Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa
File:                     d5399463-70a6-30f2-a6e1-8ace69b6d019.roa (raw, json)
Hash identifier:          EflCpHldSPNN+YN+RoQtkfqXO7tPIBrmq9St6Ccy/wk=
Subject key identifier:   32:73:C9:55:0A:F6:97:73:62:82:01:DE:EC:D7:83:8D:FB:D0:04:7E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B093E4064389968A631380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397238
IP address blocks:        156.154.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:93:e4:06:43:89:96:8a:63:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=e427b004-731a-4184-9684-4a6cc8792781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:81:c6:07:96:1d:b7:63:39:16:18:16:a4:
                    b7:a1:4b:b4:19:79:86:12:d8:15:37:73:cc:4a:c9:
                    d1:ca:34:0b:50:09:f2:53:9e:8e:71:7b:8c:46:b6:
                    df:5f:fc:7b:40:9a:2b:75:91:cf:5b:bf:94:b7:61:
                    ec:ba:f0:aa:45:5d:40:cc:d1:cf:1e:bc:52:34:96:
                    42:aa:67:6b:8a:5d:94:ee:b0:80:79:ee:4c:b6:c6:
                    4a:6d:6b:b6:aa:5d:56:4f:0d:4f:8a:fd:72:a1:20:
                    40:1a:26:7f:11:df:ef:b7:d5:b7:76:d4:40:10:91:
                    1e:5f:31:5c:4f:cd:c2:9c:70:e2:bd:1d:47:99:e7:
                    25:e0:68:00:2a:e4:f6:14:2b:e0:ec:74:e4:4f:43:
                    d4:72:4c:97:92:44:3a:b2:f7:bc:7a:64:4d:c8:d6:
                    9f:c6:fc:68:91:f8:7c:ac:8b:d5:aa:79:f5:1a:07:
                    99:38:bb:4d:17:45:13:93:a5:a6:d6:b0:36:27:b4:
                    25:a6:98:3f:de:60:0d:07:00:67:ac:07:cf:b2:08:
                    4c:a9:3c:93:47:f2:4e:48:27:3f:a3:dd:c6:a8:2b:
                    a3:22:f8:db:b5:e6:7d:68:48:91:19:9d:46:9d:e9:
                    0a:1d:68:49:f4:cf:31:e1:fb:a4:09:01:b0:74:91:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:C9:55:0A:F6:97:73:62:82:01:DE:EC:D7:83:8D:FB:D0:04:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c0:e5:56:0e:c2:98:f3:9d:bd:aa:16:4e:4b:96:a3:eb:8a:
         0e:8a:25:cc:ae:65:3e:df:08:5d:db:31:18:6a:9f:20:2c:8c:
         1a:27:99:44:1d:06:b6:4e:d3:d3:43:2b:fd:ce:21:ec:55:93:
         c0:93:05:88:9d:f4:d3:d9:25:f3:9e:48:ac:6f:2b:49:53:09:
         dc:14:1d:aa:a0:69:3c:34:03:6a:f5:53:75:b1:7b:e1:ab:05:
         39:47:d8:4b:1c:36:06:4c:82:4d:11:dd:4e:4e:79:71:d5:2c:
         c9:5d:5e:a2:a3:d5:70:f3:86:67:d1:2c:55:1d:c0:f3:3b:29:
         01:1a:34:63:2d:60:dd:a2:90:b9:f0:0c:31:98:d0:8e:47:d2:
         90:84:1f:be:02:87:f3:77:5c:52:1a:a9:60:74:53:fb:2b:c2:
         b2:69:98:19:b1:0d:3e:b9:af:df:59:94:54:26:9c:55:24:58:
         22:e3:5c:73:fc:95:01:71:be:ad:aa:cd:39:1f:78:3d:e4:3e:
         a3:11:c9:8b:aa:eb:2c:9b:5d:c5:41:a6:76:1b:b8:8a:21:a3:
         aa:17:c1:20:1a:96:d9:e9:9f:55:f7:aa:b3:9e:65:b5:b0:74:
         a0:38:d2:e9:16:a7:16:18:08:56:cf:2c:c8:86:54:4b:ec:ba:
         c2:75:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:50:32 2026 by rpki-client