Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a475ee3b-8a52-3bb2-99b4-48fbffcc0e01.roa
File:                     a475ee3b-8a52-3bb2-99b4-48fbffcc0e01.roa (raw, json)
Hash identifier:          UGRqJNyti+o3gUMVX7Y4u9RrqoP+55gdA5PNU8gxmUc=
Subject key identifier:   1B:CF:9E:ED:17:4E:03:9C:01:DA:CF:F1:72:7D:EF:81:11:EF:5E:9E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E8C8A5485AC8C7A0B0CB57180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a475ee3b-8a52-3bb2-99b4-48fbffcc0e01.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     397230
IP address blocks:        156.154.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:54:85:ac:8c:7a:0b:0c:b5:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=caae4658-fc82-4976-9e18-1f4a514b069d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:8e:08:7f:e3:fa:b4:2e:64:21:4e:aa:6a:
                    7a:98:94:3a:87:71:24:f8:cd:3d:1e:3c:1c:61:e0:
                    76:c1:a4:f0:11:0d:bb:86:7e:7a:ec:ca:97:c5:41:
                    df:57:d7:a2:63:d3:68:40:c9:b4:fe:61:29:f8:9b:
                    12:5f:52:9e:fc:62:82:ec:2e:67:11:da:a9:90:4d:
                    9b:d6:8e:92:ae:5a:8d:a9:a6:7b:b9:ad:67:04:5a:
                    04:5b:7b:61:61:a8:50:72:4e:03:f4:4c:c9:d8:af:
                    a5:b7:36:9d:1b:39:27:22:07:12:9a:07:54:8b:f3:
                    d8:dd:b6:62:f7:0e:82:e3:2e:47:e8:1a:40:7c:8b:
                    a7:77:6c:37:6b:87:6e:0f:f2:b9:c9:13:b8:7b:f4:
                    58:b3:07:55:b8:a9:1d:45:f3:bb:06:dc:4b:05:23:
                    6e:da:55:40:6f:15:f3:96:ad:7c:2c:1a:a6:60:fd:
                    e6:1b:ef:3a:15:fa:fb:4d:a9:ab:52:bf:bb:a2:99:
                    8c:89:3f:5f:7d:1c:ca:e2:e0:20:cd:31:15:7c:07:
                    a1:d7:c1:bc:e6:2e:84:35:bd:f3:6e:5c:ef:f5:1e:
                    bc:0a:7a:9b:77:76:e1:cb:00:a4:d4:00:80:66:14:
                    05:0a:3d:8c:2a:c5:d3:21:ca:06:82:b8:72:d9:50:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CF:9E:ED:17:4E:03:9C:01:DA:CF:F1:72:7D:EF:81:11:EF:5E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a475ee3b-8a52-3bb2-99b4-48fbffcc0e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:91:a0:96:5a:11:c0:89:ba:41:8b:82:76:fe:33:bc:d5:0d:
         df:18:c8:5e:02:65:48:ec:40:6c:d4:93:b2:ed:64:7b:59:fc:
         af:41:fa:59:8e:be:6b:f2:6f:c8:97:f7:3d:14:53:c2:47:5b:
         50:36:87:b2:63:5f:01:16:ce:52:09:76:f9:ca:68:a2:8b:7c:
         c3:72:dc:06:33:ef:45:a5:0e:aa:1a:85:0a:7d:6d:e1:c5:ca:
         c6:51:b1:1a:96:1c:c0:67:6b:91:9d:a6:c7:d5:2c:5b:32:79:
         ab:6a:fa:15:68:da:28:a0:35:15:9f:2f:e5:7c:d0:56:50:c3:
         d6:9a:8b:1a:88:9e:ec:68:ee:eb:43:ec:cf:e1:e6:4f:ec:74:
         2b:9b:38:29:f6:5d:6c:2b:1d:86:f1:ce:31:ea:9c:9f:36:92:
         b4:db:7d:c3:56:d3:df:18:76:bf:a3:41:d6:34:3d:98:ef:fc:
         4f:fc:35:f2:75:71:8b:0b:20:da:cf:5b:e0:56:06:02:88:80:
         9f:d8:6b:bf:57:33:b3:62:4c:54:80:5b:c6:d3:a9:af:17:b0:
         3b:ad:11:36:57:3e:7f:24:97:ff:a2:57:93:f5:bc:e4:32:c8:
         e5:a2:ca:65:14:6d:95:06:0f:34:f9:b7:d5:f2:b7:c0:39:b9:
         10:e8:be:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MilSFrIx6Cwy1cYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk
Y2FhZTQ2NTgtZmM4Mi00OTc2LTllMTgtMWY0YTUxNGIwNjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C+OCH/j+rQuZCFOqmp6mJQ6h3Ek+M09Hjwc
YeB2waTwEQ27hn567MqXxUHfV9eiY9NoQMm0/mEp+JsSX1Ke/GKC7C5nEdqpkE2b
1o6SrlqNqaZ7ua1nBFoEW3thYahQck4D9EzJ2K+ltzadGzknIgcSmgdUi/PY3bZi
9w6C4y5H6BpAfIund2w3a4duD/K5yRO4e/RYswdVuKkdRfO7BtxLBSNu2lVAbxXz
lq18LBqmYP3mG+86Ffr7TamrUr+7opmMiT9ffRzK4uAgzTEVfAeh18G85i6ENb3z
blzv9R68Cnqbd3bhywCk1ACAZhQFCj2MKsXTIcoGgrhy2VAbZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvPnu0XTgOcAdrP8XJ974ER716eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTQ3NWVlM2ItOGE1Mi0z
YmIyLTk5YjQtNDhmYmZmY2MwZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+RoJZaEcCJukGLgnb+M7zVDd8YyF4CZUjsQGzUk7LtZHtZ/K9B+lmO
vmvyb8iX9z0UU8JHW1A2h7JjXwEWzlIJdvnKaKKLfMNy3AYz70WlDqoahQp9beHF
ysZRsRqWHMBna5GdpsfVLFsyeatq+hVo2iigNRWfL+V80FZQw9aaixqInuxo7utD
7M/h5k/sdCubOCn2XWwrHYbxzjHqnJ82krTbfcNW098Ydr+jQdY0PZjv/E/8NfJ1
cYsLINrPW+BWBgKIgJ/Ya79XM7NiTFSAW8bTqa8XsDutETZXPn8kl/+iV5P1vOQy
yOWiymUUbZUGDzT5t9Xyt8A5uRDovjI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:02 2026 by rpki-client