Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa
File:                     89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa (raw, json)
Hash identifier:          W2/MI1RUHC2us22nppvF+dhlM24zxFumTFkFPmeB6EA=
Subject key identifier:   C1:E6:06:A0:81:77:F5:15:B6:B3:5F:E0:4B:A3:2C:29:A2:79:F2:6C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F3FAD652143B241A4D348D140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     397223
IP address blocks:        156.154.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:65:21:43:b2:41:a4:d3:48:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=a8dcbb13-4326-41eb-a321-1127440005f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:08:ba:89:7f:3f:b0:46:8a:b5:39:25:1c:
                    72:c2:3c:6b:d5:1b:e7:40:1e:b1:ea:fb:f8:fc:10:
                    58:64:6d:62:94:a7:3e:ba:13:6b:ea:a4:92:34:10:
                    15:56:20:ad:53:c0:bc:b6:55:d2:7b:c3:e0:a3:55:
                    6a:91:0f:dc:66:ea:87:9b:30:ac:e8:66:8c:5e:51:
                    97:7f:ab:cb:96:f7:0b:04:81:eb:29:04:f1:e1:79:
                    e9:21:e2:f1:12:20:b1:72:b1:c1:3c:52:f3:cf:ff:
                    59:e4:8d:83:4a:20:c6:43:2f:50:14:7c:80:76:69:
                    0e:ee:1f:f1:ef:3b:b2:f1:10:f8:a1:a2:a7:99:2e:
                    c8:02:69:da:3b:2c:cd:58:02:cc:34:d2:cf:8a:8f:
                    68:b8:1c:e8:ba:57:87:79:0d:62:7a:2f:ab:0e:43:
                    5e:28:20:9c:48:84:59:46:33:ee:3c:b0:42:32:2b:
                    4a:8d:69:dd:8e:14:22:c0:7b:79:a6:e9:cc:66:95:
                    2d:f4:fa:29:76:12:65:99:b9:90:5a:e0:d4:b5:13:
                    e5:a1:c6:2d:b0:70:f9:c5:07:76:43:ae:d3:fb:a8:
                    a3:b9:86:ec:84:c5:ca:8f:64:ae:60:10:09:bd:d0:
                    ae:a5:8d:33:c7:f7:df:a1:65:e6:6c:e4:f0:aa:0c:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E6:06:A0:81:77:F5:15:B6:B3:5F:E0:4B:A3:2C:29:A2:79:F2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:68:50:95:cb:3e:1e:ef:06:a3:a3:f4:64:f2:7f:b0:90:91:
         cd:57:3f:52:eb:8e:3e:82:ea:a9:4f:b7:26:2b:d6:45:ea:5f:
         11:f4:6a:da:6d:83:52:41:96:cd:6c:4c:37:3f:f9:b7:63:7e:
         e7:42:b9:37:ef:d2:b5:14:2a:69:64:cf:51:89:7a:98:39:23:
         f2:0b:05:d7:22:2e:39:d2:ec:a2:20:c8:05:26:a7:ff:02:ab:
         26:ba:94:8e:69:b0:fa:83:6f:cd:7a:11:55:42:d9:d7:87:e9:
         44:59:61:42:ab:a5:69:38:7a:40:c1:72:41:09:34:9a:8e:ef:
         65:a6:48:46:cf:cf:71:53:c7:a0:3e:22:aa:bc:8b:ee:fb:57:
         b9:4c:fa:7f:90:63:76:44:54:40:4f:1b:2f:99:1a:e9:71:dc:
         6f:36:52:34:6a:3b:fa:35:e7:e0:e6:af:ae:9b:92:8d:b8:42:
         66:b0:b9:33:40:48:4f:fd:a0:a4:81:be:d7:3d:fe:60:93:51:
         a3:bf:97:f5:12:4f:aa:91:9e:51:0e:0c:1c:65:09:42:83:e1:
         09:bd:1a:48:98:b8:46:88:76:75:89:60:ee:51:99:c9:91:a8:
         ac:45:35:d0:cc:bf:8a:81:d2:26:20:9e:ea:c3:ea:38:a5:17:
         e2:28:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:20:54 2026 by rpki-client