Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60681a4a-2abd-36d1-9a79-05fff09fec21.roa
File:                     60681a4a-2abd-36d1-9a79-05fff09fec21.roa (raw, json)
Hash identifier:          jPjTKdm3+hWr6DO2WcGxJLSO37gIG/xDqhMNnGhjuSM=
Subject key identifier:   99:55:00:2A:9C:CB:67:2B:98:24:CF:E1:95:73:A1:DF:6F:5D:54:AB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD60AA125ED8DBD2406C080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60681a4a-2abd-36d1-9a79-05fff09fec21.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397240
IP address blocks:        156.154.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:0a:a1:25:ed:8d:bd:24:06:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=84171628-9ee8-45fc-b26f-79b550cb0788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:96:41:f3:20:ca:78:95:08:05:6a:46:cf:4e:
                    05:04:af:e2:fe:e4:07:df:64:64:2d:8e:6b:d1:88:
                    c8:26:16:c3:2e:c5:f8:34:6f:ca:82:c4:ba:56:79:
                    87:af:f8:45:dc:ef:38:52:09:08:a0:b8:f0:c7:fb:
                    16:ff:fa:44:1c:75:dc:ba:e4:82:c2:12:1a:15:df:
                    09:27:1d:f6:64:2f:87:66:22:f4:aa:85:d0:4f:f1:
                    48:c9:c5:e0:6f:c6:42:73:e5:d6:ff:04:d1:8a:52:
                    07:00:c3:91:ec:fa:43:e1:21:7a:33:5b:83:09:3b:
                    ab:a8:26:9d:67:64:16:86:11:de:f5:24:3c:ab:94:
                    b3:12:1b:25:02:e8:bc:50:7d:2a:1c:e7:44:a9:2d:
                    75:fb:88:71:04:ef:6e:ee:2d:c0:1d:c6:e1:6d:d9:
                    d7:6d:9e:1e:2d:a9:48:06:53:ff:9a:1d:45:bb:09:
                    c7:ff:98:59:72:54:39:1a:f4:9a:6c:cd:82:b6:98:
                    57:af:f4:ce:63:53:1e:3b:98:79:3e:41:11:d9:8a:
                    1d:5f:61:ea:44:02:d4:ab:e6:fd:1e:ea:38:50:96:
                    93:d4:06:6d:a7:cb:84:1d:7a:46:5f:bf:47:e1:06:
                    21:f7:4d:a4:f5:39:7f:28:5d:68:42:30:ea:b6:74:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:55:00:2A:9C:CB:67:2B:98:24:CF:E1:95:73:A1:DF:6F:5D:54:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60681a4a-2abd-36d1-9a79-05fff09fec21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:c3:06:ef:dc:b4:57:ca:3e:20:55:60:87:67:6f:79:63:
         99:29:69:de:5b:88:cc:66:65:5e:d7:fa:31:56:bd:b1:26:98:
         58:58:44:1c:73:8c:7a:b7:97:c9:62:9c:08:93:d4:56:44:9f:
         6f:50:bb:08:2c:f6:a0:d2:5b:38:22:c7:50:04:fe:aa:ea:b7:
         33:df:be:8d:c9:0c:88:ea:ff:d7:fc:08:bb:14:99:81:87:02:
         4c:d5:a0:90:e2:f4:cf:0e:23:48:d9:eb:33:cb:3d:75:f0:21:
         a3:63:6a:78:19:76:e4:ef:97:a8:96:34:74:9b:08:88:50:c0:
         db:4a:b9:86:c3:24:eb:7a:af:72:b4:58:e5:56:68:b0:8d:8d:
         7f:76:e3:f3:32:5e:b4:d6:c3:02:c2:5b:6a:f8:7c:3c:60:1e:
         35:f7:a3:15:0f:70:f9:2e:e1:d5:53:0a:cd:95:ca:d3:fe:31:
         77:c3:ec:1b:2c:e4:a0:a0:f4:d2:2a:25:94:29:50:6b:12:6f:
         43:fe:3d:c5:fb:82:a9:66:86:c0:2e:8f:79:20:80:29:b1:61:
         89:3e:e3:2d:d2:7b:f8:3b:31:d3:6f:c6:fb:3a:ca:c0:e0:46:
         5b:bd:47:10:76:22:71:ea:72:7c:86:0e:f4:7f:93:eb:a0:1b:
         9e:49:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:03:51 2026 by rpki-client