Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47f7c1d4-9715-3494-8a0e-023305f3c9d6.roa
File:                     47f7c1d4-9715-3494-8a0e-023305f3c9d6.roa (raw, json)
Hash identifier:          ow+qToawLS7ggqnDkuE015fQVaXjx5Q0KgFTPQAQ1CY=
Subject key identifier:   2C:9E:18:35:E3:96:48:3B:C1:2D:59:6E:7B:47:EC:03:1C:6B:F4:A0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F119CFE4589BD6BE419C73C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47f7c1d4-9715-3494-8a0e-023305f3c9d6.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     16552
IP address blocks:        156.154.74.0/23 maxlen: 24
                          156.154.86.0/23 maxlen: 24
                          156.154.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:fe:45:89:bd:6b:e4:19:c7:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5f365cb3-dfde-44d5-87e2-2fef444eba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:d0:80:c7:63:bf:de:0b:6b:81:0c:4d:5a:
                    3b:92:45:83:49:a6:ca:53:05:67:a5:ed:bb:e8:6e:
                    83:91:56:de:f6:14:7e:0d:32:95:fa:dc:4c:97:c9:
                    5a:a3:cf:67:22:e3:e7:8e:1a:01:16:f1:c0:a1:bb:
                    32:a5:08:c2:b7:57:55:e9:4c:66:27:25:3b:cf:9e:
                    b9:2f:ad:00:f3:28:d1:23:7c:2c:d9:a3:fc:41:56:
                    7d:a4:44:8a:63:fb:c8:29:0f:14:12:f0:bc:b6:8f:
                    57:88:30:10:bd:61:f7:08:e7:2c:a3:91:a7:38:5d:
                    d0:da:06:d3:a5:7f:30:44:b5:59:ff:ec:ed:ee:2f:
                    3c:68:ca:6f:59:6d:24:3e:b9:99:b5:ed:df:ce:b9:
                    9f:58:ae:e4:d4:60:7f:98:e1:1c:fb:94:b2:da:f6:
                    08:4f:4b:41:00:16:29:ff:fe:f2:3f:5e:55:40:ab:
                    32:3e:6f:84:ea:f3:9e:31:9b:af:31:cc:88:d4:ec:
                    9e:8d:a2:c8:c0:db:71:e2:72:bb:9c:5c:67:0c:6e:
                    f7:c7:d5:18:1a:90:34:87:43:ae:f0:7a:3a:e9:a9:
                    22:b0:a0:5b:10:23:ae:3e:3a:43:d5:9b:3d:67:3a:
                    26:49:24:a5:39:14:af:05:51:6a:54:ed:79:54:82:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9E:18:35:E3:96:48:3B:C1:2D:59:6E:7B:47:EC:03:1C:6B:F4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/47f7c1d4-9715-3494-8a0e-023305f3c9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.74.0/23
                  156.154.86.0/23
                  156.154.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:65:80:13:c5:b9:9c:b9:d7:ac:2b:b9:e7:99:be:5f:73:50:
         cb:e8:18:56:56:78:04:74:9d:06:0b:26:83:24:46:0d:de:39:
         f7:78:e5:b0:4b:e1:f9:5e:a7:d5:64:2c:71:1c:d9:a8:a3:57:
         d0:b1:3a:1b:a2:04:9c:a3:9f:8d:d0:77:c9:95:e7:40:dc:d7:
         41:c8:34:f3:16:fc:55:4e:ac:c2:49:ae:18:78:12:20:c3:cb:
         e2:61:7b:34:26:e0:25:2f:75:76:bd:9f:5f:0a:c7:dc:a3:62:
         2b:64:88:de:de:60:a5:c4:7e:68:5b:92:a6:1c:4e:10:b4:28:
         45:71:9a:58:76:a6:16:eb:49:68:87:b2:16:06:6c:5a:06:e2:
         52:70:d9:ab:5e:95:34:5c:39:2b:fa:d2:87:2b:6b:9a:88:1a:
         37:e6:30:c7:95:46:87:86:d4:ef:ac:7d:ff:cd:94:e8:97:0c:
         e4:2b:e5:11:28:e7:18:3e:8c:d1:c3:43:7a:fb:9b:83:b7:3e:
         e7:dd:f7:34:67:77:75:1a:2f:6c:39:e8:9b:50:a0:ae:1e:d8:
         b8:f9:78:bd:bf:be:08:73:24:59:3a:aa:e3:d9:f6:c0:30:52:
         97:49:ba:7b:34:57:05:dc:73:10:e3:4c:15:07:e2:9a:41:5e:
         14:0c:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:40:51 2026 by rpki-client