Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce71f83e-203f-3321-bd51-8d78a06813e6.roa
File:                     ce71f83e-203f-3321-bd51-8d78a06813e6.roa (raw, json)
Hash identifier:          CQOscdF0dusarqyxw5aa9WQpTTv00EQ9xptsDRdk96Y=
Subject key identifier:   9F:9E:0A:05:11:8D:28:56:5F:31:A3:A4:E2:1E:42:FD:09:27:F8:86
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F62931DBB2270FAE6BC137F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce71f83e-203f-3321-bd51-8d78a06813e6.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     12008
IP address blocks:        156.154.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:1d:bb:22:70:fa:e6:bc:13:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=f5aff5e0-34a1-452a-a96c-4e0a342177e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:9e:9e:41:25:7a:26:f4:31:24:2e:c7:b5:
                    6f:44:c8:15:21:fd:bc:c1:17:b6:a7:64:be:d5:f4:
                    21:dd:8f:3f:56:90:43:2d:ac:df:9c:23:91:00:9d:
                    37:f2:59:72:7d:f5:c8:40:be:4c:56:b5:75:7c:0d:
                    2f:de:dc:c3:65:bb:e6:64:8b:69:fd:2e:58:e4:d2:
                    b5:a4:04:a4:e2:ef:54:93:53:e4:16:00:1d:6a:4a:
                    84:1f:af:17:0c:3c:90:cc:23:27:fa:c8:8e:ec:1d:
                    a8:32:79:95:45:87:21:d5:18:78:f8:95:e3:ee:2f:
                    0a:44:e4:a0:ac:bb:1b:12:33:5a:8f:e2:48:56:fb:
                    06:80:50:4e:c0:16:87:98:7a:a9:f0:30:0a:1f:97:
                    6b:3f:16:ee:a6:64:fd:2a:2a:b1:97:7e:92:40:cd:
                    94:ea:ed:ff:ba:ca:60:51:c2:94:cf:4a:63:85:b0:
                    16:da:1d:a3:92:da:eb:39:bb:51:7b:a3:88:c6:3b:
                    68:af:1e:c0:2f:dd:e8:1e:1c:76:44:b6:fa:ef:4b:
                    b8:70:dd:cf:8d:0a:e5:39:ef:12:61:79:19:92:82:
                    d8:72:7b:33:37:21:ce:f1:29:b7:d5:19:58:1b:24:
                    a9:fc:e5:62:9b:b8:c6:c6:49:cd:34:e8:d4:4e:e0:
                    df:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9E:0A:05:11:8D:28:56:5F:31:A3:A4:E2:1E:42:FD:09:27:F8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce71f83e-203f-3321-bd51-8d78a06813e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8d:45:9d:75:aa:2c:e6:18:ec:0c:07:6c:79:9c:ef:00:c8:
         70:34:5b:2e:f1:2d:f4:71:cf:1b:95:9b:c5:e2:f4:22:93:0a:
         fb:20:ae:7b:15:18:8e:cf:f7:f5:22:20:ba:fc:8b:89:23:b5:
         43:2a:09:e1:9c:e9:f1:73:32:04:2c:20:46:01:79:8a:ce:2e:
         7b:a8:de:6e:c7:0a:d5:ce:9f:29:08:53:40:0b:b3:c9:34:6f:
         80:f1:df:44:92:ec:ab:b3:12:c7:fc:96:52:27:12:d4:88:b4:
         20:04:19:c7:00:0c:30:51:1c:a1:be:74:8d:a5:b1:44:42:d9:
         6f:79:4d:50:e3:81:33:80:88:e5:b9:b0:60:c6:d1:77:6a:ec:
         86:89:12:08:07:2e:9f:2f:7c:ea:f8:3e:34:d6:e4:7e:95:a9:
         3f:81:93:2c:12:f2:7a:63:11:fb:d7:18:1a:7b:e5:5c:c9:dd:
         55:bf:af:a0:71:12:eb:f5:7f:92:c3:5b:9d:04:24:89:8b:e3:
         74:44:0b:9d:22:e9:16:e1:4f:63:79:b2:e8:91:e1:7d:22:e8:
         9d:c6:b1:0d:92:50:03:6b:27:a1:ba:91:44:0c:61:73:62:a1:
         51:7d:1b:74:f4:e6:06:4e:2b:78:18:2d:e1:a4:96:eb:fd:74:
         4d:50:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:33:25 2026 by rpki-client