Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8caa3533-568e-3083-8e82-b5801a23a746.roa
File:                     8caa3533-568e-3083-8e82-b5801a23a746.roa (raw, json)
Hash identifier:          63tDANK12+fOe5H1cAhav99fMl+b+fpnCmr2mbocFl8=
Subject key identifier:   18:10:92:35:6B:F7:B4:97:B6:62:98:E7:CF:E9:72:48:10:AF:50:85
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF71798D41CFA74482A35DBA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8caa3533-568e-3083-8e82-b5801a23a746.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397220
IP address blocks:        156.154.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:98:d4:1c:fa:74:48:2a:35:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=d284af02-80f4-4ed9-bdde-d94e9a1d814c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:f5:fc:61:af:04:04:dd:44:70:e4:56:6f:
                    f7:68:36:e5:0b:f7:6e:f7:0f:f4:77:27:95:9e:f4:
                    b6:2e:40:d3:26:0f:c8:9b:cb:39:06:8e:1f:b3:7b:
                    d9:61:e8:78:17:26:f9:8a:44:99:ef:96:a7:1f:c1:
                    ba:d6:e1:5f:45:5a:04:3a:c4:e1:5c:2a:8f:65:ac:
                    3d:42:a2:7f:83:d7:62:11:27:fd:c3:33:7c:50:7e:
                    9d:58:9e:92:d9:25:96:7c:c4:02:0a:6d:47:09:47:
                    a9:b1:95:2a:23:9a:f8:4b:95:f9:0b:fa:93:7a:4d:
                    56:bd:3f:47:a8:3d:28:5d:d8:de:94:64:1a:72:10:
                    5d:eb:4e:b7:8a:7f:32:6c:e4:cc:63:41:ca:d3:44:
                    58:16:ec:11:54:49:22:02:c4:44:ee:d8:1d:df:1b:
                    b8:44:b6:17:df:42:24:15:56:1f:2c:9b:28:8e:7f:
                    b7:2d:73:4a:33:fc:0c:07:66:0c:02:87:fd:1a:93:
                    76:66:6c:b7:a3:cb:2b:2d:a3:ce:05:cb:b0:b9:89:
                    7f:59:a7:d4:ef:8d:93:dd:ce:5a:29:65:86:32:cc:
                    bb:13:dc:08:ac:63:43:52:2b:5d:65:7e:5b:99:92:
                    5a:49:77:b5:b7:c9:85:ee:89:fa:18:df:30:5f:1a:
                    34:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:92:35:6B:F7:B4:97:B6:62:98:E7:CF:E9:72:48:10:AF:50:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8caa3533-568e-3083-8e82-b5801a23a746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bd:09:2f:a9:7c:bd:f5:8a:e9:92:13:82:a1:c1:6e:4e:a8:
         51:6b:92:53:f1:0a:66:37:a8:34:dc:da:4a:9e:4d:4f:8e:a7:
         9b:bf:bc:48:2a:db:84:fc:4b:b5:a0:50:cd:37:09:f6:b8:63:
         ea:7f:ed:ba:53:0d:68:73:89:ec:bc:9e:e1:17:bb:e7:b6:28:
         7f:e6:bc:f0:21:fc:3a:57:f7:f9:7d:98:c4:f8:38:d3:37:01:
         31:c1:d1:e9:9d:9d:c4:d9:e8:12:29:7c:ae:21:5d:7f:16:7e:
         83:60:05:e8:31:3f:bd:f1:37:21:a1:48:e4:71:b8:65:4a:b7:
         75:40:95:bb:b9:6c:1a:57:00:81:7f:b0:a4:9d:af:e5:66:85:
         4a:76:cf:c1:a6:41:1f:4c:0a:de:d9:17:94:3b:56:da:94:9b:
         43:00:10:33:0b:ca:17:2d:02:be:f7:60:58:b0:19:da:ee:96:
         5f:90:3f:9c:c1:ed:a4:e9:55:f8:ab:c7:01:0b:62:17:47:64:
         b7:53:14:05:05:33:27:fe:f8:98:9d:ce:74:fe:83:7a:1e:3a:
         56:49:30:77:e9:d9:2e:c3:cb:5c:03:a1:34:43:ba:9f:57:1b:
         f4:28:3e:69:e7:32:a6:21:46:9b:3c:aa:f2:0e:12:49:7e:61:
         16:e4:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:55:55 2026 by rpki-client