Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa
File:                     1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa (raw, json)
Hash identifier:          CllfdETpO5RVHpJbFTgit1L7ZLhQfDlAbcC6HDp+onI=
Subject key identifier:   D4:F0:52:1A:E7:41:A6:40:79:A4:71:D0:B9:9E:1D:E5:40:D5:69:A1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD60D78A0A6A02DB0942D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397236
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:0d:78:a0:a6:a0:2d:b0:94:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=b6fa82a3-9392-488b-b6fc-a02ab06dd992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:dc:df:ee:72:30:f0:5d:50:1e:d7:2f:72:
                    aa:fb:02:70:7b:1e:03:36:49:45:e6:3c:78:78:01:
                    d3:c7:a5:f5:b4:1b:4f:e4:42:78:fa:fc:64:e1:9a:
                    46:bc:5f:1c:d4:35:39:02:b3:69:1f:41:b5:6d:80:
                    c1:8a:9c:43:fb:8e:48:16:cc:92:28:de:d1:b0:2d:
                    89:33:bc:d3:68:85:f1:b0:33:39:3e:f7:e7:7a:e8:
                    a6:7b:1a:aa:e4:f9:44:5d:06:9c:6f:a2:b7:b0:38:
                    52:cc:cf:65:28:58:0a:24:ff:58:37:f3:e8:a0:5f:
                    04:5f:47:e7:2b:e1:b7:86:fd:b3:dc:59:ca:11:c3:
                    ba:43:d1:c8:f5:0e:94:ab:01:8a:a2:5d:3a:e6:03:
                    1c:03:85:94:a0:50:20:b6:fe:d1:b5:56:19:b2:8a:
                    83:58:4e:59:0c:c0:67:ee:26:3d:89:de:2f:75:73:
                    ff:4f:c8:e7:df:1f:1c:b1:11:82:f8:08:4a:c9:aa:
                    8e:09:7a:5d:12:6f:77:70:b0:18:1d:74:ad:ad:45:
                    ce:93:c8:e8:7d:00:13:75:e3:f9:6f:45:fd:ce:80:
                    4d:c4:8e:77:72:72:5f:b8:a8:22:a2:0f:95:db:26:
                    41:fc:cb:b8:eb:84:81:eb:22:b2:68:a8:7c:a4:98:
                    0f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:52:1A:E7:41:A6:40:79:A4:71:D0:B9:9E:1D:E5:40:D5:69:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddc011f-25a5-35be-bae6-61a3aa4a90a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:18:41:bd:26:f5:b4:51:2e:1f:89:c8:20:3c:29:c6:bc:
         4e:d2:35:9d:dd:3c:db:12:9e:d9:5a:d0:e6:28:cb:49:77:81:
         cf:5e:9d:a3:99:a8:72:5c:74:39:1d:d4:c4:c5:1f:04:33:1e:
         47:cc:82:0a:cc:fe:73:9a:04:7e:0b:40:b9:d6:33:a0:12:6c:
         3b:d4:11:03:3b:3e:9d:5e:a0:39:2f:70:4e:b7:ee:d5:32:cc:
         3f:5b:4a:2a:7a:2a:45:49:f9:63:c8:60:03:97:7a:ee:ac:f3:
         ee:49:5c:1f:47:e6:23:a2:66:ee:bc:f9:fe:86:07:8c:05:6c:
         c5:35:92:ad:26:d6:34:b7:f7:2e:26:9b:99:2d:30:98:0e:6c:
         fe:1b:a7:b2:8e:25:af:72:0e:5a:6f:20:ff:88:70:87:4b:82:
         9a:6a:0a:d2:07:56:4c:1c:9b:4a:89:ac:e9:d7:9c:1c:76:09:
         55:4c:7b:46:be:50:9b:36:1c:fa:48:28:c2:95:b0:52:fd:d0:
         1a:40:83:a9:d3:46:62:8e:a5:74:61:00:7f:c7:8b:49:e7:e3:
         fb:2e:5d:b4:4d:6e:ba:b5:99:cb:fa:ae:d8:c6:72:3b:48:bc:
         33:38:cb:20:a8:57:ad:6b:20:24:33:9e:cc:b4:c8:04:e3:92:
         bf:f2:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:04:34 2026 by rpki-client