Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/508022e0-cf77-3153-8e8c-fbf8efb42b3c.roa
File:                     508022e0-cf77-3153-8e8c-fbf8efb42b3c.roa (raw, json)
Hash identifier:          Vn20m5AG/+f+Rjf40Mzo9/VmaxV4pVC560B1pg7BvHk=
Subject key identifier:   00:36:6A:3D:88:F0:A3:C4:77:F8:56:E9:A2:BF:66:28:24:42:FB:B4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F3FAD666A52B9284CAD031280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/508022e0-cf77-3153-8e8c-fbf8efb42b3c.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     397215
IP address blocks:        156.154.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:66:6a:52:b9:28:4c:ad:03:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=fc5c5903-d5ee-468a-a0ed-ea242c742007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:d7:75:c0:30:87:1d:d5:22:83:cd:b8:29:
                    ec:05:dd:79:b5:a1:20:8f:63:f9:c4:07:f2:52:eb:
                    35:74:99:8b:c1:9b:91:8e:64:f1:43:c9:96:5d:5d:
                    c3:cc:fe:b3:41:68:14:11:ec:11:7d:a8:f0:89:77:
                    df:5d:fd:f5:5a:78:25:d7:fe:0a:a3:94:e9:10:85:
                    01:a1:f2:80:f7:2f:2d:58:63:36:8a:3f:85:1d:f0:
                    84:85:ed:37:e5:80:e8:5f:c5:8e:27:3d:d8:ff:26:
                    97:10:5b:26:57:df:89:1d:71:20:cd:36:45:48:d8:
                    1e:31:eb:eb:c1:76:0a:a3:76:36:11:10:e4:af:5a:
                    2d:73:6d:26:cc:48:ff:35:5b:0d:0a:ce:66:33:05:
                    70:61:46:57:86:92:db:be:a5:06:59:a0:3e:7c:b2:
                    85:01:ea:a4:fc:a5:15:1e:d4:b9:f4:75:36:56:7a:
                    9f:37:b9:95:14:55:27:df:1f:41:00:3b:fc:4f:1a:
                    d8:54:50:6d:88:48:ee:19:31:1d:2f:19:6f:9f:32:
                    2c:2e:f0:29:17:bd:59:76:41:53:88:b3:ae:aa:cd:
                    3e:6d:58:56:80:9d:98:94:99:e8:86:d8:13:21:dc:
                    b5:59:f4:c7:3e:b6:09:f2:1d:36:bd:4f:63:f7:42:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:36:6A:3D:88:F0:A3:C4:77:F8:56:E9:A2:BF:66:28:24:42:FB:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/508022e0-cf77-3153-8e8c-fbf8efb42b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:02:80:44:ea:86:fb:df:56:5b:b1:98:28:d9:c5:82:f4:
         87:04:d9:58:42:89:f5:c1:ed:bb:fa:5f:2f:d2:4f:e2:82:08:
         10:4d:f6:e2:23:82:ea:f4:1e:2c:4d:a6:19:25:9f:ac:00:90:
         45:00:7e:6d:d8:5d:fa:a2:9b:a3:bd:a6:6a:9f:e4:9c:3e:36:
         90:2d:f7:8d:13:af:5e:b8:0a:c0:c5:f8:92:c2:7e:ce:e2:cb:
         3c:17:e6:53:86:76:4d:3e:96:28:f1:44:f4:21:e6:dc:92:f7:
         94:86:58:25:8b:3d:4e:39:bb:66:a7:76:25:85:aa:1f:7d:0a:
         94:18:25:e1:0e:76:43:73:ac:23:0d:12:56:43:c0:c0:1c:ed:
         41:1a:1e:64:00:fc:97:6a:47:54:05:0d:53:9d:60:dd:1b:07:
         c8:c2:d7:6e:50:32:2c:81:07:0d:8f:66:78:9f:c4:f3:42:ea:
         c2:d7:9d:47:54:65:c1:52:18:b7:2a:f1:43:98:10:26:eb:c0:
         72:4d:42:15:01:ef:b1:ac:53:7d:9b:93:a7:aa:00:f7:4d:3c:
         74:de:ad:d9:d4:a9:16:b9:62:af:04:9a:2e:5d:ec:1b:fa:e5:
         f3:67:11:ee:a3:55:93:fb:43:6e:df:d0:94:fe:15:2f:5d:cc:
         f1:b0:40:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rWZqUrkoTK0DEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZmM1YzU5MDMtZDVlZS00NjhhLWEwZWQtZWEyNDJjNzQyMDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLTXdcAwhx3VIoPNuCnsBd15taEgj2P5xAfy
Uus1dJmLwZuRjmTxQ8mWXV3DzP6zQWgUEewRfajwiXffXf31Wngl1/4Ko5TpEIUB
ofKA9y8tWGM2ij+FHfCEhe035YDoX8WOJz3Y/yaXEFsmV9+JHXEgzTZFSNgeMevr
wXYKo3Y2ERDkr1otc20mzEj/NVsNCs5mMwVwYUZXhpLbvqUGWaA+fLKFAeqk/KUV
HtS59HU2VnqfN7mVFFUn3x9BADv8TxrYVFBtiEjuGTEdLxlvnzIsLvApF71ZdkFT
iLOuqs0+bVhWgJ2YlJnohtgTIdy1WfTHPrYJ8h02vU9j90Kn4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAA2aj2I8KPEd/hW6aK/ZigkQvu0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTA4MDIyZTAtY2Y3Ny0z
MTUzLThlOGMtZmJmOGVmYjQyYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADA7AoBE6ob731ZbsZgo2cWC9IcE2VhCifXB7bv6Xy/ST+KCCBBN9uIj
gur0HixNphkln6wAkEUAfm3YXfqim6O9pmqf5Jw+NpAt940Tr164CsDF+JLCfs7i
yzwX5lOGdk0+lijxRPQh5tyS95SGWCWLPU45u2andiWFqh99CpQYJeEOdkNzrCMN
ElZDwMAc7UEaHmQA/JdqR1QFDVOdYN0bB8jC125QMiyBBw2PZnifxPNC6sLXnUdU
ZcFSGLcq8UOYECbrwHJNQhUB77GsU32bk6eqAPdNPHTerdnUqRa5Yq8Emi5d7Bv6
5fNnEe6jVZP7Q27f0JT+FS9dzPGwQJo=
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:50:15 2026 by rpki-client