Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5bae5c45-96a0-3711-94e6-011b01ce8685.roa
File:                     5bae5c45-96a0-3711-94e6-011b01ce8685.roa (raw, json)
Hash identifier:          RG2Nrdha374sZkMcTvbQ/EDMQVXtcng8TKSh5UCJ9ew=
Subject key identifier:   41:8E:5F:99:A2:DF:D1:33:E6:59:9D:65:38:C7:30:0F:75:6B:54:D1
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CAE572AF6FAA94C16042942C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5bae5c45-96a0-3711-94e6-011b01ce8685.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     26744
IP address blocks:        206.180.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:2a:f6:fa:a9:4c:16:04:29:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=61d31736-756a-4c4c-b2bd-608b6ceebcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:b5:91:84:8e:7c:a8:91:8d:1d:75:5e:6c:
                    f4:91:4b:dd:a0:23:78:98:0f:09:08:95:60:21:de:
                    75:16:4f:08:32:22:bb:6d:f4:9f:70:46:6e:20:df:
                    e1:66:f8:1c:5f:95:45:65:45:cc:ca:8f:c7:0d:0f:
                    c1:be:40:fc:ee:72:4b:10:d1:87:13:fd:a3:cb:5f:
                    81:6e:40:c5:a1:50:bd:14:7a:e6:90:dd:ef:53:e1:
                    11:03:1d:f7:23:c5:9a:4e:11:55:54:cf:18:21:0e:
                    fe:5e:51:f8:76:24:1c:4f:43:26:8c:d2:30:f5:a5:
                    d5:38:bc:f3:fd:8a:2a:0a:5e:a3:78:d4:2a:19:d7:
                    66:fb:e1:49:da:3b:6b:12:66:7e:94:fc:05:51:d3:
                    06:19:0c:f1:dc:82:77:42:46:a0:d0:cc:8a:d1:e6:
                    88:61:b6:cb:98:29:60:d1:49:7a:b2:22:7a:04:17:
                    8b:10:f4:0e:ae:11:c4:ff:dc:0c:81:ac:d2:62:65:
                    89:29:66:53:c5:e5:d2:03:0c:f0:c2:db:a5:ea:26:
                    0e:25:ec:71:f8:a4:ba:eb:50:27:4e:61:b4:13:fa:
                    73:e9:37:13:4f:c9:d8:4c:04:f0:78:ed:41:48:ff:
                    e9:cd:ae:5e:e4:c6:d9:a4:9a:90:c6:89:9a:61:16:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8E:5F:99:A2:DF:D1:33:E6:59:9D:65:38:C7:30:0F:75:6B:54:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5bae5c45-96a0-3711-94e6-011b01ce8685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:c2:d5:c4:25:63:d1:52:dd:05:bb:54:a7:b9:d9:d9:81:
         de:c7:96:36:f4:2c:2f:99:98:db:fe:39:b4:73:06:a1:f4:44:
         f2:2c:0d:2c:e3:12:62:ec:94:99:59:8a:64:ed:f0:5a:67:b0:
         8a:66:77:6d:4c:96:15:d3:89:f6:95:7c:51:7a:c9:ab:90:e7:
         02:ef:67:d2:43:57:8e:49:11:fa:2c:2d:57:18:04:85:d4:ff:
         f7:1d:e7:06:ad:dd:68:ac:46:e8:1c:a8:28:40:83:21:db:be:
         fc:ba:17:d6:23:2b:af:fa:c2:ec:6d:84:45:89:0b:22:24:36:
         72:5a:e1:d2:80:23:4f:b2:60:1c:39:02:b8:45:d2:85:1f:db:
         2f:68:f8:31:d4:ff:2d:66:32:ea:fc:d5:b1:77:60:69:2a:38:
         47:23:b5:9e:df:05:35:02:ab:7b:fd:46:ec:8d:fd:91:9c:a0:
         1d:22:05:12:52:b2:04:27:b2:de:e5:4d:f7:37:e0:ac:ae:4b:
         90:92:f7:84:9d:50:ca:e8:d9:f3:d5:0e:b1:6e:dc:5c:df:d9:
         f9:07:02:d4:0c:f2:fb:9c:36:3b:22:01:85:d0:9c:2c:ae:57:
         e4:52:95:d0:69:cf:70:dc:e6:e4:ee:c1:ec:46:54:bb:cc:3b:
         14:67:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:15 2026 by rpki-client