Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afbe2e00-73e6-3b79-9ef8-014a13e0c729.roa
File:                     afbe2e00-73e6-3b79-9ef8-014a13e0c729.roa (raw, json)
Hash identifier:          J1LhS16g9Cwsg9IT7UdHRXVxAQVIl67a3d44anY/dn0=
Subject key identifier:   7B:D6:C9:83:46:3A:07:A6:1F:9A:46:01:04:7D:F6:B0:16:12:A5:1C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EC0A763FF6412918B33675280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afbe2e00-73e6-3b79-9ef8-014a13e0c729.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     12008
IP address blocks:        156.154.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:63:ff:64:12:91:8b:33:67:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=75aed9e1-c887-4026-87d1-8f1b0aa44b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:31:5b:77:14:7c:da:b7:1e:2b:cd:49:2f:
                    42:46:08:55:82:fc:e3:8f:e2:c8:37:3c:fe:cf:e6:
                    6e:e3:df:73:79:d6:ec:9e:c3:de:a8:33:2f:b7:d2:
                    b8:56:8c:d5:44:58:e0:f7:7d:c5:6b:e7:33:41:b5:
                    05:2a:52:02:64:f5:69:4c:fd:ec:4f:a4:b0:31:82:
                    b7:49:38:8c:26:a3:2d:bd:03:41:9d:4e:8a:43:ea:
                    9b:78:13:f2:36:2c:52:3e:74:f0:32:a3:ed:b4:98:
                    46:13:af:c1:5a:30:bb:78:47:db:bc:50:c5:00:11:
                    dc:25:09:6d:20:4c:64:53:be:52:e2:d7:6c:63:31:
                    68:2c:56:cd:67:39:84:97:38:d8:85:7d:12:4e:be:
                    6d:13:5a:a4:c9:09:e4:91:e4:7a:59:84:1e:62:28:
                    2b:e5:62:7a:f9:41:31:a4:ab:e5:a2:8d:9d:3d:94:
                    5c:f8:87:20:2c:b0:fd:e9:26:81:e8:fa:96:1d:10:
                    b8:00:ce:ac:e0:fb:20:3b:72:1b:11:d9:97:0e:3e:
                    e7:12:43:0d:d7:ca:f3:cc:bd:04:fc:70:6e:1b:5f:
                    ea:87:e3:a0:c9:52:3c:0c:dd:c9:b3:44:13:0a:0e:
                    d3:59:7c:08:f6:d2:6d:51:cb:72:3b:57:56:65:e9:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D6:C9:83:46:3A:07:A6:1F:9A:46:01:04:7D:F6:B0:16:12:A5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afbe2e00-73e6-3b79-9ef8-014a13e0c729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8d:1a:f8:dd:89:1e:28:e4:c1:de:70:05:d7:6d:2e:e2:2d:
         49:22:fc:ed:23:29:a2:d3:b4:84:5b:d7:c0:e1:fb:55:4a:f0:
         02:6c:a3:2a:0d:e2:33:fb:9b:bb:d6:1e:e7:4e:7d:e5:5e:4a:
         11:76:67:ed:26:e3:f3:1c:ad:72:0e:32:44:71:d6:29:60:55:
         22:04:45:d1:6a:cb:ca:bf:94:52:a0:a1:5a:f7:66:a6:24:d2:
         53:31:1d:dc:6a:d4:c9:49:d9:27:56:0b:60:d3:2f:e2:5f:56:
         bb:70:ab:78:80:d4:c4:0f:5f:03:d0:c6:30:2e:f9:a7:f8:e5:
         fc:b9:81:27:b9:58:9e:f3:7b:2e:7d:8b:13:f5:7b:94:7e:6f:
         df:2a:e5:54:65:87:50:b6:27:68:3a:47:e6:39:fc:e6:f4:0f:
         9c:d0:ef:79:37:d5:54:0d:eb:31:69:f0:97:c5:3d:91:e1:eb:
         31:d5:b4:a8:81:28:72:cd:7b:d1:7a:15:ab:c6:52:93:93:16:
         f9:be:7a:ab:57:24:2b:ee:c0:e3:21:fd:4f:22:5c:5e:7a:49:
         24:6a:72:18:55:b3:79:81:eb:93:b7:a2:a4:38:e3:24:ea:d0:
         77:58:c1:2e:15:7f:53:c6:f8:18:1c:67:28:32:08:74:32:f3:
         b8:af:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:32:47 2026 by rpki-client