Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5bae5c45-96a0-3711-94e6-011b01ce8685.roa
File:                     5bae5c45-96a0-3711-94e6-011b01ce8685.roa (raw, json)
Hash identifier:          rz/5Qo+tG/Dt1L1yOXQZgkrBL2nvDiHugNNglmsrZ/Y=
Subject key identifier:   B3:4E:9F:71:4E:4C:14:A7:CB:A6:27:0C:D7:AF:D1:7F:B0:CE:46:D1
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584F119D0919CC700CDD2995CA90
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5bae5c45-96a0-3711-94e6-011b01ce8685.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        206.180.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:09:19:cc:70:0c:dd:29:95:ca:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5dc1a495-7660-4be4-a287-ea0abe6dcec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:e2:7a:24:dc:c7:81:ec:6a:b3:44:04:98:
                    62:f0:6f:4b:0e:18:ae:c3:36:40:c2:30:8b:e0:d2:
                    3d:2f:5e:b0:33:34:37:b2:82:e1:81:52:ec:0f:b5:
                    d9:6b:67:d7:f8:c0:7c:7f:81:b8:1b:44:4f:e0:e2:
                    c1:3e:0e:73:94:a2:0d:cb:8b:1b:9f:07:3c:36:17:
                    a5:a2:df:bf:a1:98:aa:dd:e3:5e:16:8e:74:25:99:
                    d6:e6:51:d5:2d:38:0f:56:e3:e5:30:be:c3:a1:83:
                    4a:92:dd:bb:81:35:72:8c:84:d7:c2:0c:25:92:4a:
                    de:a1:06:14:8d:a3:26:bd:72:ed:8a:83:b8:b7:22:
                    57:0d:5e:65:9b:20:86:b3:9c:a5:49:41:ec:ce:50:
                    19:86:c5:54:6d:d6:33:28:e6:c3:00:98:49:0f:6f:
                    ac:dd:44:f9:fa:af:64:26:6e:2d:2f:40:33:3e:e5:
                    9b:63:eb:0f:18:04:10:1f:a1:06:58:03:56:7f:24:
                    85:c8:84:15:61:8a:69:d4:98:a5:b8:98:b2:d8:b4:
                    2c:85:c0:83:38:bc:69:fe:6a:17:41:e3:4f:e3:2b:
                    b8:4e:55:13:e0:ac:ff:c1:27:eb:5a:c3:e5:93:c3:
                    86:3f:6d:f3:9b:80:93:5d:2a:66:ce:98:40:8f:38:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4E:9F:71:4E:4C:14:A7:CB:A6:27:0C:D7:AF:D1:7F:B0:CE:46:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/5bae5c45-96a0-3711-94e6-011b01ce8685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f7:9f:8d:55:7c:1f:41:74:86:28:2e:0f:92:b2:70:bd:ca:
         ee:40:86:94:cf:18:7f:77:97:a5:3f:83:4a:95:07:2d:da:c2:
         32:b3:77:50:c5:88:33:5e:f0:81:d1:23:f9:fb:ae:45:3e:f6:
         4f:3e:f5:a8:ce:78:f8:34:1e:09:21:91:0f:e1:2b:8e:02:a9:
         bb:b8:5d:7e:2b:a4:22:3c:d2:74:6b:07:1e:22:83:46:17:33:
         e4:bf:ee:25:3e:74:c2:ff:d7:74:05:7b:7f:bc:55:54:2b:5f:
         3f:dc:b0:fe:e8:1a:42:cb:f9:f8:33:20:8f:71:d7:88:32:11:
         69:b3:b9:32:80:3a:94:6d:33:99:69:a9:94:e2:79:48:2e:79:
         ab:7d:66:df:73:7a:3e:d8:08:dc:2c:d8:c1:28:a6:b8:f1:d9:
         6f:28:55:4a:7b:88:b3:0a:c7:72:f7:e1:91:99:59:19:3b:fe:
         91:6b:ef:46:8c:7b:1e:98:26:00:5e:ad:c4:d7:47:81:ff:9a:
         74:4f:f1:f2:f6:19:be:82:bf:dd:1c:d7:86:d0:7a:9b:35:f2:
         73:36:18:19:29:55:e9:5d:87:15:e2:bc:4e:f3:ee:0e:f3:a7:
         e0:f3:30:e4:b3:81:cd:03:f4:3b:44:68:cd:8d:83:89:dd:93:
         2b:64:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:35:52 2026 by rpki-client