Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d05962a7-fe0c-3799-83d7-0d90f65b81b0.roa
File:                     d05962a7-fe0c-3799-83d7-0d90f65b81b0.roa (raw, json)
Hash identifier:          xMCHCda9+jSsvmxgIA9lFbUnjXPDPiXvdSrYkdBhstU=
Subject key identifier:   9D:80:7D:32:88:56:EE:62:6D:0D:CF:58:BF:3F:66:0B:D0:A3:F9:2F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E1E44403E5D1E0C7D9B7C6800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d05962a7-fe0c-3799-83d7-0d90f65b81b0.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     12008
IP address blocks:        156.154.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:40:3e:5d:1e:0c:7d:9b:7c:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a3939a97-fc49-4d6a-8910-3a9d38c91418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:cc:9c:59:fa:10:86:34:ee:40:6e:a2:d9:
                    68:66:05:a7:2d:e0:62:ed:78:69:13:f6:e7:bd:dc:
                    84:d4:0b:83:59:d4:4b:6d:3e:a5:0c:ac:0b:7d:b4:
                    89:d4:60:68:eb:41:c4:0d:9b:0a:33:83:64:64:d1:
                    0e:03:5e:80:db:5b:bf:6e:53:f4:cf:d8:2c:21:61:
                    c8:09:ba:c5:ca:f8:2e:f7:8a:f4:9d:34:e0:eb:2a:
                    3c:79:90:3a:50:1f:65:f7:d5:ae:d1:11:1e:ac:a1:
                    9e:e3:a2:bd:c5:a4:73:b3:35:e4:22:c2:7a:c3:5a:
                    f9:23:5c:3c:81:b1:11:bc:d3:1c:97:d4:16:3a:a7:
                    87:e1:20:a2:92:06:12:0a:0f:38:74:b6:90:e1:b3:
                    b9:d8:df:a3:19:9c:84:2b:c2:4b:bc:12:ef:3d:26:
                    a5:5d:fe:30:2e:e1:46:54:fd:1f:7d:c0:3a:3a:96:
                    90:9a:9a:ca:83:ad:10:31:47:32:8a:70:b1:c2:f5:
                    bb:91:08:71:10:7a:8e:7b:c4:43:2a:c2:82:90:34:
                    28:a6:a3:66:4f:eb:f9:ba:3e:8c:82:b3:8c:e7:47:
                    00:b7:9e:e8:b9:f9:c3:d9:48:f3:34:46:d9:86:c3:
                    c2:52:57:4a:14:56:d6:50:e5:7b:fd:b5:a6:d1:c9:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:80:7D:32:88:56:EE:62:6D:0D:CF:58:BF:3F:66:0B:D0:A3:F9:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d05962a7-fe0c-3799-83d7-0d90f65b81b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:aa:22:5e:4c:34:4a:7a:a4:5b:d8:67:79:4d:b4:a8:b1:
         5b:c2:26:2a:4e:e3:50:32:99:d0:94:f1:10:4f:9b:6e:5d:2e:
         ec:58:d1:2e:6c:e5:0d:97:56:49:78:09:38:fc:2a:b6:65:85:
         ea:ac:9f:89:ee:eb:cd:02:ec:e5:9e:f4:7a:bd:4b:bf:b7:3a:
         e6:bd:82:89:ea:fa:f7:47:b0:3a:7b:da:2e:a5:ff:ac:b5:71:
         1d:c5:25:10:1e:e0:cb:c2:62:80:45:02:98:3e:7f:5f:91:71:
         d0:53:92:6b:48:55:60:50:4d:35:7b:4a:3e:25:3f:a9:16:ca:
         a0:5f:bf:9f:43:85:03:85:36:f2:63:e7:69:91:4c:43:40:68:
         d7:da:e1:75:2d:26:2d:78:58:eb:5a:94:35:78:b2:fc:53:17:
         1d:ab:2f:65:72:2f:27:35:b7:dd:fb:63:6d:be:07:ab:f2:d8:
         75:00:18:91:55:8e:8b:2a:9c:92:01:cb:46:9f:2d:24:da:c9:
         42:62:5b:49:55:e4:1f:11:4d:ec:f5:92:ec:dd:cb:d7:62:c7:
         c4:81:3f:ae:bb:23:3d:02:5d:e0:83:bc:17:45:89:4c:3f:be:
         55:d3:0e:74:71:b3:d1:0c:f6:a0:2f:ea:11:2d:24:e0:d1:68:
         87:6b:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:05:09 2026 by rpki-client