Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/957f84d4-3931-3289-98f7-bea88ddd8abe.roa
File:                     957f84d4-3931-3289-98f7-bea88ddd8abe.roa (raw, json)
Hash identifier:          06yZnNBKaAEvsMvmoNWTovPQaNOJt6sQK57/Sa8Q3Ow=
Subject key identifier:   DA:6B:C2:97:D6:47:30:15:54:C0:18:AE:CC:76:CF:E2:4F:3A:E9:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B08F837FFE47C388BDDCC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/957f84d4-3931-3289-98f7-bea88ddd8abe.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397214
IP address blocks:        156.154.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:8f:83:7f:fe:47:c3:88:bd:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=ad3cfe13-dc26-45a5-9b82-922cd3cb331d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:da:8d:83:98:a5:5c:b0:37:2b:79:29:85:
                    5c:50:e0:45:ff:f4:bd:12:99:3c:a1:7f:d6:61:e3:
                    5c:a3:e4:d1:36:10:59:e7:61:5e:af:4a:c6:d5:6d:
                    3a:fd:16:d3:b0:6c:db:1c:72:a4:34:b8:38:2f:d6:
                    fe:aa:90:92:ca:e4:bc:a7:64:fa:6a:d3:98:07:90:
                    64:47:e6:dc:e1:e6:94:05:bd:ff:50:f6:4a:9b:e2:
                    37:11:11:7d:47:c8:6e:d3:f2:f7:9e:cc:99:9d:39:
                    04:e0:95:b4:f6:d4:e6:ba:51:fa:95:4a:f6:3b:87:
                    4e:ba:0c:d9:7f:04:c3:b2:1f:dd:0e:89:40:7c:66:
                    06:c1:b3:08:8e:cd:24:09:dc:1e:f8:63:f2:4a:19:
                    f4:65:90:c0:2b:ef:20:d9:8a:b6:f1:a0:82:9a:14:
                    a7:80:70:58:7f:6b:52:fe:75:bf:23:7f:09:bb:52:
                    d9:1c:d3:63:47:b6:01:1a:cd:11:5b:5a:19:fe:74:
                    99:e1:94:cd:15:46:f5:9b:ba:44:a0:55:4b:d6:ca:
                    e4:d5:9c:8a:d9:61:a7:b5:a4:b7:69:fc:08:56:c1:
                    75:50:20:17:7e:f5:ad:e9:f4:7b:88:fd:bd:94:6f:
                    40:18:9f:c9:95:5a:e5:2a:c4:69:af:5f:ae:25:a5:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6B:C2:97:D6:47:30:15:54:C0:18:AE:CC:76:CF:E2:4F:3A:E9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/957f84d4-3931-3289-98f7-bea88ddd8abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:f1:da:10:39:a7:b7:a1:3b:d3:eb:11:41:8c:1f:7e:c2:
         61:fc:d5:10:8e:cc:28:4e:79:9c:06:ca:c7:f4:f7:ab:e3:88:
         f2:5e:f3:60:8d:d5:bd:26:e1:9a:db:21:4c:fb:67:6e:cd:6e:
         6c:4e:a1:4c:de:62:1c:fc:45:e4:1a:73:7e:5b:1f:cb:b7:a6:
         68:c7:c4:a5:09:e5:c1:16:6e:cb:15:6c:1b:96:66:f3:76:ac:
         5b:dd:63:27:c8:db:9f:39:18:c4:03:27:5b:e1:e1:cb:0a:b7:
         67:c4:15:df:20:ce:94:44:e8:e3:43:5d:24:0b:9b:4b:3c:e4:
         83:3e:b5:e1:94:fa:dd:34:bc:dd:7a:fd:05:7d:1f:13:d3:fb:
         25:e3:16:11:97:5d:4e:67:96:5c:84:34:8d:21:91:f3:d5:0c:
         c1:fc:49:ec:a8:68:10:52:16:01:6b:71:5b:9d:fc:bb:cf:96:
         60:53:71:f3:3b:aa:31:f8:64:60:4b:c8:0f:38:3e:a9:9e:aa:
         4f:48:2c:e0:38:2d:0f:9d:75:38:1e:04:03:f6:c9:f7:d0:ec:
         9a:cd:5f:85:c7:7b:c1:90:f7:20:99:18:91:0b:18:38:7b:c8:
         25:ef:ba:6a:9d:69:3c:00:ec:52:e0:6a:18:e2:a2:51:75:60:
         42:bb:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:09:14 2026 by rpki-client