Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee449fe1-39e0-3750-8cad-ec59917cb6b3.roa
File:                     ee449fe1-39e0-3750-8cad-ec59917cb6b3.roa (raw, json)
Hash identifier:          fL+NfYGJK3amx0WpJ20im1rG1q2fwEmnri7fMYtN5I4=
Subject key identifier:   06:C9:50:66:F5:9F:C5:A8:39:B7:5A:FD:F4:54:9C:20:68:12:4D:9F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA7929AEF8729837467360100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee449fe1-39e0-3750-8cad-ec59917cb6b3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397223
IP address blocks:        156.154.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:9a:ef:87:29:83:74:67:36:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=71a1c799-5c59-4fb7-992c-a4c1393c8e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:16:eb:07:3d:2b:50:3c:40:cc:f8:0f:97:22:
                    99:63:13:bd:eb:36:3f:be:72:61:80:24:7b:66:4f:
                    38:79:43:ad:18:bd:85:fd:01:47:e8:98:f3:c3:15:
                    bd:06:cb:d3:2c:db:48:29:d8:af:39:88:b9:69:26:
                    2f:ca:c5:75:f5:6d:d1:a2:f1:6c:e7:28:41:f7:e4:
                    27:92:e1:87:ca:ea:ce:d5:56:7d:18:20:49:9d:18:
                    ad:71:f3:4d:e1:9e:28:ec:94:24:2b:3e:f4:99:a4:
                    b3:35:ba:28:af:49:6a:7b:ef:fb:e5:e9:ea:a7:ef:
                    71:81:7b:28:bc:a5:b6:ee:d5:0f:66:5f:af:29:bb:
                    37:ab:45:0e:5b:a0:2b:32:e7:9d:63:2e:31:bc:48:
                    40:f1:f1:14:2b:23:80:b0:24:3d:0f:86:9f:9e:93:
                    ea:f5:84:bb:03:7e:73:8b:27:4d:b4:92:50:4f:b0:
                    e2:73:d1:c8:17:f0:df:fc:0c:3a:c0:aa:ee:93:a1:
                    b1:54:b6:df:1e:45:7f:7d:47:4c:02:55:8e:47:71:
                    7d:30:45:94:90:24:fc:3f:8d:68:04:de:c1:c8:3d:
                    d5:66:94:4a:d9:d8:de:e2:e3:c1:d7:72:3b:0e:17:
                    e9:fe:9e:74:78:cb:fa:eb:af:65:a1:ef:01:9c:98:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C9:50:66:F5:9F:C5:A8:39:B7:5A:FD:F4:54:9C:20:68:12:4D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee449fe1-39e0-3750-8cad-ec59917cb6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0e:63:9a:1d:d7:7e:cb:e2:80:17:91:5d:44:c1:67:5d:72:
         6d:2e:33:5c:8a:ee:7c:cf:a2:6a:d8:d2:92:ac:fc:93:71:7e:
         a6:d6:99:b3:ba:9d:94:c7:c1:f7:97:26:f5:bc:aa:6a:7a:f1:
         65:95:39:34:7d:9f:3b:33:4a:e5:79:c8:dc:31:4e:dc:e3:21:
         e7:fa:82:1a:82:98:22:ee:97:84:2f:81:ad:c8:7a:13:52:81:
         90:e1:72:fd:0f:71:d7:01:8d:27:3c:01:3f:7b:cd:d0:2d:32:
         09:06:f7:62:b0:06:9f:fd:c2:96:f8:0d:48:c7:2e:12:b5:1d:
         8d:0b:e4:4b:1e:5b:95:9f:6f:c3:38:52:69:36:f2:50:2d:4a:
         a9:a0:d1:4e:0f:ae:0a:21:f4:06:92:e4:87:c6:2e:3c:5c:c0:
         a1:21:b4:fb:eb:81:1c:a1:6c:2d:27:53:83:04:c7:7a:41:6e:
         0e:6b:1a:19:09:83:e7:60:17:ca:c3:8e:c2:49:bd:26:76:87:
         cd:e4:1f:99:43:63:6d:c2:b4:d2:8b:4c:5d:4a:de:8b:42:ff:
         3b:ce:97:13:d8:d4:5a:31:86:e0:92:6f:fa:97:b5:8e:3f:e2:
         13:e9:8e:da:62:31:11:18:c8:7b:6e:b1:b7:f7:0b:32:c5:50:
         9a:98:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:46 2026 by rpki-client