Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86357b37-b680-35a6-85c7-256f387fc996.roa
File:                     86357b37-b680-35a6-85c7-256f387fc996.roa (raw, json)
Hash identifier:          h/qVGd+Fx6ECL5bOVUhOkbM69Ib9r/zoIVuDKkusnYM=
Subject key identifier:   62:95:9A:CE:85:EE:E2:02:84:11:46:26:72:A8:8C:01:5E:E7:29:7F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B0A28FB12636B53E76E980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86357b37-b680-35a6-85c7-256f387fc996.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397220
IP address blocks:        156.154.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:a2:8f:b1:26:36:b5:3e:76:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=d77572ba-51bc-4141-962a-11f47dbde882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c9:54:64:98:85:ad:6c:22:ec:f1:8a:63:80:
                    38:d3:97:03:72:00:ba:73:0d:82:97:24:88:a7:97:
                    28:e4:52:67:a2:fb:2e:ad:be:dc:18:fc:c5:f7:1f:
                    d4:67:0c:ad:6e:e1:8a:b9:55:50:03:ab:74:24:e0:
                    fc:54:d4:98:00:85:58:83:93:ac:51:1b:2a:79:30:
                    f8:94:47:9c:c1:f8:16:69:7e:f3:d6:33:18:9c:ea:
                    ca:93:7e:fb:0b:d0:07:31:af:51:a2:f8:5b:09:fa:
                    1a:ac:3a:d7:c0:8f:3c:bc:00:1b:25:ea:d6:50:73:
                    9e:17:6a:d6:f7:09:dc:ed:96:e1:da:2f:5c:9a:1a:
                    05:e7:86:f3:fd:a8:f2:05:2c:aa:fe:22:92:30:c3:
                    0d:96:18:c7:82:d3:9c:35:5e:23:83:ae:29:9f:cd:
                    a4:4e:46:04:2f:4b:c0:91:a6:61:b2:e3:a9:6a:e5:
                    57:38:a2:d5:10:aa:d0:7e:f5:59:79:12:7e:f4:aa:
                    72:fc:3d:09:14:f9:a4:79:5e:76:b7:a7:b0:cd:f5:
                    90:63:c7:b5:b8:50:3b:74:db:8e:5b:fa:8f:fa:df:
                    5c:39:d7:18:76:e2:af:b4:33:a3:f9:6f:4e:0e:9c:
                    d9:95:86:6c:f1:98:95:3f:bb:73:99:86:45:13:ed:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:95:9A:CE:85:EE:E2:02:84:11:46:26:72:A8:8C:01:5E:E7:29:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/86357b37-b680-35a6-85c7-256f387fc996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:7d:44:28:1f:90:e6:9e:b3:57:8b:1f:8b:a0:b0:df:8c:
         bb:1a:27:59:e6:45:0f:32:58:6b:91:c3:90:4d:92:da:09:eb:
         b9:a1:f1:bd:75:dc:38:99:80:14:c2:dc:ef:21:97:3a:38:34:
         9c:92:b8:22:f4:f4:aa:a2:7f:eb:d5:1a:71:b9:ab:41:63:08:
         03:f9:87:a7:07:32:7c:68:75:f4:77:d9:a7:1a:d0:60:6d:ec:
         c4:c3:75:74:fe:3d:d4:94:e7:42:d0:49:14:5b:63:d0:78:4a:
         0d:d4:8b:38:2f:21:84:62:8c:1d:3c:a5:b1:f4:88:74:db:75:
         ca:ae:8b:40:0a:3a:6e:eb:d5:35:dd:91:10:85:28:09:d6:e5:
         ae:5b:b0:50:c8:a8:5a:7d:0f:1c:78:87:8f:fb:00:5e:6d:2e:
         26:1d:a4:54:3a:4a:7c:59:29:52:f0:e3:84:47:bf:33:03:b1:
         ec:03:de:0d:8e:6e:42:62:5c:fd:4b:ea:f5:28:03:4c:3e:3d:
         fd:e4:eb:bf:5e:e4:b1:43:cd:40:b1:e9:6e:ea:17:74:9d:55:
         3b:60:05:6a:f1:01:7d:83:f9:81:a6:fe:ed:a8:71:b8:e4:f9:
         be:39:4f:c3:65:3f:2f:f5:24:11:5e:68:bd:28:7c:0e:14:fb:
         57:dc:75:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psKKPsSY2tT526YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
ZDc3NTcyYmEtNTFiYy00MTQxLTk2MmEtMTFmNDdkYmRlODgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMlUZJiFrWwi7PGKY4A405cDcgC6cw2ClySI
p5co5FJnovsurb7cGPzF9x/UZwytbuGKuVVQA6t0JOD8VNSYAIVYg5OsURsqeTD4
lEecwfgWaX7z1jMYnOrKk377C9AHMa9RovhbCfoarDrXwI88vAAbJerWUHOeF2rW
9wnc7Zbh2i9cmhoF54bz/ajyBSyq/iKSMMMNlhjHgtOcNV4jg64pn82kTkYEL0vA
kaZhsuOpauVXOKLVEKrQfvVZeRJ+9Kpy/D0JFPmkeV52t6ewzfWQY8e1uFA7dNuO
W/qP+t9cOdcYduKvtDOj+W9ODpzZlYZs8ZiVP7tzmYZFE+18SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKVms6F7uIChBFGJnKojAFe5yl/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODYzNTdiMzctYjY4MC0z
NWE2LTg1YzctMjU2ZjM4N2ZjOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7FfUQoH5DmnrNXix+LoLDfjLsaJ1nmRQ8yWGuRw5BNktoJ67mh8b11
3DiZgBTC3O8hlzo4NJySuCL09Kqif+vVGnG5q0FjCAP5h6cHMnxodfR32aca0GBt
7MTDdXT+PdSU50LQSRRbY9B4Sg3UizgvIYRijB08pbH0iHTbdcqui0AKOm7r1TXd
kRCFKAnW5a5bsFDIqFp9Dxx4h4/7AF5tLiYdpFQ6SnxZKVLw44RHvzMDsewD3g2O
bkJiXP1L6vUoA0w+Pf3k679e5LFDzUCx6W7qF3SdVTtgBWrxAX2D+YGm/u2ocbjk
+b45T8NlPy/1JBFeaL0ofA4U+1fcdeM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:13 2026 by rpki-client