Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe8b9e8-b4ed-3e0f-b91b-7b02c2a211f2.roa
File:                     cfe8b9e8-b4ed-3e0f-b91b-7b02c2a211f2.roa (raw, json)
Hash identifier:          YWnYQyGsCSh2+FVtxI+NdZXJqIJvhDjRsWB9ABgdwHE=
Subject key identifier:   FC:E9:B9:BC:3A:A6:4A:4C:04:AD:F2:1A:52:17:57:F8:3D:58:70:8A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4CB208793DAFC97DFEF80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe8b9e8-b4ed-3e0f-b91b-7b02c2a211f2.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397214
IP address blocks:        156.154.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:cb:20:87:93:da:fc:97:df:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=66feee12-c1ca-4ce2-901b-3ddad0f2c000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:02:01:05:89:09:1c:43:bf:e4:bf:c7:46:
                    c4:b8:27:44:bf:4d:28:d4:8b:56:6f:25:39:ed:12:
                    d8:69:3a:c3:35:2e:78:21:8e:f8:06:0a:30:09:7f:
                    50:26:74:02:36:ba:27:45:11:be:2b:ce:7b:32:d6:
                    d2:6a:96:fd:b3:68:82:25:b7:d2:66:15:26:f3:be:
                    6e:f4:d2:30:f4:e2:b2:24:54:64:00:47:7b:64:56:
                    8a:7d:7f:87:f8:30:1b:f8:b2:61:ba:3d:b2:9c:4f:
                    2e:e3:c3:a2:f3:b1:c0:81:6d:2b:48:59:05:65:4c:
                    a8:d5:0a:b2:5f:73:a9:4b:1b:d6:70:91:54:9b:85:
                    0f:49:e6:99:cf:a6:92:ac:fa:1e:12:96:40:28:be:
                    f2:f5:c9:6c:87:0d:29:94:e9:13:5d:79:84:e0:49:
                    65:69:2d:29:fa:50:ed:66:49:de:fb:ba:71:b6:9f:
                    d6:e9:78:5c:96:b1:77:05:59:5c:18:58:f8:f5:42:
                    12:ac:31:f8:81:4a:9f:22:de:16:ea:d1:6b:85:c4:
                    71:76:b2:d2:7d:fd:d9:a0:98:0b:92:fc:59:09:d4:
                    56:c6:c8:6a:f9:3d:82:94:8e:b2:26:c5:e9:0d:ce:
                    8c:20:7f:d7:65:36:2d:de:50:e7:0e:c8:88:03:bf:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:B9:BC:3A:A6:4A:4C:04:AD:F2:1A:52:17:57:F8:3D:58:70:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe8b9e8-b4ed-3e0f-b91b-7b02c2a211f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9e:f6:e4:30:c4:15:bb:bc:c1:14:6f:37:0e:3d:c6:44:18:
         fb:7d:4b:50:a1:d2:8a:17:d4:70:d5:c8:72:9d:06:52:93:28:
         f6:62:8b:64:9d:e1:be:1a:f1:01:cd:d7:73:b5:1f:64:34:01:
         af:92:72:10:55:01:55:92:31:4b:ff:0b:60:92:60:0a:47:e0:
         9f:ab:59:c5:0f:c9:3f:4c:73:ce:88:8f:f4:d3:35:b0:35:89:
         68:1b:c5:ad:61:cd:90:5a:d3:4e:83:62:82:af:bc:eb:f2:be:
         2e:54:f0:22:76:92:cf:42:0d:23:e2:b5:45:d4:10:02:79:ef:
         fa:da:a3:c4:92:93:e8:14:8a:93:f5:24:48:05:de:a0:ed:a4:
         98:75:5c:ea:a9:40:7e:2e:a0:08:a8:e9:7a:8c:f0:89:7d:27:
         0d:c6:7a:76:78:25:e4:2c:71:97:11:b2:9c:fc:0c:e0:58:c3:
         78:c6:f3:31:df:01:4f:22:fc:64:79:0e:12:7f:51:18:99:2d:
         ce:44:7e:5c:13:f9:ac:bc:1a:ba:7c:26:b2:ca:4f:7f:85:2c:
         46:85:48:58:80:49:65:e9:f8:55:39:88:f0:74:1a:c1:e3:c3:
         3c:5c:c7:58:40:91:69:cd:e5:98:70:20:81:a5:5b:a8:30:32:
         83:34:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:16 2026 by rpki-client