Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a23ff0a-aad1-3d5d-b943-9455d21dc33f.roa
File:                     2a23ff0a-aad1-3d5d-b943-9455d21dc33f.roa (raw, json)
Hash identifier:          ucsukiBwb7132QWgalIqmkm4zRRAAqSuVkZsIsdPrvM=
Subject key identifier:   B5:B0:DF:BA:6A:41:18:F8:E6:0B:5A:3E:7E:74:2A:1F:9B:03:29:53
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA792A0ED248D16B3FAF44980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a23ff0a-aad1-3d5d-b943-9455d21dc33f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397235
IP address blocks:        156.154.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:a0:ed:24:8d:16:b3:fa:f4:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef00223a-bde0-42c2-b88d-839ff9cc2712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:0e:64:12:46:cb:79:ae:d4:35:38:c5:29:
                    bb:66:6f:58:67:53:1f:6a:32:3c:7d:20:2c:ee:78:
                    3d:28:55:3a:ff:e7:e4:2b:39:30:77:1e:95:f7:f9:
                    9d:d1:8c:b2:32:c6:b1:7b:13:f0:23:a0:fd:44:b7:
                    aa:5b:d4:28:d6:b4:a7:8b:19:c8:cd:a6:b8:23:ef:
                    9f:15:dd:73:a8:b8:21:97:36:1b:fc:07:b8:44:a7:
                    c4:42:00:62:1b:e1:44:da:0a:fb:00:8b:91:90:6f:
                    eb:c5:14:1a:c5:91:dc:b9:c9:3f:d4:ec:9f:e5:62:
                    1b:02:39:2c:66:86:5d:34:65:b3:25:eb:b4:04:bf:
                    41:84:50:14:97:c5:a1:2a:db:bc:29:e2:e1:fb:aa:
                    7e:99:d1:29:16:13:a8:47:3b:cb:0e:14:2e:b0:fe:
                    14:d1:5e:d7:9e:47:c6:6e:b7:97:10:a6:19:9d:ae:
                    6b:68:57:86:95:32:55:6b:ca:ec:69:cd:b9:17:0e:
                    ce:3f:0d:a0:c8:be:5e:cd:85:76:4b:ef:1e:7e:9a:
                    2e:28:9f:14:7d:58:e2:87:5b:cf:67:de:b2:2a:c9:
                    44:f2:73:7b:52:4b:b3:5f:88:a5:80:df:9c:0f:e4:
                    a7:71:17:bc:95:84:d6:4b:0e:01:63:2d:05:79:11:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B0:DF:BA:6A:41:18:F8:E6:0B:5A:3E:7E:74:2A:1F:9B:03:29:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a23ff0a-aad1-3d5d-b943-9455d21dc33f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:77:ba:5d:9d:87:49:cd:b7:30:f2:a0:24:2f:27:67:e4:e4:
         25:34:db:e3:c0:3c:e7:97:e8:b5:99:b4:41:9f:80:74:13:42:
         fd:72:d4:2b:95:2a:63:8a:71:99:18:64:ba:7e:68:1a:24:bf:
         58:61:3b:b2:c7:ad:45:31:f5:e7:01:9c:73:b9:4d:7d:aa:44:
         a4:56:fc:2c:87:ce:74:75:1c:1f:90:dd:9e:7e:f9:4f:67:67:
         66:92:a9:ef:4c:45:49:cc:e6:08:a9:84:5e:10:e7:a1:fa:56:
         21:40:ba:84:47:41:9c:b9:db:0a:e6:1f:50:08:a9:c5:51:b2:
         97:1a:1a:24:6a:cd:59:e4:26:72:6b:6d:ac:5e:e3:66:79:22:
         52:f8:22:7e:7c:c9:a4:a6:01:2e:2f:09:87:05:16:b6:b8:8c:
         36:ba:bd:27:02:f4:fc:61:03:3c:c6:4e:95:f0:f4:41:f4:58:
         59:f6:0b:01:4d:dc:01:27:1e:b1:cc:34:67:09:c1:89:0e:bf:
         13:7a:12:4d:f1:27:30:38:03:ed:c0:14:48:17:71:d9:b5:0f:
         0c:be:75:90:3e:80:e4:e9:3d:5f:6b:b7:80:b3:2d:9a:0d:e0:
         ce:b7:0f:bb:0c:04:5c:32:70:16:77:09:54:4f:6e:01:fe:4b:
         5d:f7:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:48:25 2026 by rpki-client