85:62:e1:93:26:97:be:ca:73:d8:04:e1:1f:
         9c:d3:e5:61:57:07:e4:90:2f:79:cb:63:42:2b:6c:30:e5:7d:
         61:ba:49:67:7d:c2:52:45:84:61:3a:b3:c7:52:8f:fd:7c:a4:
         e9:c6:a5:11:1c:ae:04:a0:b4:89:9a:b9:6a:48:58:d8:4d:14:
         d1:8d:54:62:29:c5:89:ff:29:2f:34:d3:ad:c0:13:eb:dc:60:
         4b:2d:e3:2e:12:b5:f9:d8:00:4a:ec:6e:c5:0c:cb:07:89:27:
         42:35:ba:62:80:9a:36:63:7e:5e:d5:03:ed:2c:f6:12:66:91:
         48:a3:eb:e6:0a:b8:f0:65:96:f3:09:0f:01:8a:dc:0a:d8:2d:
         c2:45:56:ea:5a:d9:e5:10:78:40:15:4b:db:a2:9e:35:8e:20:
         fb:d9:f7:18:f0:b2:6b:70:bc:1e:fa:c9:ed:02:a7:ae:50:30:
         be:f7:40:41:56:8f:d6:b4:f3:a9:d0:ce:5d:87:07:cf:4b:a6:
         47:56:8b:ba:31:25:4e:e5:76:fb:88:03:64:0f:ac:a3:00:9d:
         a2:b9:80:26:d4:f6:3a:94:c3:95:b8:ed:ff:e1:86:99:bc:2e:
         80:7a:49:c7:45:31:c1:c8:4b:ab:05:06:25:0c:83:dc:51:49:
         25:bc:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 07:44:59 2026 by rpki-client