Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aba2b21f-e29e-34c5-909e-329bc0b261bb.roa
File:                     aba2b21f-e29e-34c5-909e-329bc0b261bb.roa (raw, json)
Hash identifier:          F4X6NkRsLV9xbMKxsLaK74NrkNFCQxgfi1hcdR9lSBY=
Subject key identifier:   92:77:D8:EA:3F:60:D1:CD:E4:BD:E9:BA:21:86:44:6C:65:DB:FE:86
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497DC541768554BA265AF380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aba2b21f-e29e-34c5-909e-329bc0b261bb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397225
IP address blocks:        156.154.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:c5:41:76:85:54:ba:26:5a:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=318bde9f-b102-4b1f-82d3-37cb8f749886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1d:6a:08:c2:4d:be:ad:e2:29:e5:5c:6e:c4:
                    65:88:34:5a:8a:1b:6a:45:4f:ac:66:48:31:fa:f3:
                    7c:52:ed:40:9e:5b:99:b3:1a:51:ef:7e:af:ad:ea:
                    2f:d8:3b:17:52:3d:58:59:4b:bf:d9:85:5d:23:04:
                    e7:ff:ee:00:47:86:51:99:a8:25:56:f0:89:92:88:
                    82:a2:a9:13:9f:6f:eb:ca:0b:91:ad:51:9a:9f:a7:
                    80:ff:78:0e:b3:50:78:4e:3e:2b:82:d6:b0:2d:b6:
                    21:1e:85:98:96:dd:47:01:2d:1c:a4:61:27:32:81:
                    7f:54:db:fd:25:d9:8b:83:f3:46:54:63:50:5f:7a:
                    59:09:1c:21:8d:c0:f7:5c:ab:4c:23:42:a9:79:b2:
                    c2:c1:3f:b5:83:3a:a3:58:af:0e:57:cb:19:64:92:
                    77:ac:7e:80:45:97:6f:be:e0:0b:75:f6:5f:39:b4:
                    5d:12:5a:ab:49:8e:90:9a:28:c2:88:b2:75:01:fc:
                    95:f3:96:d1:4a:57:6e:d6:4d:c5:bc:81:ca:51:75:
                    fe:3a:8c:cb:c3:de:3f:03:a7:67:7d:eb:c7:d8:7d:
                    69:54:24:d4:b3:a9:bc:a8:c6:50:42:d8:e3:ba:f2:
                    10:70:46:c1:c9:9c:df:06:c6:4d:96:38:e8:8e:7a:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:77:D8:EA:3F:60:D1:CD:E4:BD:E9:BA:21:86:44:6C:65:DB:FE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aba2b21f-e29e-34c5-909e-329bc0b261bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:55:c7:cb:bc:74:a9:4e:b7:52:1b:2e:10:fd:71:ce:fc:7d:
         ed:0c:ba:23:3d:f2:a2:0e:07:e7:f9:90:90:7d:cd:6c:4f:22:
         6a:e3:e6:f4:37:54:29:c4:db:90:9e:eb:8d:1f:d2:66:91:b8:
         93:76:cc:0c:00:15:2c:d4:14:21:7f:20:c3:81:e9:55:67:cd:
         a9:5d:e4:bc:33:3f:e4:57:77:3c:ca:57:ae:63:76:d2:88:1e:
         89:b5:fc:70:c1:32:4c:a5:69:eb:f8:87:e1:04:1d:92:0b:98:
         2b:83:9b:47:ae:18:77:92:06:be:5c:08:37:25:38:ce:a2:bb:
         7a:aa:e5:08:14:ca:2a:b0:8e:51:f5:b8:c3:a9:0b:a8:4e:ff:
         e5:2d:34:ec:22:21:9d:d3:78:21:e2:30:6f:7b:b2:4c:19:02:
         8b:16:19:d2:22:a1:63:14:28:14:4d:f9:4b:dc:01:0d:be:a1:
         ab:72:6a:9f:dc:c3:cc:e3:81:d4:0e:a8:a5:9c:df:51:00:cd:
         e8:bf:08:62:f5:36:ec:44:f8:b7:69:c3:5a:c4:6d:39:55:8b:
         18:4f:ea:a0:b4:95:d9:bf:69:d2:56:14:22:2f:ed:15:ab:a2:
         bf:38:ba:ac:40:f5:55:9e:8b:1a:10:09:82:5e:47:dd:7a:79:
         e6:07:30:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfcVBdoVUuiZa84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzE4YmRlOWYtYjEwMi00YjFmLTgyZDMtMzdjYjhmNzQ5ODg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh1qCMJNvq3iKeVcbsRliDRaihtqRU+sZkgx
+vN8Uu1AnluZsxpR736vreov2DsXUj1YWUu/2YVdIwTn/+4AR4ZRmaglVvCJkoiC
oqkTn2/ryguRrVGan6eA/3gOs1B4Tj4rgtawLbYhHoWYlt1HAS0cpGEnMoF/VNv9
JdmLg/NGVGNQX3pZCRwhjcD3XKtMI0KpebLCwT+1gzqjWK8OV8sZZJJ3rH6ARZdv
vuALdfZfObRdElqrSY6QmijCiLJ1AfyV85bRSldu1k3FvIHKUXX+OozLw94/A6dn
fevH2H1pVCTUs6m8qMZQQtjjuvIQcEbByZzfBsZNljjojnqFSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJ32Oo/YNHN5L3puiGGRGxl2/6GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWJhMmIyMWYtZTI5ZS0z
NGM1LTkwOWUtMzI5YmMwYjI2MWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9Vx8u8dKlOt1IbLhD9cc78fe0MuiM98qIOB+f5kJB9zWxPImrj5vQ3
VCnE25Ce640f0maRuJN2zAwAFSzUFCF/IMOB6VVnzald5LwzP+RXdzzKV65jdtKI
Hom1/HDBMkylaev4h+EEHZILmCuDm0euGHeSBr5cCDclOM6iu3qq5QgUyiqwjlH1
uMOpC6hO/+UtNOwiIZ3TeCHiMG97skwZAosWGdIioWMUKBRN+UvcAQ2+oatyap/c
w8zjgdQOqKWc31EAzei/CGL1NuxE+Ldpw1rEbTlVixhP6qC0ldm/adJWFCIv7RWr
or84uqxA9VWeixoQCYJeR916eeYHMLA=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:35:10 2026 by rpki-client