Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2add3223-7366-386c-a819-2201079b3633.roa
File:                     2add3223-7366-386c-a819-2201079b3633.roa (raw, json)
Hash identifier:          LaMlsMr/dcK7XhfmagbnKurG6oTM3UTFb7/BbXg0vVg=
Subject key identifier:   CC:F5:A8:70:B6:DC:C7:73:E4:7D:B3:72:03:69:70:D1:99:95:AD:AB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717914336877B69F1CE9700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2add3223-7366-386c-a819-2201079b3633.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397218
IP address blocks:        156.154.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:91:43:36:87:7b:69:f1:ce:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=66dbfdfe-b242-4849-8463-68c81b56aba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:96:45:52:14:e5:0c:78:55:f3:d4:05:1f:
                    95:c5:dd:c4:13:c4:4f:37:52:1a:dd:35:50:0b:0e:
                    2c:13:39:77:0c:42:36:47:49:21:d5:83:3e:75:3e:
                    1b:66:c8:b5:4c:72:0d:c7:20:c0:24:0b:cd:10:0e:
                    3b:84:7e:25:f6:de:d2:c2:9f:d2:fb:d5:71:fb:44:
                    d8:9e:7a:b6:1a:02:3a:c8:a5:72:93:12:5f:ef:e1:
                    12:96:76:83:dd:65:18:74:a2:2a:b3:9f:e7:11:ac:
                    d4:d8:33:9f:97:50:c4:9b:e4:cf:e6:71:6b:37:e7:
                    39:19:e2:f3:d7:5f:bb:d1:fb:31:37:a4:8e:24:4e:
                    97:7b:10:37:b4:5f:51:98:87:4e:5b:e6:2a:b3:70:
                    08:41:49:79:05:a6:f0:93:25:f5:3e:d6:02:84:06:
                    96:1c:c5:3d:c2:00:ee:33:ab:f0:51:98:2a:e9:77:
                    8d:a4:ac:bc:66:d4:77:f4:10:b3:fb:62:f4:fb:03:
                    57:7a:4b:47:38:f4:ba:e5:ca:b0:83:c6:27:fc:07:
                    1b:50:be:4b:ce:fd:af:3a:01:2d:58:07:f3:50:5e:
                    96:10:d6:4b:38:25:b3:5a:08:59:42:fd:00:fc:c9:
                    93:c7:b3:54:98:12:34:60:ec:8d:15:fd:26:1d:14:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F5:A8:70:B6:DC:C7:73:E4:7D:B3:72:03:69:70:D1:99:95:AD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2add3223-7366-386c-a819-2201079b3633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:b1:87:67:48:6d:fb:a2:88:3d:7c:4d:ed:dd:a8:22:e5:
         34:46:7c:04:5d:ca:34:0f:12:b8:b5:0b:c7:c8:1f:c2:8e:0b:
         16:73:e6:1c:dd:22:20:42:3d:ee:23:95:d1:9b:00:28:88:d2:
         8d:e0:05:e6:26:68:af:1b:03:42:0d:69:22:8b:ba:61:52:7d:
         a7:33:6b:d6:9f:b4:47:b0:8d:81:a8:6c:96:0d:18:b6:8a:95:
         5c:8c:e8:b1:a0:0c:ec:94:4f:b4:7c:bf:0f:32:5a:8b:93:53:
         88:b6:f5:31:e8:53:67:c9:7d:10:c8:df:9a:c6:4e:4f:bd:28:
         1b:9d:da:3a:ea:0e:c8:b1:f6:fa:08:af:0b:f7:6f:67:af:46:
         17:83:d3:b0:ee:21:3a:b3:b9:e1:4f:14:73:02:3b:82:b1:37:
         b4:aa:bb:21:ce:15:e5:d3:34:77:50:96:6f:f4:57:de:a3:80:
         b4:b2:c6:57:bb:02:ab:9d:bb:70:72:14:4a:ae:be:cd:1f:1b:
         58:9c:ea:f4:cc:7f:75:cd:a8:c0:3c:8d:dc:76:1b:70:19:cd:
         b7:b2:af:a6:88:f8:ec:d8:8f:21:72:32:3a:5a:3f:43:30:ad:
         6c:a0:b2:3f:65:42:85:42:1f:4e:3f:9d:b9:96:fe:c6:91:b9:
         9e:cb:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:56:23 2026 by rpki-client