Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa66b77e-9fc5-37ff-ad56-c3486d5af55f.roa
File:                     fa66b77e-9fc5-37ff-ad56-c3486d5af55f.roa (raw, json)
Hash identifier:          r4qDeezbgfJLSi7lOsc1B28SOrW+ByvsY6xClYKsXJM=
Subject key identifier:   B0:66:DB:93:72:09:FB:1E:A1:F9:72:B8:6D:26:7E:4B:D4:F0:F1:EA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD611E8510FEC0BA2DB890C
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa66b77e-9fc5-37ff-ad56-c3486d5af55f.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397234
IP address blocks:        156.154.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:11:e8:51:0f:ec:0b:a2:db:89:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=f910bd3b-ccf4-4a6e-b37e-90724f78fdbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:86:b4:a4:bb:10:27:56:6b:f2:87:22:62:
                    01:08:89:a1:b0:3c:84:ef:d8:36:c4:91:e2:65:63:
                    1d:bd:bb:2b:d5:6e:27:80:83:f1:54:35:df:36:29:
                    cc:63:e8:7e:d9:b8:8d:49:af:3f:42:f1:82:25:74:
                    3b:30:86:9a:76:d7:37:ee:1d:66:c9:61:a5:80:90:
                    bf:6c:4e:49:09:a5:28:d6:c7:d4:e6:df:90:a7:d8:
                    bb:2c:0b:30:e0:45:f7:eb:48:19:68:86:4c:27:aa:
                    7e:45:8c:e4:6b:77:6d:bb:9a:0e:db:f2:56:78:16:
                    8c:c7:1b:06:19:e9:f2:c7:03:76:20:97:cd:ae:56:
                    a4:7e:b0:6e:16:75:45:14:d1:45:30:3b:71:2e:d7:
                    2b:21:a0:a0:13:d7:82:70:69:52:02:50:7b:5f:3c:
                    8f:54:b4:f3:10:55:fa:be:37:1d:05:7c:8d:4e:44:
                    64:1c:87:8a:45:36:66:8f:df:d2:e9:c1:88:5e:a5:
                    1d:68:be:b5:32:7e:f8:9c:11:94:c4:58:56:1c:d9:
                    d6:c8:77:f5:68:7c:25:75:11:67:0a:04:24:8c:65:
                    e4:f5:35:ec:9c:24:62:50:4e:5c:2b:d2:72:70:69:
                    66:0b:e6:44:80:0e:d9:60:02:42:cd:18:68:63:29:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:DB:93:72:09:FB:1E:A1:F9:72:B8:6D:26:7E:4B:D4:F0:F1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa66b77e-9fc5-37ff-ad56-c3486d5af55f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:48:c5:17:70:de:7d:e5:8b:f3:7d:78:d6:76:d5:a1:6a:bf:
         fc:bd:fb:a5:9f:00:c3:cb:fa:30:c7:76:a8:b6:32:07:ae:65:
         70:58:a5:60:44:f0:e3:93:8b:78:f9:c3:c1:d2:7f:3b:d0:7e:
         2b:52:bf:a1:0b:da:1f:72:04:44:4a:d8:f1:db:2b:57:f5:9d:
         52:c1:d5:57:7b:98:39:07:de:ab:c0:cd:87:04:3d:95:93:18:
         5e:3a:38:7a:aa:b1:09:5d:54:bd:dc:77:b2:87:57:03:25:16:
         53:db:5b:c7:cf:e5:1e:95:03:5b:70:bb:7a:d5:20:08:f4:95:
         3c:c4:12:14:e0:87:6f:6d:81:48:df:cd:96:a8:9f:9b:65:ca:
         a3:ef:c6:f8:2f:5d:71:8f:09:25:f0:a9:3e:6f:19:4f:37:d5:
         5b:dd:15:b1:fc:07:5e:72:5f:13:88:59:5e:7e:39:43:6d:d5:
         cf:c1:a2:a2:21:69:2b:09:3a:60:9a:95:a8:a9:ce:0f:ff:2b:
         69:0a:fe:ab:33:85:1e:57:76:89:1b:20:3b:e4:a6:f9:f3:3c:
         02:e1:71:4f:7c:ad:46:ab:2f:c3:8a:1f:c1:eb:88:9c:be:26:
         8f:3b:a2:93:ae:1a:f9:3c:5b:dd:e2:52:7b:51:d5:a6:7f:76:
         e5:58:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:30 2026 by rpki-client