Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa
File:                     b436817c-4532-3893-8e9f-0d0d939fc77d.roa (raw, json)
Hash identifier:          cLUXKwRQOE5OXCEoBHxUNFdgryqpJerdwFzzcZDE+NI=
Subject key identifier:   66:89:06:3D:16:70:50:63:9D:57:BB:72:47:4D:57:89:CB:FC:71:2A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA7929A220A866359AE3AB8C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397216
IP address blocks:        156.154.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:9a:22:0a:86:63:59:ae:3a:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=111d27ea-18f8-40c6-b73d-966b2295c80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:13:ee:d5:74:b3:d1:7e:7f:83:81:d0:fa:
                    f6:fb:79:a4:45:6f:8c:83:4c:97:b7:5a:01:ea:eb:
                    03:61:c4:46:ec:35:56:00:e6:7c:2a:b5:fe:28:35:
                    a1:7f:e3:f2:b3:6e:e7:3c:b9:40:a1:29:94:58:c3:
                    55:44:df:e4:7d:6f:50:0c:fc:cf:12:8f:aa:ae:ac:
                    37:9c:bd:48:5d:0c:96:04:9c:bd:be:d2:1e:7f:42:
                    a6:fd:d2:d9:67:b0:92:08:99:41:d8:4d:39:3d:73:
                    74:dc:54:2b:f9:44:66:7f:cb:b9:61:42:ba:d3:b8:
                    13:17:7c:f2:69:cb:50:01:08:ae:8f:f0:c5:9a:5d:
                    1a:50:c3:8e:56:27:74:9e:18:22:50:03:87:c5:a8:
                    1c:6f:8d:a6:4b:fd:83:33:29:b5:ae:d8:c8:80:02:
                    3d:60:8d:79:a2:43:b9:c3:55:c2:06:9d:9a:45:b3:
                    0f:a5:f5:0e:87:82:b0:65:0d:92:2d:4d:27:3e:9e:
                    de:72:b1:49:9d:93:13:79:ed:5a:6c:94:4c:b7:3c:
                    dd:8a:5f:77:15:af:b0:1c:e1:6c:7e:e2:ad:28:2b:
                    88:76:66:ce:64:11:b1:46:e4:28:fc:94:13:f0:3e:
                    9a:e1:ef:be:ee:57:93:01:e4:26:a2:bf:d7:5c:66:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:89:06:3D:16:70:50:63:9D:57:BB:72:47:4D:57:89:CB:FC:71:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:f3:68:e6:9d:34:15:70:31:77:ff:85:5b:31:8d:ba:d3:
         95:cd:e0:6c:ce:cc:b0:ff:3c:f0:0b:36:5b:52:f2:bb:f5:be:
         7d:5c:e2:92:6e:30:40:fc:e4:16:83:a9:10:94:84:6a:56:af:
         2a:1a:57:7c:1f:e2:55:f1:d8:93:9e:ee:a8:f0:67:b3:ab:ed:
         8a:00:44:23:45:3f:86:4d:45:b7:2e:50:47:de:47:6b:9c:04:
         0b:3d:2f:3f:a5:24:37:51:eb:64:1c:dd:69:83:0f:cd:26:29:
         fd:f1:5f:8b:c9:96:27:c4:82:6c:66:fa:f2:36:ab:ce:08:84:
         e0:f0:d1:7c:3b:f7:8a:7e:b0:f1:9d:9d:ed:41:97:25:35:86:
         c8:dc:24:62:62:ee:c4:4b:f8:07:1a:03:4b:da:c6:d7:72:11:
         e7:28:4f:cc:60:a6:06:27:d7:a1:16:31:95:28:cf:d8:d9:50:
         f0:7f:9b:c0:95:58:a6:74:cd:5d:8b:b4:bf:86:3f:89:68:c5:
         69:93:6d:3d:d3:08:e0:f5:fb:ab:66:ee:85:cb:39:b8:13:19:
         78:fa:21:0a:f8:bb:8b:15:cd:22:36:6a:b5:08:b1:3d:07:a8:
         91:b1:a8:dd:ea:18:a8:82:8d:b5:1e:2b:a2:56:f5:38:2c:66:
         d6:dc:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:04:23 2026 by rpki-client