Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa
File:                     bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa (raw, json)
Hash identifier:          WM4B10waupHPrFaO8oNeKe9KCRoQ6rn8Eix8Qv/saV8=
Subject key identifier:   1B:31:C6:89:6C:96:61:71:EC:CE:FA:61:5B:27:1B:47:94:A1:BB:08
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA792EDB7E3A65D3F6C497780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397226
IP address blocks:        156.154.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:ed:b7:e3:a6:5d:3f:6c:49:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=81821e7d-7192-41e8-a72e-3b00206ec1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6a:e1:5c:bd:0c:59:b1:45:76:70:fa:28:79:
                    3e:99:5b:4f:18:88:57:c4:76:15:4a:4b:8c:74:50:
                    12:26:a1:17:41:c6:eb:31:ee:6a:29:f2:22:d8:9c:
                    e7:0d:a1:a0:e8:d7:93:96:5e:b8:30:52:f8:27:5e:
                    b0:b7:2c:19:8e:42:ff:11:2d:c5:5e:c0:79:41:0e:
                    b6:2e:68:30:d1:b3:78:4b:75:cd:7c:4b:6a:c1:6e:
                    79:f1:0f:81:e5:02:a7:d7:7d:0a:98:cf:47:cd:7f:
                    b4:d2:cd:d2:97:bd:68:f9:4f:a9:85:8a:ba:09:64:
                    ea:db:a7:81:9c:24:1f:35:9d:a5:eb:54:34:bd:58:
                    c4:44:17:43:77:53:01:b3:cf:7c:f7:94:83:f3:82:
                    ea:f0:d5:e1:28:df:ff:b8:92:ac:64:1c:16:73:42:
                    98:4b:f2:12:b3:50:86:fc:75:6e:92:d6:fc:3c:6f:
                    f6:7a:f1:43:93:ae:75:53:ce:0c:ce:4f:da:6d:04:
                    5e:04:67:7a:77:e2:69:64:a2:d1:a7:2b:bc:18:f4:
                    7e:d9:06:d9:f0:00:aa:7f:d4:18:27:20:bb:97:38:
                    9d:89:e5:60:87:06:78:0f:a2:3d:14:04:b8:b9:6a:
                    80:0b:c7:74:73:42:54:e5:64:0d:00:9d:62:01:98:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:C6:89:6C:96:61:71:EC:CE:FA:61:5B:27:1B:47:94:A1:BB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:64:03:7a:36:e3:88:8d:d4:03:e9:6e:3f:31:30:e6:46:
         f6:5d:6f:29:5d:7f:92:66:ea:69:50:9f:71:d5:67:ff:1a:9b:
         91:37:0a:5f:23:6d:8d:8d:c0:2e:02:f4:24:a1:02:d9:73:c6:
         bb:46:4f:af:d4:81:a0:47:f0:90:af:7a:57:a6:15:e8:d7:15:
         7e:5e:31:52:99:d0:91:6c:7c:c3:b0:07:31:6b:1d:24:62:90:
         7f:9d:19:0c:27:34:5b:3c:e1:3d:28:6e:fc:6d:3a:d1:c3:6a:
         b0:66:31:c2:7d:70:5d:e6:2f:03:d9:03:d7:3a:a5:6c:d0:7e:
         b0:03:d9:e5:8b:b1:9e:58:e5:03:49:48:f5:8f:55:54:0a:87:
         f0:60:73:f3:22:ca:41:68:71:6c:72:e1:fd:d8:12:a4:1e:50:
         10:bd:42:4c:f2:59:ee:df:c2:ec:1b:dc:70:66:d6:ce:79:5e:
         93:24:b3:37:c7:b3:9f:9a:ac:a9:4b:f9:94:2e:74:1e:74:40:
         80:0f:fd:f9:10:17:fc:3f:b8:a0:fa:98:45:7e:01:87:d3:8e:
         18:85:30:f1:38:ef:18:11:1d:36:13:d0:82:71:cd:5c:c2:10:
         27:19:45:30:fd:25:2a:ad:26:9e:a2:e4:24:fc:26:a2:12:59:
         d2:9c:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 07:41:18 2026 by rpki-client