Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9a06f73-4d42-3ed7-8755-8aa0f6ff7f49.roa
File:                     b9a06f73-4d42-3ed7-8755-8aa0f6ff7f49.roa (raw, json)
Hash identifier:          gBfXNeIW7rvcLsuYIMF4CrtoMa1Hwf9LR3L1q86Y41g=
Subject key identifier:   2B:F3:56:3D:69:B3:0A:FF:14:AB:92:19:FD:57:DB:72:19:54:00:2A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B0AA3F86E81D86A92A3700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9a06f73-4d42-3ed7-8755-8aa0f6ff7f49.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397219
IP address blocks:        156.154.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:aa:3f:86:e8:1d:86:a9:2a:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=9a851a11-cd04-4303-b479-d94c35c22c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:45:da:ff:67:bb:70:41:b5:99:58:ab:f9:
                    91:45:dc:68:85:13:82:e5:dc:5f:d6:2c:81:4b:40:
                    06:a4:00:8a:50:08:93:1d:c2:03:16:58:53:47:3a:
                    0d:16:71:f6:8c:f8:9f:12:04:21:d0:db:92:2b:be:
                    18:d2:1e:28:af:1a:25:25:59:55:c8:ed:4b:8b:1d:
                    17:7f:12:48:0f:03:fa:10:dd:d5:93:d0:2f:8f:e3:
                    1e:92:12:f8:ff:84:b1:cb:84:e2:2f:38:2a:a9:e5:
                    c2:9f:84:42:c4:3b:4e:73:33:05:0b:68:1d:c7:2f:
                    0b:27:ae:3b:86:02:e5:41:da:19:06:ad:f4:84:f4:
                    da:fd:b9:4a:5b:10:72:e3:d7:dc:db:43:b3:03:4f:
                    f3:24:39:3b:46:cf:68:ab:bd:ff:59:d8:89:9b:d7:
                    37:d7:e4:b9:39:cb:84:10:81:18:1c:fd:e1:2a:dd:
                    dc:0e:39:91:03:27:5e:44:b6:6b:57:47:2c:5b:c0:
                    c3:1e:fa:79:0f:5c:72:e7:9c:34:cd:aa:fb:43:ec:
                    ab:5f:47:6c:ab:99:34:6d:86:ed:b4:b1:09:9c:64:
                    7b:e3:62:be:b2:18:ee:10:67:55:62:e8:b4:ae:78:
                    3b:87:d5:10:da:6b:d8:13:0c:f4:c4:e6:ed:63:8d:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:56:3D:69:B3:0A:FF:14:AB:92:19:FD:57:DB:72:19:54:00:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9a06f73-4d42-3ed7-8755-8aa0f6ff7f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:29:c0:ff:9b:c6:d2:12:83:96:45:fa:86:64:ce:14:49:c2:
         bf:6c:a7:b9:f4:9c:39:6f:3d:a1:04:f1:fc:46:75:7b:7d:1a:
         2a:4b:7b:2c:d2:47:19:ed:7e:f0:60:23:c2:a7:22:23:1d:11:
         40:6d:3e:c8:b4:41:30:c0:cf:b5:be:26:e4:e2:17:8f:ad:e3:
         01:31:fe:e0:6c:f0:66:28:34:bd:98:65:83:c6:9d:b8:b5:14:
         fa:ca:6d:c9:cb:8e:70:f2:85:77:40:19:3a:61:23:0f:44:97:
         00:d9:78:75:7f:a7:0c:d5:83:39:f7:23:8c:97:69:b7:5d:86:
         d6:f6:0d:ca:89:99:c7:7c:54:12:3b:29:e8:d8:b7:1b:bc:e5:
         00:e4:a7:a8:e0:51:ec:5a:0f:45:b2:25:7a:56:0c:ea:df:89:
         b3:7f:7e:a9:77:37:6b:78:c1:9c:cf:e5:7c:39:c1:7c:ee:13:
         37:65:da:2f:ae:dc:66:b8:e3:d6:71:2b:b5:08:c2:8f:c5:85:
         d4:fa:42:b6:6a:e7:7a:e4:a0:a2:32:ec:f4:46:80:06:26:14:
         cd:70:e7:59:9a:52:37:ac:b1:a1:20:d4:db:86:9a:81:19:18:
         1f:a5:06:82:33:eb:d4:a5:39:70:72:8b:c1:3b:e7:9b:a0:74:
         52:68:42:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:04:27 2026 by rpki-client