Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65e3708b-08d6-3df7-981a-463925ade097.roa
File:                     65e3708b-08d6-3df7-981a-463925ade097.roa (raw, json)
Hash identifier:          R1RlJhgTxoHEqYdmmrcitWh3nz+wBRa9ITXQTAiSao8=
Subject key identifier:   51:E9:99:19:BC:95:B7:26:2D:BE:DE:3C:76:9E:E3:4D:29:E4:D9:BC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B09DCF3528C5F858463EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65e3708b-08d6-3df7-981a-463925ade097.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397218
IP address blocks:        156.154.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:9d:cf:35:28:c5:f8:58:46:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=d48033f8-c194-4d64-b48d-f77dec697e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:a4:0a:6a:fe:7d:50:64:10:bc:de:46:2e:
                    9c:91:28:8e:ef:57:80:d2:1b:85:b1:bb:2a:f4:bb:
                    f7:c2:07:b2:04:35:4a:9a:c8:44:00:9b:aa:fb:8f:
                    87:83:3a:17:78:6e:69:20:79:4d:fd:77:c9:5b:2d:
                    09:7d:22:94:82:62:fe:ab:38:ad:95:16:9c:fa:87:
                    29:6f:8c:ef:85:82:20:06:10:a4:1d:03:da:52:27:
                    1e:59:bd:fe:ce:cf:b6:8e:93:96:6e:6a:93:db:c7:
                    63:d7:44:24:fa:54:e4:b0:a4:e9:ad:42:55:4d:99:
                    87:b6:86:f3:c3:d0:b2:ba:ef:59:f2:b5:fa:9c:da:
                    a0:41:19:9e:dd:0d:d8:f5:c1:d9:1b:c4:d1:86:e0:
                    59:08:d4:4c:f6:48:db:8e:b4:13:2b:81:17:99:f1:
                    3b:b8:69:b1:0e:d9:c8:ac:8e:f7:6f:0b:e8:c0:0b:
                    1a:e9:1d:e2:98:a7:ca:f1:6b:cf:28:97:62:8b:f6:
                    2f:ce:49:fe:f4:56:a6:b9:c9:8e:e6:0a:2b:2f:20:
                    53:92:a5:ce:35:3c:5f:67:04:37:c8:51:4e:71:bb:
                    20:5e:7d:53:a1:a2:30:37:ce:1a:3b:b7:07:5d:e3:
                    59:0c:99:ac:76:0d:07:60:8d:91:96:f0:43:32:3e:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E9:99:19:BC:95:B7:26:2D:BE:DE:3C:76:9E:E3:4D:29:E4:D9:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65e3708b-08d6-3df7-981a-463925ade097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:79:9d:a3:b8:5f:eb:0b:9b:dd:ce:bc:1f:f8:82:b3:5b:ff:
         32:ca:70:0c:76:6c:a1:7d:73:c9:a7:80:62:09:58:65:3b:d5:
         0a:01:c2:cf:e4:ab:c1:3e:95:f9:13:09:e9:92:5e:d2:09:d5:
         bc:9a:ac:a4:e7:eb:2f:86:75:3c:80:bf:47:ff:1b:34:b2:39:
         bf:e7:8f:5d:f4:68:21:b2:31:5a:a4:ae:51:fe:eb:c7:51:20:
         f1:53:bb:08:55:2b:d7:cc:1f:1b:f7:4f:96:8a:46:61:d4:89:
         0d:b0:3b:a7:d7:a9:37:45:aa:b4:a7:70:5c:24:72:32:b5:39:
         33:20:dd:0a:9d:08:ff:1c:15:f3:db:b7:1b:7a:b1:c2:c8:ce:
         f1:96:16:85:65:91:b3:a8:8b:6b:a7:06:3b:d5:21:6c:18:be:
         b1:be:4d:b3:04:14:2d:22:03:44:9b:f2:cf:ad:b5:17:d4:92:
         9e:90:54:b6:a9:5b:96:1b:d5:57:74:12:9b:b5:18:df:0f:0e:
         0c:dd:09:7f:8e:f2:b7:c4:79:85:b8:04:68:d2:bc:9e:79:7a:
         57:5e:cd:6e:13:e9:39:00:10:de:65:2d:c8:66:2b:f7:ae:3c:
         16:12:fb:a6:1a:f7:61:88:47:e2:b6:4b:d2:b7:3c:e9:28:6c:
         d8:18:dd:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psJ3PNSjF+FhGPsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
ZDQ4MDMzZjgtYzE5NC00ZDY0LWI0OGQtZjc3ZGVjNjk3ZTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodOkCmr+fVBkELzeRi6ckSiO71eA0huFsbsq
9Lv3wgeyBDVKmshEAJuq+4+HgzoXeG5pIHlN/XfJWy0JfSKUgmL+qzitlRac+ocp
b4zvhYIgBhCkHQPaUiceWb3+zs+2jpOWbmqT28dj10Qk+lTksKTprUJVTZmHtobz
w9Cyuu9Z8rX6nNqgQRme3Q3Y9cHZG8TRhuBZCNRM9kjbjrQTK4EXmfE7uGmxDtnI
rI73bwvowAsa6R3imKfK8WvPKJdii/Yvzkn+9FamucmO5gorLyBTkqXONTxfZwQ3
yFFOcbsgXn1ToaIwN84aO7cHXeNZDJmsdg0HYI2RlvBDMj7JcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHpmRm8lbcmLb7ePHae400p5Nm8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjVlMzcwOGItMDhkNi0z
ZGY3LTk4MWEtNDYzOTI1YWRlMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZ5naO4X+sLm93OvB/4grNb/zLKcAx2bKF9c8mngGIJWGU71QoBws/k
q8E+lfkTCemSXtIJ1byarKTn6y+GdTyAv0f/GzSyOb/nj130aCGyMVqkrlH+68dR
IPFTuwhVK9fMHxv3T5aKRmHUiQ2wO6fXqTdFqrSncFwkcjK1OTMg3QqdCP8cFfPb
txt6scLIzvGWFoVlkbOoi2unBjvVIWwYvrG+TbMEFC0iA0Sb8s+ttRfUkp6QVLap
W5Yb1Vd0Epu1GN8PDgzdCX+O8rfEeYW4BGjSvJ55eldezW4T6TkAEN5lLchmK/eu
PBYS+6Ya92GIR+K2S9K3POkobNgY3Vg=
-----END CERTIFICATE-----
Generated at Wed Jun 10 03:07:56 2026 by rpki-client