Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e8c329f5-af92-331a-8805-5519f105cdc7.roa
File:                     e8c329f5-af92-331a-8805-5519f105cdc7.roa (raw, json)
Hash identifier:          6gLatUrf7+QYFQZBgTsbjDyTngVj/czqzQK5deWbr10=
Subject key identifier:   48:90:8F:1A:00:51:CB:0E:07:A9:93:DF:41:E8:2A:7F:DF:DB:B6:9B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497EBA158F91FB95D25D9C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e8c329f5-af92-331a-8805-5519f105cdc7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397224
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:ba:15:8f:91:fb:95:d2:5d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bbf9565f-b2bd-481b-b3c3-a4d0d7534c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:50:09:51:50:38:56:e3:86:2c:38:75:32:
                    8e:33:e2:c6:97:3c:a2:8b:98:ad:bf:39:c8:6a:32:
                    8b:33:23:19:f2:75:f1:e5:c5:63:a6:58:e4:2e:f2:
                    84:46:93:ae:e6:d2:08:98:36:88:c9:68:49:46:df:
                    86:aa:41:8d:23:b1:53:80:d5:06:f7:e9:28:73:5e:
                    c2:ff:6b:a9:4d:20:cb:36:39:0b:95:e7:50:1d:29:
                    c8:b9:57:7e:f5:a6:53:b6:f7:47:87:c3:e0:aa:9a:
                    8f:45:17:60:72:06:92:d6:e0:57:27:6d:cd:fc:4a:
                    0e:df:c7:32:80:09:92:92:56:9d:ec:40:9c:d9:32:
                    48:d7:e5:ff:3b:72:62:2f:0e:3f:6d:5f:86:3b:81:
                    c2:fe:79:bc:65:13:d6:0c:84:43:6a:10:6d:4d:55:
                    43:d1:10:3b:56:65:a1:3f:93:96:ad:bb:6b:97:2d:
                    e2:ee:e7:0d:f2:10:4f:c4:8a:df:cf:5b:c7:85:55:
                    64:ef:b3:0f:11:24:77:08:f8:55:ca:3d:22:17:33:
                    a4:0b:d4:eb:c1:2d:12:00:dd:44:29:f9:79:60:0c:
                    1f:87:26:a3:ab:f2:47:bc:b6:0b:61:41:f3:ea:8d:
                    36:7b:4b:03:19:49:76:45:27:7e:31:36:d0:5c:46:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:8F:1A:00:51:CB:0E:07:A9:93:DF:41:E8:2A:7F:DF:DB:B6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e8c329f5-af92-331a-8805-5519f105cdc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ae:51:f6:a3:b1:98:71:da:9f:13:95:ec:77:54:a8:fa:6f:
         fb:ba:06:eb:c1:a1:4b:ed:4e:1c:34:0c:0e:0f:d6:a7:ee:7b:
         e6:43:db:50:0b:df:ea:8a:a9:ba:36:1a:24:07:3f:bc:40:db:
         ee:38:f7:e7:d8:a9:56:e9:95:b7:67:d1:d4:01:1b:7f:68:85:
         fd:45:1b:26:31:b5:8a:d1:4c:17:de:a1:42:d4:62:7d:b9:3a:
         c7:2e:e8:19:71:8f:03:a5:ff:f0:0a:67:cb:86:eb:21:4b:fe:
         d7:b6:00:f1:5f:a0:96:82:3c:30:31:c6:5f:50:d2:c3:11:a0:
         be:82:8f:16:02:36:d1:ab:18:e6:08:c6:93:e1:07:65:a7:f7:
         57:ba:43:22:aa:0d:b9:0b:07:de:26:ea:d4:07:c9:e7:af:85:
         70:95:f5:6f:36:fd:af:4f:e3:2e:76:aa:00:99:1f:c9:ef:57:
         48:50:2c:72:24:7b:a8:9e:5a:32:8c:e4:65:6b:46:07:32:4f:
         b9:b2:7a:8a:b1:92:93:3a:51:a8:42:d4:64:85:41:0c:1d:f8:
         34:2d:12:73:95:68:e7:63:71:ac:5e:30:37:1b:ad:ad:a1:de:
         25:7c:26:b4:3d:84:9a:89:82:47:30:49:36:15:7a:2b:8d:0a:
         33:6b:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:24:45 2026 by rpki-client