Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa
File:                     23644723-5bc3-300f-bf32-56fdc1bfe903.roa (raw, json)
Hash identifier:          gJXq6x0BPYlKg7TAuhmIA9booLrD3ft1j5sLMXWEps0=
Subject key identifier:   05:D8:7D:57:4B:1F:E2:50:CF:8D:26:52:3F:A0:04:3B:BF:38:DB:A2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497EAA7791BC62AD1F4A3980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397226
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:aa:77:91:bc:62:ad:1f:4a:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8d473120-9463-494b-8045-21fc1943d976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:d6:be:9a:fb:87:45:ed:10:2c:69:e1:d1:
                    ec:00:6e:63:ce:7e:2e:41:bf:9d:1a:c7:d5:e5:6a:
                    68:7d:96:2f:6b:c9:34:2e:c0:bc:b2:76:06:7b:3c:
                    5e:66:5b:23:e7:49:52:fb:a1:95:da:3c:07:a7:e3:
                    74:35:d8:51:7a:2f:92:82:1a:a9:27:ee:2e:59:04:
                    dc:f3:d4:0f:27:72:e4:62:71:31:da:25:52:06:24:
                    f5:69:8d:4b:96:00:7c:86:4a:db:41:f1:fb:24:2c:
                    63:73:16:ae:00:5b:97:9f:7e:cc:1e:3b:a7:d2:ae:
                    00:f6:94:9d:78:a3:fe:a3:27:12:4d:67:80:02:89:
                    dd:d0:ee:24:c8:3f:50:b1:44:6b:75:a4:70:fd:26:
                    97:da:d1:f0:24:de:69:b6:fd:81:84:e2:5b:8b:d6:
                    09:26:9e:61:02:17:17:80:a3:0e:6c:06:2e:d0:98:
                    8f:4b:46:ac:8d:70:a9:ff:5e:26:bd:73:b4:76:06:
                    37:0c:88:1c:b2:4a:d2:c4:bd:ce:2d:85:0c:1a:ee:
                    dd:25:5b:f9:fb:f1:4a:09:20:df:87:d1:ec:41:bb:
                    63:8e:19:39:87:6b:b6:22:89:84:ff:62:79:8b:26:
                    d5:83:9c:87:b1:29:1b:58:16:7e:d4:cd:8f:67:bc:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D8:7D:57:4B:1F:E2:50:CF:8D:26:52:3F:A0:04:3B:BF:38:DB:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23644723-5bc3-300f-bf32-56fdc1bfe903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:81:89:be:cf:65:5c:1f:89:33:f4:ac:f3:af:d3:2e:82:
         a5:32:48:0a:7f:f4:67:69:ac:2d:e3:c5:7d:65:98:11:c0:96:
         b6:bb:07:34:10:c3:d2:b5:64:4a:c7:a9:05:91:2f:e4:97:70:
         5a:3b:10:57:85:3a:94:6e:6b:d2:f4:f6:e2:75:08:94:48:3f:
         47:d0:85:39:f5:51:18:eb:ac:15:58:ed:cf:4d:ae:44:e6:fb:
         4d:1b:bf:11:ef:57:b0:87:cd:10:8e:0b:14:34:d7:f6:b5:74:
         ed:27:99:c9:41:85:c7:e6:e3:19:7e:35:22:ca:b4:72:0d:9b:
         6a:ea:22:97:bc:1b:af:69:8e:f4:3a:19:ee:fb:40:29:0f:bc:
         93:9b:32:f0:40:39:a2:30:2c:8a:ba:13:91:80:ec:29:85:85:
         78:bd:ee:49:7d:2d:48:40:6f:94:b2:fa:ad:35:3a:68:6c:52:
         bb:2a:f0:7c:bb:36:a2:4b:73:be:3a:6d:b3:1c:ce:1e:c8:40:
         b6:7d:56:27:ea:6e:40:29:83:41:79:17:05:a4:38:fe:10:af:
         92:9a:2b:f6:40:eb:da:75:4e:62:c8:1e:1d:de:61:2a:24:da:
         df:35:3e:7f:b2:6d:7d:b7:60:65:1a:6c:3d:ea:e4:7d:87:5a:
         57:90:1c:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfqp3kbxirR9KOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OGQ0NzMxMjAtOTQ2My00OTRiLTgwNDUtMjFmYzE5NDNkOTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF7Wvpr7h0XtECxp4dHsAG5jzn4uQb+dGsfV
5WpofZYva8k0LsC8snYGezxeZlsj50lS+6GV2jwHp+N0NdhRei+SghqpJ+4uWQTc
89QPJ3LkYnEx2iVSBiT1aY1LlgB8hkrbQfH7JCxjcxauAFuXn37MHjun0q4A9pSd
eKP+oycSTWeAAond0O4kyD9QsURrdaRw/SaX2tHwJN5ptv2BhOJbi9YJJp5hAhcX
gKMObAYu0JiPS0asjXCp/14mvXO0dgY3DIgcskrSxL3OLYUMGu7dJVv5+/FKCSDf
h9HsQbtjjhk5h2u2IomE/2J5iybVg5yHsSkbWBZ+1M2PZ7x0NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXYfVdLH+JQz40mUj+gBDu/ONuiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjM2NDQ3MjMtNWJjMy0z
MDBmLWJmMzItNTZmZGMxYmZlOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXBgYm+z2VcH4kz9Kzzr9MugqUySAp/9GdprC3jxX1lmBHAlra7BzQQ
w9K1ZErHqQWRL+SXcFo7EFeFOpRua9L09uJ1CJRIP0fQhTn1URjrrBVY7c9NrkTm
+00bvxHvV7CHzRCOCxQ01/a1dO0nmclBhcfm4xl+NSLKtHINm2rqIpe8G69pjvQ6
Ge77QCkPvJObMvBAOaIwLIq6E5GA7CmFhXi97kl9LUhAb5Sy+q01OmhsUrsq8Hy7
NqJLc746bbMczh7IQLZ9VifqbkApg0F5FwWkOP4Qr5KaK/ZA69p1TmLIHh3eYSok
2t81Pn+ybX23YGUabD3q5H2HWleQHNE=
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:13:22 2026 by rpki-client