Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e5f0874e-3815-357c-ba08-0a0b51b732ee.roa
File:                     e5f0874e-3815-357c-ba08-0a0b51b732ee.roa (raw, json)
Hash identifier:          wNDYRWYN8l7odfgBa1mu1v79CmbSLzAStZJDNulsekg=
Subject key identifier:   40:D7:8A:EB:4B:D1:C2:A6:95:C6:70:EE:AD:99:F3:38:FC:E6:49:82
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497EC626783AE82EC2EA9500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e5f0874e-3815-357c-ba08-0a0b51b732ee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397240
IP address blocks:        156.154.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:c6:26:78:3a:e8:2e:c2:ea:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=321a0a98-f05f-4f6c-9efe-95203652df28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:58:81:9e:1b:ba:8b:49:51:62:b2:7c:6c:
                    09:3a:64:1e:34:55:31:8b:bd:b0:68:fb:a9:ed:b1:
                    5a:2c:d4:01:c3:8e:56:98:58:95:fa:57:94:4c:00:
                    34:47:3b:e4:bf:a5:29:ff:fd:55:b3:6c:0a:d9:dd:
                    72:70:06:34:46:f2:92:96:e1:e4:54:39:41:7d:69:
                    13:12:76:c4:c1:73:95:20:e7:29:81:b0:ea:7a:f6:
                    fa:02:e2:f0:b0:0b:83:6c:e8:72:f0:1a:89:b3:ca:
                    fe:be:86:71:8e:5f:e9:e0:cd:08:50:59:42:3d:74:
                    c9:ce:0f:79:a6:82:90:99:d6:4b:2c:41:5e:6e:cb:
                    ae:be:62:fc:a1:5f:dc:c4:e0:14:82:e8:17:9c:c6:
                    17:df:0e:f7:c7:04:00:8d:a0:7e:94:f9:de:00:5d:
                    6d:56:a9:d7:33:c8:6e:2c:06:b8:58:5e:a3:06:2b:
                    0b:1b:28:17:43:36:21:b5:44:28:2e:8b:4f:5a:a6:
                    d3:9b:88:92:35:37:5d:69:c7:42:ee:22:e7:39:aa:
                    68:7a:a1:fd:c2:66:43:04:e5:37:a0:02:89:4e:38:
                    64:97:72:60:75:ba:18:09:b5:41:6a:ac:81:3a:19:
                    cd:46:46:bb:92:73:4e:f6:74:27:b6:c4:32:1f:c9:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D7:8A:EB:4B:D1:C2:A6:95:C6:70:EE:AD:99:F3:38:FC:E6:49:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e5f0874e-3815-357c-ba08-0a0b51b732ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:8a:2d:24:98:c7:a9:c1:49:cc:a5:98:5e:f5:89:5e:a9:
         80:bc:ad:8f:f2:e5:f9:ba:1c:13:23:3d:9e:18:a2:da:60:35:
         8a:38:43:18:3b:eb:66:e7:a7:ff:62:be:7f:a9:8a:5a:96:b2:
         2d:76:2c:af:05:fc:57:b4:87:06:d2:db:66:1f:86:ef:bb:bf:
         66:18:80:65:79:4e:f4:41:5f:9e:b4:97:87:24:ad:e6:5b:95:
         71:d2:36:21:b5:16:e6:21:5b:c3:d4:1f:41:fd:f4:f8:92:2c:
         9a:9b:78:b8:61:6c:7e:f3:89:8a:d8:7f:dd:e1:d1:8c:3c:31:
         7c:83:23:fd:e2:ae:6a:4e:de:47:46:64:53:86:f6:d0:f2:31:
         63:04:c6:88:f9:52:96:4f:55:c9:09:51:55:e7:aa:aa:e8:bb:
         89:0a:2d:f5:ee:ef:f0:0d:ca:72:14:4c:d9:a2:c2:d6:2c:b5:
         c4:1e:80:f8:29:2c:8f:70:5d:b9:fd:73:4b:56:e5:fb:ca:48:
         f1:b3:5f:d7:fb:ef:f6:4d:5e:99:9e:ef:47:c0:1b:84:07:13:
         e2:d4:1c:8d:f9:b3:ec:57:7b:f1:b5:60:b7:41:17:50:2f:07:
         54:93:ea:63:07:4a:4b:72:94:77:b7:5a:83:00:98:4b:51:92:
         50:36:a5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:50:11 2026 by rpki-client