Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc941d06-25e9-3f1a-8fbe-1dadefbfd322.roa
File:                     dc941d06-25e9-3f1a-8fbe-1dadefbfd322.roa (raw, json)
Hash identifier:          c/1lm4SJ0Au8tBHM6idSKF8oX8G2B+oIfZxvRp7BLkw=
Subject key identifier:   B7:D9:C1:D5:11:17:11:36:E0:2C:C0:6A:14:8B:8B:85:35:6E:EB:B3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4C1ED0F40AEAE29D5F080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc941d06-25e9-3f1a-8fbe-1dadefbfd322.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397235
IP address blocks:        156.154.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:c1:ed:0f:40:ae:ae:29:d5:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=f08768c9-c401-46ee-85a5-e9c42fb4ecde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ad:53:42:fc:50:c8:ed:ad:d2:6c:d0:ce:0d:
                    69:55:08:56:b0:12:71:84:7d:10:a0:50:c5:27:bb:
                    64:67:cf:4b:70:cf:63:a6:a3:8a:31:61:dd:df:fc:
                    b2:d7:48:4f:58:9a:e1:f3:42:65:5f:79:19:07:17:
                    d5:dd:d0:97:a6:7f:9b:13:3f:be:a0:d4:a1:85:c4:
                    cb:7c:ac:21:25:26:56:af:dd:d9:6b:1a:4b:9e:81:
                    ea:28:eb:88:39:e8:a9:51:66:c8:2c:ea:96:b4:6c:
                    79:ec:bc:f4:5c:c7:3e:74:2b:19:ec:cf:12:fa:d4:
                    fb:a8:cb:3f:11:9e:21:ec:97:35:c7:f4:01:af:2a:
                    a6:63:ba:07:6f:ff:ee:94:a0:15:40:99:15:3e:94:
                    c7:74:39:a6:ec:14:cf:4d:a1:fd:90:53:f3:f9:08:
                    62:d0:a2:9f:15:77:cd:8d:d4:2d:0e:2f:d3:b4:2d:
                    dd:9e:40:70:f6:c7:f7:45:72:32:06:19:8a:8d:ca:
                    86:a5:63:f4:c3:12:e1:3d:6e:28:80:fe:b6:59:63:
                    d7:25:64:2a:20:54:5c:cb:67:32:02:76:16:a5:ac:
                    e4:8b:fe:8c:d0:21:10:b1:1d:a9:df:04:9b:fe:1f:
                    07:6b:4a:c4:98:46:79:01:c2:ca:56:10:3b:a3:c9:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:C1:D5:11:17:11:36:E0:2C:C0:6A:14:8B:8B:85:35:6E:EB:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc941d06-25e9-3f1a-8fbe-1dadefbfd322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:79:22:8a:f8:d1:35:60:34:1d:69:03:4f:81:4b:ee:cd:54:
         f2:38:46:54:1d:04:d1:89:b0:01:ab:e2:8f:c0:14:da:dd:6a:
         cb:b4:fe:c4:2f:f0:3f:3a:05:01:3d:13:32:bd:04:8d:f5:9a:
         b7:48:31:86:91:89:b7:70:97:d2:5e:40:ac:20:f4:04:96:31:
         c6:4f:19:48:12:9a:d0:47:fc:71:59:9c:77:eb:e9:06:44:1f:
         47:09:dc:ee:3a:d0:54:fa:d5:76:20:9c:7f:3e:42:35:84:59:
         cb:99:ce:28:cb:71:57:fa:b2:a8:be:03:9a:4c:28:b4:83:21:
         4e:42:71:24:68:98:f2:94:cb:75:8b:0c:f9:0f:43:91:f8:6d:
         63:18:31:52:e4:f8:8f:96:dd:85:ca:d6:2d:f9:da:8b:fe:e5:
         b4:eb:1d:14:b2:d0:e3:2a:9a:f5:8a:56:fc:b6:07:13:b0:7f:
         30:e7:57:3c:d9:81:21:21:95:ea:1d:9c:a4:06:aa:53:ec:25:
         7a:74:1f:d7:2e:10:b0:f1:f7:32:24:dc:b0:bb:6f:27:20:58:
         d6:5a:de:f9:be:9c:4b:d1:29:ff:7d:be:90:87:1f:61:85:a4:
         a7:fb:66:43:b6:3c:a3:9b:29:f6:b2:c6:70:8b:41:28:7b:85:
         c2:87:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:57:58 2026 by rpki-client