Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2118311-aaeb-3934-b869-0f7fa73e3d8b.roa
File:                     f2118311-aaeb-3934-b869-0f7fa73e3d8b.roa (raw, json)
Hash identifier:          eSKm5S1LT+0sdETulWbmXm+RX/3vMbjOyXQcm8dCioQ=
Subject key identifier:   94:4E:64:84:47:78:60:46:02:73:23:A6:AE:E2:EB:A1:1C:3E:BA:D6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497E7053A0D0172374CA4740
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2118311-aaeb-3934-b869-0f7fa73e3d8b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397219
IP address blocks:        156.154.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:70:53:a0:d0:17:23:74:ca:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0504f224-3f4c-47f8-be20-a58f62197404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:c7:66:1d:e0:88:35:f1:c6:8c:ba:60:7e:
                    02:5e:20:5e:fa:01:84:4c:68:9c:50:3b:47:0e:95:
                    1f:a7:6e:6d:c4:37:ba:74:3a:62:86:2a:b1:f0:a6:
                    46:c6:cf:a0:db:10:a5:15:30:77:08:fd:a5:71:5c:
                    d5:d4:f9:89:90:2d:a0:34:0c:10:d4:9d:f6:a7:fb:
                    e3:c9:47:51:b4:3e:04:35:81:f1:ee:4b:11:c2:aa:
                    35:fb:2f:92:17:e4:08:a5:35:77:57:bd:1a:2b:61:
                    9d:c1:b0:46:fa:93:e2:fe:89:5a:f2:99:27:06:98:
                    c0:4a:79:a6:88:46:ad:5d:e6:06:87:7b:c6:6a:5d:
                    d7:f3:88:c4:b6:fd:fa:17:c4:5c:fc:92:ff:2f:77:
                    d5:91:eb:2c:60:a0:a9:4a:11:06:b0:f1:c3:82:d6:
                    47:37:42:f5:df:22:9f:e9:c9:4a:e7:2d:ba:e2:1a:
                    2e:12:3c:be:74:b0:03:45:be:e2:4a:0b:65:02:ed:
                    51:42:86:ad:c4:43:11:17:b4:37:b2:45:ed:c4:d6:
                    d1:50:17:d1:c0:07:cc:cf:58:3c:35:81:31:8a:fc:
                    60:8b:31:53:5c:c4:50:f9:24:fc:17:2d:d2:1f:fd:
                    6f:82:79:5d:f4:e6:2c:f0:6a:e4:1a:74:97:f0:d2:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4E:64:84:47:78:60:46:02:73:23:A6:AE:E2:EB:A1:1C:3E:BA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2118311-aaeb-3934-b869-0f7fa73e3d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:8b:81:9c:41:67:d9:7b:c9:a4:a8:08:08:05:32:41:7a:
         1f:a1:b6:4e:eb:07:88:0f:c5:d5:61:b5:07:0a:fe:da:e2:74:
         0b:2c:02:be:a6:3e:65:69:35:93:90:81:f4:95:8e:2e:1b:75:
         a5:fa:48:71:8d:7f:9f:3f:ad:b3:8b:6e:ec:05:29:73:65:e8:
         b2:60:dc:4a:16:a5:40:be:0f:68:dd:07:8c:d7:c0:d1:31:62:
         0f:a7:70:64:4d:61:1b:e7:91:c8:fe:0b:2f:8f:9e:55:ca:c0:
         51:a6:2f:e2:63:34:b4:0d:13:23:52:48:a6:fc:eb:b8:77:37:
         77:7c:16:26:95:13:70:92:28:aa:90:4c:7e:5c:49:3f:c1:b9:
         7f:f9:e7:65:db:50:61:89:ed:ce:88:d4:14:d1:a7:f6:cc:c6:
         bc:3c:57:89:21:1d:7f:bd:61:0c:a0:c2:4f:3b:a6:ec:23:d4:
         b1:8b:56:6a:e3:3c:2d:02:e4:f5:59:18:e2:e0:14:f1:80:2d:
         e2:1f:ba:04:1e:38:d6:ed:93:16:c3:d2:dd:9e:8e:1e:6b:dc:
         24:94:df:92:34:75:f2:73:c2:c8:b0:c2:30:f5:e9:5f:b8:2e:
         aa:0c:35:6c:2c:4b:a8:e0:60:87:de:40:bc:6f:4f:a6:09:24:
         8a:57:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:07:43 2026 by rpki-client