Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a805707c-2826-3872-b8ac-f440150904d6.roa
File:                     a805707c-2826-3872-b8ac-f440150904d6.roa (raw, json)
Hash identifier:          xgZm+R0jwpNwYxhOfSIk+o9uB31RjZfAQYk3B4To+Vc=
Subject key identifier:   03:80:69:72:52:89:77:D5:AA:ED:38:E8:58:F0:1F:75:D8:63:39:5D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F3FAD694A7B34CE5C0138DFA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a805707c-2826-3872-b8ac-f440150904d6.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     397238
IP address blocks:        156.154.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:69:4a:7b:34:ce:5c:01:38:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=de26dbaf-0a01-42fd-876f-29ea8cd82726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:c5:53:b5:73:0b:d5:ca:f9:85:6b:e8:77:
                    8e:67:03:fe:16:54:da:28:7d:d8:45:ff:57:0e:cb:
                    43:e2:1b:c5:e5:93:6f:29:6c:d3:74:f6:04:3e:04:
                    e8:59:63:c6:6c:4b:1e:b9:f3:fa:ff:0a:01:7b:c3:
                    34:0c:6f:a7:0a:ee:3b:13:65:2c:5b:c2:1c:a2:d4:
                    d6:15:94:31:71:01:85:c8:cd:36:58:2a:60:39:68:
                    f8:20:be:b5:22:64:d7:dd:b4:5c:1b:6d:a3:5d:90:
                    b1:a0:1d:a6:ce:ab:d2:19:3b:cd:51:85:22:db:32:
                    14:db:ac:14:b9:00:ea:4a:e0:82:91:87:06:57:14:
                    9f:04:bc:bb:6f:b8:36:8c:52:cc:47:e8:b3:04:28:
                    7a:cb:ee:e3:53:09:32:e8:f6:68:6c:b7:4c:22:ec:
                    34:8c:44:35:c2:40:08:42:6c:8f:d8:4d:d6:f2:4c:
                    9a:40:9f:ae:c5:a6:81:d5:6f:47:96:fa:2d:85:68:
                    26:3f:50:89:8e:b6:d6:a5:26:56:05:d1:10:58:36:
                    c1:e8:23:ca:0c:dc:76:da:c4:85:d3:0a:52:c2:c0:
                    cb:45:65:4f:cd:a8:c6:6a:8f:24:2b:41:e0:a5:05:
                    9b:4a:22:65:5e:60:75:b1:27:58:57:22:5a:2c:a2:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:80:69:72:52:89:77:D5:AA:ED:38:E8:58:F0:1F:75:D8:63:39:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a805707c-2826-3872-b8ac-f440150904d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:04:6e:cb:11:1f:4f:aa:41:e0:35:1b:19:63:6b:28:68:d1:
         c0:e3:c3:2e:27:17:ff:f3:66:db:37:0a:32:c5:1b:56:79:a5:
         75:40:9f:16:4c:2d:55:55:59:5b:b7:fe:50:47:59:f1:97:28:
         57:91:f7:c1:0e:43:7a:08:18:18:5a:56:55:83:25:bd:70:9a:
         5f:2f:0a:d0:af:6b:21:4b:09:02:d9:36:4a:18:ce:6a:b1:4c:
         f3:a5:44:27:c3:bf:b4:c6:d8:e4:f7:20:a6:91:15:59:c7:14:
         6c:1d:29:36:60:34:cc:e6:d3:5e:c5:e0:f6:70:5b:d8:73:d7:
         7c:64:99:ef:2e:10:ce:ef:7d:91:74:fc:b9:21:04:fa:81:0f:
         d2:50:8e:d6:c4:66:14:dd:a0:95:3d:7c:31:60:72:cd:ba:1c:
         26:67:bb:2b:5f:af:3d:fa:64:c0:cb:83:b8:5f:4b:fe:d0:71:
         ca:65:fe:3a:6d:16:8d:b4:3a:a0:03:3c:5b:f0:56:6f:8b:93:
         87:95:a3:48:02:66:51:ba:15:46:8f:bd:6a:ce:85:fa:07:bf:
         5d:86:69:96:a3:87:90:a8:0a:f9:2c:56:97:a6:9a:99:eb:55:
         f1:d0:70:7c:e0:b2:9f:e0:50:15:f7:4f:a0:eb:1e:ab:fd:fd:
         f6:a0:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:36:14 2026 by rpki-client