Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa
File:                     07a4d280-1ea4-3f08-b03b-15184f283a6f.roa (raw, json)
Hash identifier:          32p5cwbVOgY7V1wW1MQlRZmnnC8VHvjRLK+b6FXoYlk=
Subject key identifier:   DE:76:97:91:3C:6B:59:92:7C:EA:21:41:1A:CC:68:12:6F:05:F6:7B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F23C27D936F1FD52F6F0C6300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     399157
IP address blocks:        156.154.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:7d:93:6f:1f:d5:2f:6f:0c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=ca861f95-b36c-474f-ac53-fc5c8c072cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:3a:7f:da:3f:9c:4f:0b:28:e0:56:c8:cf:
                    14:c1:19:83:0b:c2:e9:4f:8e:38:25:34:ed:c1:18:
                    9b:f2:f1:23:b3:a6:27:fb:d6:c9:05:82:14:ee:4f:
                    db:51:7a:b6:9f:1e:36:2a:bf:26:e8:48:f7:e6:f1:
                    1f:04:b6:19:65:26:53:c1:83:65:78:be:d7:3c:a1:
                    df:b5:49:5d:e0:07:ac:b4:f2:44:f5:1e:0c:9b:ff:
                    35:3b:3d:33:26:e6:64:01:f4:2e:4a:0f:de:fc:14:
                    2f:3d:1b:fd:20:5f:18:1f:75:d1:fe:a2:31:a0:c2:
                    a0:d1:18:ff:6a:98:c3:15:6f:0c:fc:1a:52:5a:c3:
                    22:99:3c:41:9d:34:8a:47:49:4a:c9:db:fb:86:d1:
                    33:9a:47:9c:76:e4:a4:21:1f:7f:3e:4e:1f:6c:a2:
                    3b:aa:2f:57:c6:b8:7d:63:ac:0a:71:b2:d8:5c:ca:
                    41:59:f9:2b:32:fc:9f:fd:69:5e:ae:5f:64:00:bd:
                    e9:82:e4:35:be:ff:91:bd:04:94:4c:42:43:55:12:
                    3e:66:0d:00:a9:27:50:2f:0f:dc:aa:c5:81:3b:9f:
                    a0:2a:15:a9:ac:76:2d:09:29:ef:23:cf:75:16:68:
                    17:ad:66:5e:61:29:b0:09:68:dd:5f:49:2f:e4:bd:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:76:97:91:3C:6B:59:92:7C:EA:21:41:1A:CC:68:12:6F:05:F6:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/07a4d280-1ea4-3f08-b03b-15184f283a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:69:2b:8c:c2:a2:3c:86:df:c8:34:69:09:43:69:cd:27:
         2b:66:14:ae:4f:71:8f:18:e7:1c:ce:c1:2e:8d:c7:e7:3c:a4:
         58:08:41:22:dd:46:89:58:14:8c:40:cd:94:55:9c:12:ea:2d:
         be:f5:0c:c3:40:5a:f9:48:d1:f1:9b:81:53:9f:c8:e8:54:09:
         89:e6:94:35:4e:f8:52:74:3c:91:84:ce:cf:11:33:c0:2e:0a:
         3e:b2:5a:e4:87:58:c7:02:80:09:c9:d2:5a:4f:0a:9f:73:f2:
         3b:65:7a:fe:db:86:a1:03:53:e7:e9:df:f4:de:11:50:17:a9:
         1a:db:13:6f:e1:d5:ab:2d:7c:41:d2:c4:dc:7a:57:79:c5:3c:
         c1:79:30:bb:fa:ec:34:26:e4:bd:56:ba:5d:95:de:79:ce:6c:
         6d:66:09:10:7b:65:a3:7a:e6:f7:62:04:92:18:40:8b:2e:73:
         21:56:3e:f6:70:6a:f0:d2:94:63:17:a9:1f:e8:69:3d:b8:8b:
         49:3b:cc:e8:b2:5f:4f:50:c8:f6:f0:91:cd:22:77:8a:fe:58:
         5f:4f:91:94:4b:f1:40:3c:73:7a:cf:44:c6:d9:f2:ca:de:fe:
         98:ae:07:f5:da:43:0f:d7:4a:54:6c:4d:fc:51:a3:10:56:08:
         55:9d:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:33:42 2026 by rpki-client