Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c58829ca-7740-37aa-b4c5-bea9571f5401.roa
File:                     c58829ca-7740-37aa-b4c5-bea9571f5401.roa (raw, json)
Hash identifier:          IGw5LMBUa9npkF4r4MFmMzl56ugri7ieKUHUbrUUz5U=
Subject key identifier:   76:3E:96:E6:60:5B:72:46:81:98:AD:61:18:FA:88:20:DA:F1:9C:78
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA7994603116E2328A62FD680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c58829ca-7740-37aa-b4c5-bea9571f5401.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397234
IP address blocks:        156.154.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:46:03:11:6e:23:28:a6:2f:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1b1d9f50-ab19-44cd-b554-58731192faf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:69:14:64:52:e0:4d:12:57:cf:52:6d:52:
                    01:e2:36:24:a0:25:64:82:4a:12:19:9b:e4:45:67:
                    93:0e:60:ba:c8:8f:9c:aa:e9:b5:b4:07:3c:15:40:
                    69:63:a8:8c:34:b4:56:31:0a:5d:c1:d2:a3:2e:ef:
                    3a:5a:8c:24:46:ac:24:ea:ca:73:c3:4a:1a:23:6a:
                    e2:9b:3b:86:fe:d0:3a:2f:4e:39:4d:91:18:e3:6a:
                    b6:1e:ca:15:ca:2b:18:18:e1:50:31:05:3c:4e:f0:
                    01:c3:b5:9d:18:87:b6:02:0a:d7:a0:c0:b7:09:5a:
                    f1:ed:1a:94:4e:1c:02:c5:64:1b:d0:ba:7a:46:25:
                    ae:f0:2d:0d:dd:4b:44:6d:ca:d8:01:18:8b:88:c3:
                    c4:d8:20:3b:10:4e:7d:7d:e6:42:f2:7a:d7:31:de:
                    df:23:df:94:74:bf:b7:99:2a:97:68:fc:ba:4d:73:
                    c7:dd:71:f8:6c:54:39:19:78:a8:e6:0e:f4:32:22:
                    19:f1:4e:9e:f6:34:76:5b:f9:54:48:12:01:04:16:
                    fa:2d:fc:b8:01:bb:27:e7:32:fa:2b:35:81:1d:84:
                    c0:1d:0d:51:5b:9d:72:32:72:74:07:84:56:75:24:
                    8c:51:15:f0:7b:58:6d:c4:d5:6a:e6:32:85:26:ed:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:96:E6:60:5B:72:46:81:98:AD:61:18:FA:88:20:DA:F1:9C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c58829ca-7740-37aa-b4c5-bea9571f5401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c9:5e:56:3f:a5:9c:c8:43:92:21:b9:22:e1:e8:98:53:4c:
         e0:ca:a5:16:3c:17:ae:ba:f2:3a:85:12:39:06:6c:86:0c:32:
         56:e7:aa:ac:1c:5e:1b:21:02:e1:2d:7d:f2:86:02:9f:c6:c8:
         b8:85:8f:71:01:54:1a:41:21:89:dc:f2:80:8d:e2:7e:dd:7b:
         13:3a:49:c5:a4:56:d8:06:1a:c6:d5:b1:a5:e0:89:a1:e5:3b:
         cd:9f:54:4b:b3:81:94:ec:b3:d3:e3:3a:ab:e9:e2:18:2a:8f:
         a3:0b:15:7a:dd:4e:fa:d7:0e:ea:4c:b8:37:99:f7:94:bd:9b:
         ab:5e:63:21:9c:7a:d9:88:16:ab:9a:f9:fe:06:c2:e4:40:d5:
         59:78:a3:10:0d:35:6e:cd:0c:bd:65:e8:9b:25:a6:d2:df:8e:
         f1:5c:a9:f1:2a:54:12:e7:d6:82:73:97:8d:44:c9:50:55:f3:
         c0:b4:28:d8:e3:1e:fe:89:e9:b5:f1:6a:e7:c2:57:7d:9f:c5:
         17:86:3f:e8:e1:ad:7f:18:a2:c4:db:99:15:f8:48:52:71:61:
         12:ef:4d:f0:87:76:1e:cd:1c:37:40:1e:56:04:32:bd:34:c1:
         a9:48:6d:b4:85:e1:2b:f3:d5:19:3a:9e:7b:52:20:d9:80:be:
         a2:ba:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:17 2026 by rpki-client