Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7aa8362e-ccff-375f-ae46-c3c7d4177e2c.roa
File:                     7aa8362e-ccff-375f-ae46-c3c7d4177e2c.roa (raw, json)
Hash identifier:          jkcF+RMg/5/LirHpPe182KCQ8s56VtgGDqumGBwbdI0=
Subject key identifier:   25:E1:1D:5C:3B:68:D7:B0:1E:2C:83:56:F0:3A:5B:04:51:BC:44:F9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FECD3984903F4692CAB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7aa8362e-ccff-375f-ae46-c3c7d4177e2c.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397224
IP address blocks:        156.154.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ec:d3:98:49:03:f4:69:2c:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=138ce22a-3cd4-4765-b053-3c459893a138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:8a:f7:e1:4b:6c:66:43:66:3b:35:17:34:
                    43:ed:04:9f:bf:3c:79:fe:22:71:f4:81:27:b0:e7:
                    16:1a:95:51:14:82:51:33:07:8e:25:ca:5a:bf:2f:
                    84:c5:86:b5:39:ea:d4:c1:9e:42:6e:d4:db:fc:70:
                    1b:a2:ef:fd:9b:35:b4:aa:66:ff:df:83:6c:cb:a6:
                    71:2e:4f:60:d0:f1:3c:16:90:0e:b6:93:d7:5f:66:
                    4f:9c:3d:86:9b:c0:40:ac:4a:cc:be:92:2f:78:3a:
                    ad:38:13:5a:52:9d:c3:9d:12:bc:1a:69:f3:ab:33:
                    8d:45:9c:8a:c9:a0:61:01:16:7a:2f:38:9f:ee:81:
                    5d:97:5d:0b:fa:0a:23:bd:f0:57:0f:6b:12:11:93:
                    7c:e2:94:65:23:1f:13:5b:0c:7a:2f:22:69:3f:6d:
                    eb:55:3d:58:eb:0f:95:bd:64:da:aa:17:7e:58:6e:
                    5f:e8:89:ee:a2:ec:7d:ba:e7:60:c9:9b:07:e2:73:
                    70:87:53:34:c5:42:7d:e2:71:77:f9:c8:e4:41:3d:
                    fc:84:83:b4:8c:7e:1b:59:7c:6f:09:30:7b:ab:d5:
                    d1:fe:b1:51:d2:b1:e2:25:15:9b:1e:01:44:f2:b4:
                    09:f0:67:9a:99:39:f5:6e:26:fa:76:8c:c4:7e:85:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E1:1D:5C:3B:68:D7:B0:1E:2C:83:56:F0:3A:5B:04:51:BC:44:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7aa8362e-ccff-375f-ae46-c3c7d4177e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ae:57:30:6a:d7:54:7d:aa:ea:81:05:ec:1b:d0:13:98:14:
         eb:a5:e4:37:99:a4:67:25:18:6c:22:db:6c:e8:6e:b0:7b:52:
         a2:14:30:0a:e9:37:c9:4c:78:09:34:7a:d4:1c:5c:7a:43:5e:
         a2:5b:9b:56:40:ba:a9:71:9e:f5:e9:ae:26:9a:0c:bc:88:78:
         3c:2a:7a:59:fb:f1:37:25:d0:79:ff:f3:e5:1a:c4:57:fb:11:
         e3:52:b9:36:7f:34:fc:a5:85:af:24:f7:c4:2e:5c:40:25:9a:
         d8:1f:dc:7f:ba:ee:ed:ba:55:45:07:d0:be:c0:58:f8:5c:10:
         dd:7e:c3:ff:50:05:a4:e9:41:5b:d7:0c:b7:dc:b4:53:5b:1b:
         fd:2f:27:38:d5:f1:59:40:bf:dc:21:c9:16:40:57:fe:d8:d9:
         fb:cd:11:fb:b2:9c:48:14:48:09:11:34:81:39:e4:cc:1c:db:
         42:e9:cc:f7:47:b9:4e:03:e8:99:a2:97:1c:29:fc:28:db:34:
         7e:65:7a:08:9f:ed:b2:e7:99:9a:34:10:64:fb:8f:33:f9:55:
         5a:e4:e9:d8:69:7b:65:d3:40:7f:5b:ac:1b:46:70:99:77:63:
         8e:10:41:93:3b:ce:b8:d1:fc:a5:29:4e:e3:45:5d:14:dc:d6:
         01:9b:6c:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+zTmEkD9GksqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MTM4Y2UyMmEtM2NkNC00NzY1LWIwNTMtM2M0NTk4OTNhMTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow+K9+FLbGZDZjs1FzRD7QSfvzx5/iJx9IEn
sOcWGpVRFIJRMweOJcpavy+ExYa1OerUwZ5CbtTb/HAbou/9mzW0qmb/34Nsy6Zx
Lk9g0PE8FpAOtpPXX2ZPnD2Gm8BArErMvpIveDqtOBNaUp3DnRK8GmnzqzONRZyK
yaBhARZ6Lzif7oFdl10L+gojvfBXD2sSEZN84pRlIx8TWwx6LyJpP23rVT1Y6w+V
vWTaqhd+WG5f6Inuoux9uudgyZsH4nNwh1M0xUJ94nF3+cjkQT38hIO0jH4bWXxv
CTB7q9XR/rFR0rHiJRWbHgFE8rQJ8GeamTn1bib6dozEfoWL4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXhHVw7aNewHiyDVvA6WwRRvET5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2FhODM2MmUtY2NmZi0z
NzVmLWFlNDYtYzNjN2Q0MTc3ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmuVzBq11R9quqBBewb0BOYFOul5DeZpGclGGwi22zobrB7UqIUMArp
N8lMeAk0etQcXHpDXqJbm1ZAuqlxnvXpriaaDLyIeDwqeln78Tcl0Hn/8+UaxFf7
EeNSuTZ/NPylha8k98QuXEAlmtgf3H+67u26VUUH0L7AWPhcEN1+w/9QBaTpQVvX
DLfctFNbG/0vJzjV8VlAv9whyRZAV/7Y2fvNEfuynEgUSAkRNIE55Mwc20LpzPdH
uU4D6Jmilxwp/CjbNH5legif7bLnmZo0EGT7jzP5VVrk6dhpe2XTQH9brBtGcJl3
Y44QQZM7zrjR/KUpTuNFXRTc1gGbbFk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:55 2026 by rpki-client