Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9eb7fe58-e06a-328e-b678-47b9ef10f4e8.roa
File:                     9eb7fe58-e06a-328e-b678-47b9ef10f4e8.roa (raw, json)
Hash identifier:          7AuRw8l5uSay186TQ6WxKPVka0Cg9FRDkze3771ctNg=
Subject key identifier:   AE:28:96:FD:C5:35:5F:A0:F2:C8:BD:D6:13:74:35:08:EB:AC:E2:10
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4BC8FF085D11503493C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9eb7fe58-e06a-328e-b678-47b9ef10f4e8.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397214
IP address blocks:        156.154.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:bc:8f:f0:85:d1:15:03:49:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=ae9a6bc5-c376-4b33-8f09-07bf706a345d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:ce:27:94:e5:a7:d9:4f:7e:92:65:58:6c:
                    73:3d:e4:30:51:6f:77:df:34:bc:38:9c:73:95:29:
                    e4:d4:d2:bc:85:5e:b8:72:20:13:aa:50:bd:79:6a:
                    b4:3f:e9:9f:04:95:3d:89:31:9e:02:08:b0:ea:34:
                    d4:4a:e5:d2:4a:a8:75:82:72:6b:fe:0e:8e:21:6c:
                    d6:8d:65:bd:73:de:c4:25:88:33:30:91:cb:63:f4:
                    77:f6:55:68:d6:3f:81:11:5f:bd:03:dd:ee:4c:28:
                    c9:30:45:24:e4:42:65:69:c1:1b:15:81:26:82:36:
                    d3:8a:9f:fc:4d:1d:ab:83:2a:6d:bb:95:71:99:d8:
                    6b:c9:ce:df:ca:dd:c1:c4:84:6f:0a:4e:fd:b1:66:
                    53:9e:ed:2b:46:fe:40:81:53:e9:e6:0a:2d:5b:61:
                    6a:9e:eb:63:fa:1f:c7:9f:cc:e3:f8:3c:4a:41:c7:
                    72:46:fa:87:ac:19:e9:80:2c:56:e4:4b:73:b3:6d:
                    d7:3d:76:5e:75:00:54:15:7e:2c:a6:fc:7b:1d:e7:
                    e8:9b:2a:df:e5:42:bc:01:d3:a3:4e:e7:3f:e6:56:
                    1a:5b:b2:6a:3c:16:1d:60:b9:3d:3f:f9:03:bc:bb:
                    1a:aa:ba:0f:6d:74:46:65:66:88:f6:6b:09:a5:f6:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:28:96:FD:C5:35:5F:A0:F2:C8:BD:D6:13:74:35:08:EB:AC:E2:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9eb7fe58-e06a-328e-b678-47b9ef10f4e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5d:f9:6d:13:0d:62:e9:17:68:79:58:61:10:49:83:91:2c:
         78:72:81:ab:7c:f8:30:74:eb:0d:12:50:61:be:5c:5c:a5:5d:
         94:8e:ba:6d:13:15:00:59:47:89:4c:41:9a:b6:0b:81:7d:f6:
         55:8c:2f:f6:04:42:9d:3b:d4:87:e9:bc:b8:f6:c2:b2:af:44:
         1e:32:ce:66:4b:ed:07:34:dd:73:56:58:4b:65:19:a2:cd:ea:
         3d:22:08:f7:f4:c6:c3:7c:58:49:b8:23:b9:bc:d9:e7:49:9c:
         44:cc:ac:64:f3:e9:61:b4:cb:85:fc:2a:6d:86:ed:65:50:79:
         eb:fd:42:37:67:af:eb:c6:11:50:aa:ff:14:3c:f2:1d:72:9d:
         7a:47:e0:7e:3e:8e:96:95:79:78:11:e7:87:9b:17:a8:40:e2:
         88:17:b4:2a:ff:41:51:7d:9d:23:33:49:b7:16:83:0e:82:47:
         19:4c:5b:1f:a6:e7:29:87:05:f2:03:ab:4a:92:18:5a:37:d0:
         75:ed:d1:e7:ec:8d:2e:2c:e7:57:50:d2:e1:ff:d4:8a:1f:59:
         fb:2b:2c:f0:8e:ac:8c:eb:60:40:84:58:36:6d:bc:40:0b:0c:
         67:b1:ed:48:61:b4:ac:6b:3c:c7:e2:fe:9e:cd:81:c0:89:5e:
         92:55:83:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtLyP8IXRFQNJPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
YWU5YTZiYzUtYzM3Ni00YjMzLThmMDktMDdiZjcwNmEzNDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGbOJ5Tlp9lPfpJlWGxzPeQwUW933zS8OJxz
lSnk1NK8hV64ciATqlC9eWq0P+mfBJU9iTGeAgiw6jTUSuXSSqh1gnJr/g6OIWzW
jWW9c97EJYgzMJHLY/R39lVo1j+BEV+9A93uTCjJMEUk5EJlacEbFYEmgjbTip/8
TR2rgyptu5Vxmdhryc7fyt3BxIRvCk79sWZTnu0rRv5AgVPp5gotW2Fqnutj+h/H
n8zj+DxKQcdyRvqHrBnpgCxW5Etzs23XPXZedQBUFX4spvx7Hefomyrf5UK8AdOj
Tuc/5lYaW7JqPBYdYLk9P/kDvLsaqroPbXRGZWaI9msJpfbhgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4olv3FNV+g8si91hN0NQjrrOIQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWViN2ZlNTgtZTA2YS0z
MjhlLWI2NzgtNDdiOWVmMTBmNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRd+W0TDWLpF2h5WGEQSYORLHhygat8+DB06w0SUGG+XFylXZSOum0T
FQBZR4lMQZq2C4F99lWML/YEQp071IfpvLj2wrKvRB4yzmZL7Qc03XNWWEtlGaLN
6j0iCPf0xsN8WEm4I7m82edJnETMrGTz6WG0y4X8Km2G7WVQeev9Qjdnr+vGEVCq
/xQ88h1ynXpH4H4+jpaVeXgR54ebF6hA4ogXtCr/QVF9nSMzSbcWgw6CRxlMWx+m
5ymHBfIDq0qSGFo30HXt0efsjS4s51dQ0uH/1IofWfsrLPCOrIzrYECEWDZtvEAL
DGex7UhhtKxrPMfi/p7NgcCJXpJVg+s=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:48 2026 by rpki-client