Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa
File:                     2bd20e07-9af0-35ca-a017-e2516bba252a.roa (raw, json)
Hash identifier:          mPO6GPSkkA6citdOt7ugBTIeTtH+j+JBfi47HiY9EZI=
Subject key identifier:   96:A4:AD:19:C1:97:C7:40:D2:0C:8C:60:7A:14:68:04:22:44:2B:C1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA79941CEFF0ECDD47A282F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397230
IP address blocks:        156.154.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:41:ce:ff:0e:cd:d4:7a:28:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9fe7822b-6e0d-4c55-b89f-ac853e7a201c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:51:cb:3f:29:53:2b:eb:93:3f:ad:b3:33:
                    88:c1:81:c0:be:96:04:e0:d2:d7:9c:b6:c4:bc:09:
                    53:5b:c7:9e:e8:be:91:99:43:45:74:90:ed:9c:94:
                    d8:ba:ba:c5:0d:0e:4a:6c:03:77:bf:1e:69:77:54:
                    61:67:6b:6d:5b:cb:c3:40:b0:0c:45:ca:e3:8d:92:
                    f0:d0:7a:3a:cd:5a:d4:46:b4:d1:2a:ac:fa:bb:a1:
                    5d:d3:08:a0:00:db:03:72:e7:2c:02:07:8c:3f:2a:
                    5f:b4:71:ae:95:6b:63:5a:15:40:cd:e2:c6:56:e3:
                    26:20:81:34:a7:03:8a:32:ba:99:b7:cf:64:1f:a8:
                    32:a7:67:ca:ec:96:00:70:6f:8c:99:a7:85:a8:f3:
                    75:89:a4:b2:ee:59:66:b3:86:7b:37:cc:14:93:f1:
                    db:00:29:3c:c3:ad:51:91:56:62:f1:e1:42:29:f1:
                    c0:49:d5:80:b8:64:d9:91:a4:2e:dc:11:a8:05:2e:
                    e5:37:26:7a:5c:fc:74:e2:b1:19:59:ee:b2:08:dc:
                    a2:01:17:6a:fa:46:f7:2a:16:74:8e:4f:fd:d8:a1:
                    a5:ab:3d:9c:f4:bd:4c:34:33:c2:12:4d:9e:1f:38:
                    b8:e7:ed:57:e5:fd:4f:4e:d6:5b:03:3e:65:d3:f3:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A4:AD:19:C1:97:C7:40:D2:0C:8C:60:7A:14:68:04:22:44:2B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:04:e6:cc:d5:03:82:1b:35:19:07:2c:9b:96:43:21:9b:b3:
         9e:86:24:51:b3:5d:17:0c:f0:06:90:f6:2a:d9:a4:2b:82:58:
         a5:f3:ab:d1:b5:b0:8f:e8:5c:3a:ba:d4:a3:af:ff:b9:75:5d:
         bc:48:9d:19:1c:25:6a:bd:b5:f1:17:75:db:f7:6d:91:81:21:
         fe:56:3e:39:bc:0e:b3:85:f6:c7:78:c2:94:47:22:f6:e7:06:
         f1:b8:e4:16:fc:8f:99:f9:41:fc:6a:c7:9a:c5:66:d5:16:4f:
         73:0e:db:20:79:8d:d4:ac:6c:bb:a1:09:32:4d:05:c4:ae:87:
         05:c3:b9:b4:3f:57:c1:fe:c6:0b:bd:80:42:0d:47:47:61:1a:
         66:35:14:98:3b:29:f7:4c:f3:d1:58:dd:7d:0b:3f:2e:5e:9d:
         dc:65:00:b6:f0:b9:12:f5:a9:90:21:4d:9c:17:27:4f:f9:34:
         1c:68:7d:da:7e:86:d6:af:8c:e6:e2:90:5a:77:61:09:f1:12:
         8e:32:4f:e3:db:84:4f:49:42:c6:75:d4:f1:3b:ac:7e:73:aa:
         7b:7d:d3:9c:d1:1a:65:f5:cc:17:60:37:0a:a0:1c:52:22:f3:
         ff:28:95:33:53:65:4d:d1:63:a3:47:20:ae:1c:8a:66:46:61:
         a5:22:d0:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmUHO/w7N1HooLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWZlNzgyMmItNmUwZC00YzU1LWI4OWYtYWM4NTNlN2EyMDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra5Ryz8pUyvrkz+tszOIwYHAvpYE4NLXnLbE
vAlTW8ee6L6RmUNFdJDtnJTYurrFDQ5KbAN3vx5pd1RhZ2ttW8vDQLAMRcrjjZLw
0Ho6zVrURrTRKqz6u6Fd0wigANsDcucsAgeMPypftHGulWtjWhVAzeLGVuMmIIE0
pwOKMrqZt89kH6gyp2fK7JYAcG+MmaeFqPN1iaSy7llms4Z7N8wUk/HbACk8w61R
kVZi8eFCKfHASdWAuGTZkaQu3BGoBS7lNyZ6XPx04rEZWe6yCNyiARdq+kb3KhZ0
jk/92KGlqz2c9L1MNDPCEk2eHzi45+1X5f1PTtZbAz5l0/OCdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJakrRnBl8dA0gyMYHoUaAQiRCvBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmJkMjBlMDctOWFmMC0z
NWNhLWEwMTctZTI1MTZiYmEyNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIE5szVA4IbNRkHLJuWQyGbs56GJFGzXRcM8AaQ9irZpCuCWKXzq9G1
sI/oXDq61KOv/7l1XbxInRkcJWq9tfEXddv3bZGBIf5WPjm8DrOF9sd4wpRHIvbn
BvG45Bb8j5n5Qfxqx5rFZtUWT3MO2yB5jdSsbLuhCTJNBcSuhwXDubQ/V8H+xgu9
gEINR0dhGmY1FJg7KfdM89FY3X0LPy5endxlALbwuRL1qZAhTZwXJ0/5NBxofdp+
htavjObikFp3YQnxEo4yT+PbhE9JQsZ11PE7rH5zqnt905zRGmX1zBdgNwqgHFIi
8/8olTNTZU3RY6NHIK4cimZGYaUi0Dg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:53 2026 by rpki-client