Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa
File:                     aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json)
Hash identifier:          6CqLvHpWIJPB9qZzB396TZ82B5zcMtVtTLCs9No+zBs=
Subject key identifier:   22:9F:16:73:67:8A:87:55:71:16:70:AA:57:8E:A0:9A:DD:90:E6:59
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F4328584F1897934A0B9D3668EAC35C40
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        104.156.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:93:4a:0b:9d:36:68:ea:c3:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=a8fbb50d-45be-4049-bb8b-30b534e91cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:a1:72:ad:6b:ae:06:7d:5b:67:0d:dd:39:
                    15:d9:f3:c1:00:09:c3:1c:67:8b:3f:60:5b:c8:6e:
                    ac:bd:c5:d0:1a:89:0f:0c:80:d3:0b:4b:9d:69:b2:
                    05:36:0c:3f:81:fd:1a:2d:84:65:2e:87:b9:5f:61:
                    cf:d3:76:b5:67:9c:c1:13:d8:aa:b8:95:7d:73:de:
                    05:81:d1:7c:60:b5:48:1a:ff:d6:b3:d8:9d:77:b1:
                    fe:f3:3e:3c:38:2b:c6:d6:75:e6:b2:59:ff:00:d4:
                    f1:50:b3:5b:f1:94:29:cc:8a:58:fe:d6:d1:1c:ee:
                    61:4d:1e:08:be:bf:df:92:ae:7a:4a:bd:fc:8d:4d:
                    01:d4:5b:b7:8e:98:54:4b:d0:39:7a:71:61:e8:05:
                    d1:8d:72:10:e5:28:90:9a:47:b1:aa:c4:f0:ed:4c:
                    47:79:63:28:9a:52:b1:90:42:a3:d3:4f:d4:e5:96:
                    f3:34:e5:bf:ef:75:ec:d8:8f:11:7e:5c:39:c2:40:
                    69:0f:c2:a9:c2:94:af:8f:f0:6b:c0:47:38:a7:b1:
                    ee:77:0e:33:97:81:9d:02:12:43:eb:d9:1b:c3:c6:
                    0d:cb:bf:66:e9:d6:7e:51:d9:b7:b7:4a:d8:f5:01:
                    42:7f:62:de:bb:0e:68:e8:08:40:89:f6:2b:4b:9c:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9F:16:73:67:8A:87:55:71:16:70:AA:57:8E:A0:9A:DD:90:E6:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:5f:40:b3:d3:78:62:a0:39:d2:19:cf:18:22:bb:db:d4:fb:
         9d:b7:f1:dd:c1:6a:01:36:37:08:e9:32:c0:dc:4a:68:04:28:
         96:ad:a4:c0:e8:cd:9c:29:e1:21:76:9d:57:18:3c:7a:59:53:
         03:6c:17:57:e6:e8:6c:44:6c:56:ee:9a:01:e3:21:87:52:97:
         e3:30:3b:aa:ac:b4:d8:c3:3d:76:f7:c2:35:9e:67:c1:e9:4e:
         5c:26:92:ef:b6:1d:c7:5f:c0:cf:f4:4d:eb:95:10:12:03:19:
         d5:47:d8:a5:a1:c6:f9:24:34:13:49:33:33:31:4a:a2:5d:2c:
         f4:a0:cf:1e:4c:4d:d1:2a:97:06:47:35:cc:f0:71:ce:56:35:
         97:aa:81:87:7e:3a:d2:a0:98:a0:dd:2e:27:16:a5:f8:ad:ad:
         d5:3e:90:f8:3a:48:17:e5:a5:af:91:d4:cd:13:ab:fd:75:9a:
         12:b9:4b:d0:9a:50:36:53:aa:67:79:a7:0a:56:a6:a9:2c:6f:
         56:4b:4a:2a:1e:96:7d:36:22:6a:ab:1e:91:cd:18:fa:71:0a:
         d1:0c:82:33:3c:5d:2b:be:e9:b2:38:33:13:09:55:7e:f0:32:
         d0:47:bd:9c:f0:e0:b3:3c:33:c1:fd:f5:5d:9e:2d:35:c2:3e:
         88:fe:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:24:33 2026 by rpki-client