Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa
File:                     f2834b82-6315-3762-95c7-85355f4206a7.roa (raw, json)
Hash identifier:          6KtPEl3fC0wrYkt9I0IXXq1eJj5o7VykRA5K8OdARYk=
Subject key identifier:   AB:FB:91:74:A5:57:C5:86:EE:A9:9B:C2:62:12:FA:F6:3D:03:A2:06
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD6086AA06CF1DE7A295EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397225
IP address blocks:        156.154.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:08:6a:a0:6c:f1:de:7a:29:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=6b997d3d-a2fb-43f8-8a56-9ea042962400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ff:49:69:7b:dc:15:fe:29:d8:17:3d:89:77:
                    fb:d8:b1:1e:28:6e:38:33:b1:bd:2a:42:e6:81:4b:
                    8c:58:a7:55:27:12:ca:45:6d:64:f9:c3:29:de:13:
                    84:a3:c2:e9:17:11:a5:25:52:8b:12:78:25:50:ea:
                    20:bd:c4:cd:85:60:58:64:b0:fc:42:88:b3:94:20:
                    2a:d3:c3:a7:9f:37:bc:ca:2a:d1:af:46:34:af:ba:
                    b7:16:da:ee:7b:ff:8a:1b:31:c4:93:1e:d1:e8:ac:
                    ec:73:7a:df:25:99:e1:9e:0c:47:e8:5b:48:50:b8:
                    85:26:0c:0a:8f:d0:66:3b:d5:66:0b:66:8a:0b:15:
                    29:97:67:56:e9:0e:81:f4:3e:95:4d:8e:35:2a:04:
                    b1:89:60:6c:a4:9b:ba:be:a3:ed:1e:36:85:d4:7a:
                    d0:5d:1f:0f:c4:28:78:11:09:28:77:f5:35:a8:b7:
                    19:65:33:21:cd:37:98:c1:18:bf:92:f2:eb:ff:11:
                    01:f4:b5:e8:6c:38:6a:a5:b3:b5:b4:16:47:82:89:
                    9b:1e:c2:18:0e:b0:5d:03:a4:7a:4a:21:4e:88:71:
                    83:03:cc:70:13:58:2b:33:b0:83:70:1d:9e:ec:b7:
                    83:1f:88:99:f9:dc:e0:52:06:4b:49:22:f7:9e:1d:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FB:91:74:A5:57:C5:86:EE:A9:9B:C2:62:12:FA:F6:3D:03:A2:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f2834b82-6315-3762-95c7-85355f4206a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3b:aa:c5:cd:7c:6a:ef:72:b0:ed:a6:f5:1c:a0:6a:17:c9:
         db:a5:3b:7e:76:b8:28:06:7a:9a:9f:96:10:7e:ac:d4:26:f8:
         46:f7:16:0a:13:39:22:82:97:df:19:2e:2e:29:b1:cd:02:cb:
         e6:53:5c:8e:ff:a2:92:c4:48:2e:93:3b:29:ff:3b:fe:9b:d2:
         55:79:d0:81:49:b0:fe:02:2a:81:21:98:a3:d0:a3:da:f7:d7:
         51:66:40:89:bf:1d:06:eb:ee:ef:2a:94:e7:17:40:ab:a7:ab:
         17:b7:67:f2:a5:8f:a7:6d:38:70:6d:fd:64:68:71:58:91:23:
         bf:0a:d0:45:0e:03:a5:ca:6d:74:e3:72:c1:fd:69:8c:63:bb:
         06:49:72:d8:7c:f6:b5:f7:3f:32:72:59:39:52:11:3b:1f:ce:
         3d:45:6b:28:20:b9:37:7c:4c:7b:59:7c:a2:96:4b:c2:61:a6:
         4d:4c:ff:ec:5f:34:f8:ca:cf:35:f6:35:99:08:ea:d9:15:0d:
         73:ab:5e:27:19:d3:00:5b:f2:22:14:25:cc:d6:90:48:07:5c:
         c7:02:4f:88:75:51:a2:77:ae:64:eb:d5:0f:9f:ff:ac:cb:7e:
         4b:ff:6a:0d:05:58:92:01:17:92:00:9c:e3:a5:a9:09:d4:26:
         d9:aa:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:21 2026 by rpki-client