Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/97fb16a2-3c67-34db-a1f8-202df9bc8c99.roa
File:                     97fb16a2-3c67-34db-a1f8-202df9bc8c99.roa (raw, json)
Hash identifier:          9k4KNSrT6q7+jJT/C9S+0+NU+wEipKa8O9lBNCmLr0U=
Subject key identifier:   21:0C:EC:62:A1:D9:DB:4D:1B:05:F2:12:48:BC:4A:D2:CE:45:72:62
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA79296CBADF1B891FEA3EDD4
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/97fb16a2-3c67-34db-a1f8-202df9bc8c99.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397223
IP address blocks:        156.154.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:96:cb:ad:f1:b8:91:fe:a3:ed:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4d3998bb-f1ff-4b9d-9f8c-a9ab95ee34bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:b0:39:68:0a:5b:aa:cd:2b:78:41:06:ab:
                    0a:df:06:65:d1:e0:bc:8c:c0:8f:ca:40:62:40:2e:
                    15:22:91:15:c9:18:84:17:a1:d7:35:6f:3a:3c:53:
                    eb:ea:e3:bc:52:8e:e4:2d:8e:06:f8:72:ce:e8:d9:
                    77:15:7a:25:58:5f:73:51:bc:35:3d:ac:20:8e:89:
                    f1:ce:e9:7c:2f:c6:ce:58:7d:d4:8c:a1:71:e9:36:
                    48:ba:01:e1:43:17:2a:10:45:f8:53:69:54:d3:25:
                    80:a0:0b:6d:c7:e5:f4:29:67:23:63:be:20:5e:2a:
                    55:76:98:cc:50:a1:fe:7d:10:40:a6:af:8d:34:b7:
                    08:a4:8c:ad:5d:98:6d:50:52:e4:84:43:77:be:73:
                    52:32:40:92:9f:20:f6:82:aa:8e:17:3d:45:cd:cf:
                    af:fd:d2:a4:23:15:a6:65:e0:19:ea:59:bc:b7:97:
                    9c:0c:f3:fb:af:95:fd:a4:6f:6d:32:db:f5:ac:47:
                    9a:11:68:52:86:f8:e5:5d:09:32:c9:91:59:0b:e6:
                    f6:f7:10:79:f3:9a:1f:e3:b6:f7:a9:a1:5b:59:9d:
                    bc:e8:4d:07:b9:bb:18:3b:0a:ea:9b:57:d0:1b:4b:
                    4f:94:10:8d:5e:44:22:5b:7b:d0:97:18:8c:33:b5:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0C:EC:62:A1:D9:DB:4D:1B:05:F2:12:48:BC:4A:D2:CE:45:72:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/97fb16a2-3c67-34db-a1f8-202df9bc8c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:b1:82:2e:d2:c9:ab:f6:6b:9b:76:71:3f:e6:34:88:1c:
         cf:14:1f:ff:a9:ea:e1:b8:28:19:7b:b5:23:b3:a2:6e:fd:df:
         25:6c:23:58:62:02:b1:23:5a:53:53:d0:83:34:df:b9:84:1e:
         c3:88:50:ab:54:61:88:27:53:c5:e8:a8:04:36:58:52:bd:11:
         0e:ce:da:ce:75:74:a2:42:3b:9e:c7:42:c6:a8:5e:8f:90:50:
         0f:f1:55:f7:d8:88:d2:32:11:dd:87:7d:49:6b:5b:20:41:e1:
         90:99:88:d2:3e:38:23:74:18:0f:40:f1:65:67:89:e9:02:2f:
         42:c3:64:71:d5:2d:59:94:b5:6f:87:86:2c:7c:cb:a5:7b:3f:
         73:6c:3b:f0:4d:24:25:31:ff:32:3b:e6:6d:f4:c5:f9:43:c2:
         3d:0c:21:80:22:31:18:14:3b:2e:5a:c3:f6:9e:ee:8e:fa:36:
         f2:45:05:9c:a7:3d:ba:f0:da:6f:07:8a:06:f2:7b:94:41:9f:
         4f:f7:98:b6:24:d1:ad:7a:cf:75:2c:75:6c:70:4f:0a:64:4f:
         60:10:16:3b:d9:2d:0c:04:f8:97:b0:73:5c:a0:fb:27:7a:d7:
         ca:07:68:94:6d:89:ee:b3:18:33:19:4f:69:18:68:0c:2b:92:
         90:72:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 07:36:24 2026 by rpki-client