Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19ea7cfa-cefa-3b7f-a79a-2734464accc6.roa
File:                     19ea7cfa-cefa-3b7f-a79a-2734464accc6.roa (raw, json)
Hash identifier:          wlHeUqAqWFzxi+sJnrlLONjquX7SIWGaYYoi1xV4Dr0=
Subject key identifier:   17:B0:4B:42:60:D8:2E:88:11:67:40:AF:15:62:01:AB:D7:D3:B1:76
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B0A1AC06844D32D19A3700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19ea7cfa-cefa-3b7f-a79a-2734464accc6.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397234
IP address blocks:        156.154.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:a1:ac:06:84:4d:32:d1:9a:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=b727286d-e5cb-4def-b643-f12a62a940ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:60:f4:1a:24:a4:6d:35:51:f0:4f:a4:f9:
                    7f:f2:59:f0:0f:1f:78:de:11:49:94:1e:c6:82:57:
                    b8:57:6f:2c:ee:0f:2b:d3:0b:d4:36:76:08:62:9e:
                    86:4a:77:b8:05:a8:08:c9:21:43:9d:67:8f:8b:7a:
                    58:3b:cf:56:c3:14:8b:98:1f:2b:1a:83:fb:7c:15:
                    c4:39:ca:08:66:8c:a4:23:e1:55:9a:e2:49:be:5d:
                    be:69:8c:33:7e:6c:27:80:e7:7e:36:d9:77:0c:c1:
                    fb:84:4e:0c:6e:26:b5:4c:3e:37:cb:79:10:75:d0:
                    76:35:db:81:e9:bd:84:0b:a1:e5:f4:7b:d0:94:91:
                    25:4a:b6:db:d4:9f:24:ab:b6:4b:29:37:92:fe:41:
                    c3:4a:46:45:f8:74:39:93:8d:0a:12:64:65:91:e7:
                    f0:a6:fa:23:23:49:bf:38:4f:71:46:76:06:37:5e:
                    8e:43:6c:ad:a2:d6:a0:73:84:95:d7:5b:27:58:88:
                    35:5d:6e:1e:4c:84:ba:fe:75:20:e7:e6:3d:b1:13:
                    dc:7d:e6:25:94:e0:34:d4:9b:b7:be:b3:fb:01:88:
                    e6:61:51:ff:f0:d7:7c:c3:78:f8:3a:9f:eb:0b:35:
                    d6:e2:b4:fa:fe:26:c9:9a:09:5a:15:16:70:10:c4:
                    1e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:4B:42:60:D8:2E:88:11:67:40:AF:15:62:01:AB:D7:D3:B1:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19ea7cfa-cefa-3b7f-a79a-2734464accc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:36:7b:f1:70:1b:59:8c:8c:b4:5e:6d:a8:10:25:de:f0:
         1e:c1:d3:57:f1:fe:0c:17:12:9e:fa:55:90:c1:b3:53:9e:7d:
         5c:9b:1b:d1:e3:c4:79:db:31:ad:1a:b1:f0:eb:10:74:51:7d:
         9d:05:bc:1f:78:3c:f3:3d:95:a1:fc:a9:4f:0e:96:e0:c7:ef:
         a4:9e:45:d9:58:f0:90:aa:f3:0e:34:21:e1:50:bd:a6:3b:ed:
         a7:9d:1b:19:5d:ce:82:e9:29:16:8e:99:d0:1a:cb:35:3f:66:
         a4:de:19:d8:4a:4b:2b:e6:96:75:6e:13:00:d1:b1:9c:7a:6b:
         2c:3a:0c:f7:e2:79:e6:51:d7:1f:87:a2:06:ba:44:91:2f:24:
         d2:47:ac:78:7f:fb:4e:41:71:e1:29:63:eb:97:09:70:96:59:
         98:ff:22:f8:c7:56:cf:3f:c1:4a:21:aa:21:40:f1:56:69:19:
         13:f6:4c:8a:21:08:ed:3f:a4:2e:36:b7:a2:e1:44:0e:8b:ed:
         68:90:2e:15:03:3d:d3:8f:5a:0b:a2:e5:6b:e1:0c:f2:7d:95:
         08:fd:53:d8:12:6f:7d:38:9d:e6:49:27:50:4d:d0:2a:47:ab:
         d2:f5:e3:39:3e:de:5e:a4:be:e1:a3:6c:9a:c7:c2:86:6f:33:
         49:67:f5:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psKGsBoRNMtGaNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
YjcyNzI4NmQtZTVjYi00ZGVmLWI2NDMtZjEyYTYyYTk0MGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGBg9BokpG01UfBPpPl/8lnwDx943hFJlB7G
gle4V28s7g8r0wvUNnYIYp6GSne4BagIySFDnWePi3pYO89WwxSLmB8rGoP7fBXE
OcoIZoykI+FVmuJJvl2+aYwzfmwngOd+Ntl3DMH7hE4Mbia1TD43y3kQddB2NduB
6b2EC6Hl9HvQlJElSrbb1J8kq7ZLKTeS/kHDSkZF+HQ5k40KEmRlkefwpvojI0m/
OE9xRnYGN16OQ2ytotagc4SV11snWIg1XW4eTIS6/nUg5+Y9sRPcfeYllOA01Ju3
vrP7AYjmYVH/8Nd8w3j4Op/rCzXW4rT6/ibJmglaFRZwEMQerQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBewS0Jg2C6IEWdArxViAavX07F2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTllYTdjZmEtY2VmYS0z
YjdmLWE3OWEtMjczNDQ2NGFjY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMrNnvxcBtZjIy0Xm2oECXe8B7B01fx/gwXEp76VZDBs1OefVybG9Hj
xHnbMa0asfDrEHRRfZ0FvB94PPM9laH8qU8OluDH76SeRdlY8JCq8w40IeFQvaY7
7aedGxldzoLpKRaOmdAayzU/ZqTeGdhKSyvmlnVuEwDRsZx6ayw6DPfieeZR1x+H
oga6RJEvJNJHrHh/+05BceEpY+uXCXCWWZj/IvjHVs8/wUohqiFA8VZpGRP2TIoh
CO0/pC42t6LhRA6L7WiQLhUDPdOPWgui5WvhDPJ9lQj9U9gSb304neZJJ1BN0CpH
q9L14zk+3l6kvuGjbJrHwoZvM0ln9Sw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:09:46 2026 by rpki-client