Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73fab6b1-aaab-355a-8503-f5f7a92b0432.roa
File:                     73fab6b1-aaab-355a-8503-f5f7a92b0432.roa (raw, json)
Hash identifier:          LqygPbj3+0kkETj3PBhqw5/nIgnQe974cm8O45KITk8=
Subject key identifier:   9E:68:B3:A4:3E:AC:BD:9C:FE:47:7F:81:FD:68:3F:40:E8:EC:8F:9A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD619EA0BAA5BF543F19680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73fab6b1-aaab-355a-8503-f5f7a92b0432.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397243
IP address blocks:        156.154.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:19:ea:0b:aa:5b:f5:43:f1:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=ec729b7a-fd7b-4004-82e6-d2e676ed0c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:db:04:49:da:b1:72:79:43:fe:74:f0:b4:
                    a1:26:00:2d:cd:45:ae:8b:6a:b3:68:b3:ce:a2:d5:
                    6e:b0:a5:f0:9d:ca:ad:5f:fe:12:3e:a4:91:b5:26:
                    a5:9d:e6:66:fe:cc:dc:73:a9:f0:a9:2e:6d:70:a9:
                    34:54:b1:a6:5e:84:72:29:59:f3:e1:0d:69:fb:82:
                    bb:8b:b1:ad:fe:97:00:82:f5:c2:f1:1e:f9:9a:c2:
                    10:9e:5c:7e:0d:29:4c:3a:08:15:ce:1d:33:9e:67:
                    6c:ee:1b:d2:61:75:97:6e:94:6e:4c:84:ca:4d:af:
                    e8:3f:66:56:b5:4e:50:5b:c5:d0:71:26:8b:fb:a6:
                    84:be:10:f0:24:74:6b:28:ee:8e:33:6c:b0:b8:b0:
                    6b:3b:f3:7c:4f:04:a1:68:34:80:f6:ec:0b:b1:63:
                    81:11:f2:fd:8a:7f:5d:8e:b2:b3:0d:e8:44:ef:d7:
                    aa:59:14:7f:a4:d1:c5:ce:7a:8c:6d:73:5b:a5:f3:
                    54:29:17:9e:27:40:2c:ba:e8:d2:52:d6:39:9d:51:
                    9c:ea:58:38:6d:06:71:df:de:23:16:60:e6:e8:0d:
                    73:d4:ae:e1:0e:06:6c:14:df:1d:af:ad:1c:b6:a7:
                    6b:e7:e6:5f:b0:2f:96:07:73:6b:8b:e2:16:b8:66:
                    3c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:68:B3:A4:3E:AC:BD:9C:FE:47:7F:81:FD:68:3F:40:E8:EC:8F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/73fab6b1-aaab-355a-8503-f5f7a92b0432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:35:e5:d8:04:5a:f9:2e:06:e3:0f:34:c2:11:41:5d:61:
         a2:dd:89:f9:6b:55:89:bb:f6:e8:af:e5:71:ed:22:fe:d0:e6:
         3f:f7:9d:c9:0c:3e:3f:69:a9:73:73:ad:3d:22:ec:7f:00:bd:
         f2:e7:bc:39:55:da:98:a3:5a:cf:cb:6d:d1:3a:26:4e:06:45:
         60:c2:4e:96:54:b0:2b:ea:44:8e:76:77:9f:65:9b:1b:30:4b:
         b7:34:ce:87:a7:38:63:8e:24:86:2f:ca:8b:7a:67:1b:55:ad:
         c1:41:cb:96:fd:fd:69:9d:da:8e:51:3c:a9:6d:b6:ee:7f:76:
         b2:68:a5:99:6a:f5:bc:e2:7e:d8:5e:03:ec:bd:67:fd:3d:bb:
         8a:1d:87:87:0e:bd:73:48:21:e6:15:50:08:69:5a:30:ae:41:
         ce:48:c7:66:05:60:f0:a0:c2:28:ae:73:0a:36:21:55:0a:a1:
         70:1d:45:29:c5:bb:9d:bf:ca:f0:5f:ef:49:d8:3e:3b:41:26:
         e2:29:94:c0:39:f9:0f:70:d9:86:77:29:9e:0f:3a:91:1d:55:
         9d:26:aa:41:ff:77:01:39:78:87:20:89:ed:ad:22:9a:d4:bd:
         3c:1b:15:dd:98:d8:87:c9:f5:b1:cb:87:35:70:bf:be:3c:d1:
         df:62:a3:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371hnqC6pb9UPxloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
ZWM3MjliN2EtZmQ3Yi00MDA0LTgyZTYtZDJlNjc2ZWQwYzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurjbBEnasXJ5Q/508LShJgAtzUWui2qzaLPO
otVusKXwncqtX/4SPqSRtSalneZm/szcc6nwqS5tcKk0VLGmXoRyKVnz4Q1p+4K7
i7Gt/pcAgvXC8R75msIQnlx+DSlMOggVzh0znmds7hvSYXWXbpRuTITKTa/oP2ZW
tU5QW8XQcSaL+6aEvhDwJHRrKO6OM2ywuLBrO/N8TwShaDSA9uwLsWOBEfL9in9d
jrKzDehE79eqWRR/pNHFznqMbXNbpfNUKReeJ0AsuujSUtY5nVGc6lg4bQZx394j
FmDm6A1z1K7hDgZsFN8dr60ctqdr5+ZfsC+WB3Nri+IWuGY8MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ5os6Q+rL2c/kd/gf1oP0Do7I+aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzNmYWI2YjEtYWFhYi0z
NTVhLTg1MDMtZjVmN2E5MmIwNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBMNeXYBFr5LgbjDzTCEUFdYaLdiflrVYm79uiv5XHtIv7Q5j/3nckM
Pj9pqXNzrT0i7H8AvfLnvDlV2pijWs/LbdE6Jk4GRWDCTpZUsCvqRI52d59lmxsw
S7c0zoenOGOOJIYvyot6ZxtVrcFBy5b9/Wmd2o5RPKlttu5/drJopZlq9bzifthe
A+y9Z/09u4odh4cOvXNIIeYVUAhpWjCuQc5Ix2YFYPCgwiiucwo2IVUKoXAdRSnF
u52/yvBf70nYPjtBJuIplMA5+Q9w2YZ3KZ4POpEdVZ0mqkH/dwE5eIcgie2tIprU
vTwbFd2Y2IfJ9bHLhzVwv7480d9io5A=
-----END CERTIFICATE-----
Generated at Wed Jun 10 03:10:31 2026 by rpki-client