Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa
File:                     00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa (raw, json)
Hash identifier:          2jjB57M13u9DbbGjQ8APFtB4sXyP/8stmScvEq7Dxa0=
Subject key identifier:   6A:A9:C5:11:9E:3E:BF:4D:F4:0A:05:D5:60:84:9D:3A:58:1E:74:D3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF7178D8072BF4F3CD0CA5B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397237
IP address blocks:        156.154.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:8d:80:72:bf:4f:3c:d0:ca:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=2af13d0b-0079-4175-939d-331cf40d7f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:b4:5a:6b:11:bc:f1:3d:75:da:5c:25:da:
                    13:cc:ea:1a:fc:73:ac:f4:8b:0b:92:55:ad:6b:cc:
                    2f:f0:9a:02:92:fe:fc:f7:68:ff:c8:24:b1:20:79:
                    b6:4b:67:59:c6:83:f5:1a:0b:21:75:f0:64:b3:ef:
                    b3:36:60:59:06:ea:44:e0:35:8d:e0:d4:1b:3a:20:
                    d3:e2:d9:70:69:50:68:55:79:d0:b9:18:58:f0:d2:
                    11:79:d5:8e:e2:b2:4e:0b:e1:94:84:78:92:03:89:
                    de:c2:e4:db:bd:30:ae:7f:70:35:ad:ae:af:6c:c6:
                    32:d3:66:2e:fb:2a:1e:a6:a1:d9:9e:60:c8:09:c2:
                    89:44:78:d0:1c:e1:4c:02:3e:bd:de:73:7e:75:5f:
                    0b:c5:9f:20:1d:1f:2e:4d:c9:b3:2a:c7:81:cb:b3:
                    2a:9f:0e:e8:75:29:4c:59:bd:e7:b6:64:4c:af:1f:
                    ee:13:55:9f:b9:7c:ae:f1:78:dd:8f:7d:8d:00:58:
                    d3:1f:fe:6a:1f:a6:e2:ae:30:82:b6:9d:8e:4e:6f:
                    8e:43:83:04:1a:24:fc:2f:d9:ab:78:23:28:b7:80:
                    28:e2:46:8f:a6:63:b8:33:6b:39:1b:63:2e:51:ca:
                    24:36:e7:83:df:c8:1e:0e:2a:8b:e9:75:51:6a:c0:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:C5:11:9E:3E:BF:4D:F4:0A:05:D5:60:84:9D:3A:58:1E:74:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:37:1d:64:7d:11:6a:f7:75:ba:88:a7:98:85:06:55:69:88:
         12:aa:8c:67:35:58:24:4e:25:4c:f1:8d:b2:b3:96:91:c3:88:
         e9:a4:b7:17:d7:a4:c4:58:c3:0b:71:85:30:bc:70:25:04:00:
         22:10:47:a4:62:7c:93:d3:10:5f:0b:c0:af:03:45:33:73:4f:
         55:26:de:51:cf:57:21:94:f1:20:9b:b3:db:7e:36:10:03:5a:
         90:c4:48:a7:1d:0f:7b:26:a7:68:ce:19:4f:36:20:c9:71:20:
         84:2f:68:f3:11:99:7b:26:f4:c9:7e:44:2b:1c:b3:11:4d:d3:
         23:7d:7d:62:c4:01:39:43:87:f4:67:2f:f0:fb:76:ef:a0:d1:
         d9:77:85:1a:8e:7f:1a:ab:a6:90:8a:30:d3:b1:93:16:7b:fe:
         83:5b:cd:ee:86:7c:97:ac:fc:2d:b1:65:20:2f:cb:89:79:5c:
         ee:21:27:b9:8f:41:63:be:a6:c1:db:6e:cf:6b:31:26:1e:51:
         f4:80:4e:d6:a3:30:d3:c9:02:1f:af:dd:29:d5:6c:bb:b8:29:
         b0:7e:77:df:f8:22:a6:67:35:1e:8d:a2:d6:19:95:23:b7:88:
         b7:70:89:67:8f:46:db:fb:0a:2e:14:93:47:ca:ab:86:56:86:
         ff:7a:0d:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F42Acr9PPNDKW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
MmFmMTNkMGItMDA3OS00MTc1LTkzOWQtMzMxY2Y0MGQ3ZjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwm0WmsRvPE9ddpcJdoTzOoa/HOs9IsLklWt
a8wv8JoCkv7892j/yCSxIHm2S2dZxoP1GgshdfBks++zNmBZBupE4DWN4NQbOiDT
4tlwaVBoVXnQuRhY8NIRedWO4rJOC+GUhHiSA4newuTbvTCuf3A1ra6vbMYy02Yu
+yoepqHZnmDICcKJRHjQHOFMAj693nN+dV8LxZ8gHR8uTcmzKseBy7Mqnw7odSlM
Wb3ntmRMrx/uE1WfuXyu8Xjdj32NAFjTH/5qH6birjCCtp2OTm+OQ4MEGiT8L9mr
eCMot4Ao4kaPpmO4M2s5G2MuUcokNueD38geDiqL6XVRasDAfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGqpxRGePr9N9AoF1WCEnTpYHnTTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDBmN2QyZDUtMDFlYi0z
MDRlLWIwYTAtZTU3MGI5NDhhMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQ3HWR9EWr3dbqIp5iFBlVpiBKqjGc1WCROJUzxjbKzlpHDiOmktxfX
pMRYwwtxhTC8cCUEACIQR6RifJPTEF8LwK8DRTNzT1Um3lHPVyGU8SCbs9t+NhAD
WpDESKcdD3smp2jOGU82IMlxIIQvaPMRmXsm9Ml+RCscsxFN0yN9fWLEATlDh/Rn
L/D7du+g0dl3hRqOfxqrppCKMNOxkxZ7/oNbze6GfJes/C2xZSAvy4l5XO4hJ7mP
QWO+psHbbs9rMSYeUfSATtajMNPJAh+v3SnVbLu4KbB+d9/4IqZnNR6NotYZlSO3
iLdwiWePRtv7Ci4Uk0fKq4ZWhv96DXs=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:34:13 2026 by rpki-client