Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa
File:                     faf82ae2-53c9-3116-b2d2-66a29af2f159.roa (raw, json)
Hash identifier:          Q8n+HrY2x4j58Fks+c9VVmQjjY6CyX5ViRtGTcwdwE8=
Subject key identifier:   99:1F:20:2E:F8:BE:C8:F4:71:6F:64:81:1D:6D:E5:EA:CB:47:24:43
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FED7C2D453CA52FDA5A40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397238
IP address blocks:        156.154.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ed:7c:2d:45:3c:a5:2f:da:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=8a628a94-5764-4887-b5ea-23d4f3531b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:8c:04:88:09:ce:1d:51:40:56:56:80:6b:
                    e4:96:75:51:0c:29:c4:7a:02:b9:c9:52:f5:fc:74:
                    ca:12:02:14:52:44:f2:4f:74:8c:9e:76:c7:06:5a:
                    64:6b:0e:76:b9:de:c8:fb:23:aa:a0:c2:d2:4e:d7:
                    00:46:fe:c6:74:78:5d:15:ec:b6:a4:80:ce:cc:11:
                    c5:81:36:2a:85:48:a9:dc:ba:3b:2f:fe:88:b2:99:
                    ca:67:6b:5d:9e:12:7e:24:7d:ac:3d:54:98:da:65:
                    e1:96:fe:1a:2e:1e:e0:fc:fe:1a:13:91:47:eb:90:
                    83:d6:99:18:0a:35:3b:51:0c:a1:89:ac:28:a2:ad:
                    59:f1:e5:50:57:80:51:88:25:ea:22:f0:f5:ae:2a:
                    48:b9:48:b3:c5:e9:f9:09:d3:ba:23:a8:41:93:99:
                    99:21:1d:67:dc:dc:dd:cc:64:19:da:3e:df:4f:3d:
                    de:1e:8d:1f:46:ca:44:48:b6:e7:a3:54:78:59:96:
                    50:4a:4b:d2:a1:fe:6b:cf:d9:f7:a7:10:d1:a4:5b:
                    d4:33:1c:f5:58:73:a2:c4:7b:1f:e4:d0:c8:92:21:
                    4a:fd:b9:30:7b:e2:26:bb:28:67:3f:31:10:e5:68:
                    93:78:0b:9c:68:fa:01:ab:a7:67:4f:9e:c5:f2:4e:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1F:20:2E:F8:BE:C8:F4:71:6F:64:81:1D:6D:E5:EA:CB:47:24:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fd:bb:d6:08:87:60:54:21:5d:6d:3a:8e:79:55:cd:96:01:
         52:30:05:cf:80:fc:ce:81:44:81:d1:3a:92:69:15:15:06:40:
         63:21:d7:76:1c:ab:9f:3d:64:60:81:86:ea:d1:9a:e8:f1:00:
         3a:94:0b:eb:38:99:4d:8f:39:11:a8:4a:30:45:92:75:c1:e8:
         89:49:fb:88:1e:b5:71:9c:cc:62:5f:c9:2e:17:dd:c3:5b:d9:
         23:5f:b0:d8:b2:6f:88:29:04:ed:f9:8e:e1:64:a6:7e:b6:58:
         be:69:35:ef:d7:eb:c2:ea:07:29:4f:aa:7d:d0:11:76:b6:8a:
         0c:09:81:34:a7:86:0b:6f:21:3c:86:6d:5b:5f:cd:a2:e1:44:
         d0:6b:c5:5c:71:38:74:c7:6b:a0:a2:b3:0d:65:fb:93:1a:72:
         92:ad:4f:b6:6f:63:f4:fc:dc:78:e7:e3:cf:79:c9:1b:c3:dc:
         2e:42:d2:23:c5:a7:a3:1b:ee:7a:e6:a0:0f:7b:e4:d4:58:db:
         33:ce:fb:ea:d9:6e:cf:aa:c4:85:ef:d5:7d:69:7b:c5:93:c2:
         f7:0e:4a:e7:1d:3c:36:52:07:18:47:87:ac:b4:67:c5:f4:45:
         11:d0:b0:24:66:a4:04:f5:9e:23:78:ca:a2:25:7c:50:71:70:
         e7:64:47:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+18LUU8pS/aWkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
OGE2MjhhOTQtNTc2NC00ODg3LWI1ZWEtMjNkNGYzNTMxYjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxeMBIgJzh1RQFZWgGvklnVRDCnEegK5yVL1
/HTKEgIUUkTyT3SMnnbHBlpkaw52ud7I+yOqoMLSTtcARv7GdHhdFey2pIDOzBHF
gTYqhUip3Lo7L/6IspnKZ2tdnhJ+JH2sPVSY2mXhlv4aLh7g/P4aE5FH65CD1pkY
CjU7UQyhiawooq1Z8eVQV4BRiCXqIvD1ripIuUizxen5CdO6I6hBk5mZIR1n3Nzd
zGQZ2j7fTz3eHo0fRspESLbno1R4WZZQSkvSof5rz9n3pxDRpFvUMxz1WHOixHsf
5NDIkiFK/bkwe+ImuyhnPzEQ5WiTeAucaPoBq6dnT57F8k5vyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkfIC74vsj0cW9kgR1t5erLRyRDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmFmODJhZTItNTNjOS0z
MTE2LWIyZDItNjZhMjlhZjJmMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAH9u9YIh2BUIV1tOo55Vc2WAVIwBc+A/M6BRIHROpJpFRUGQGMh13Yc
q589ZGCBhurRmujxADqUC+s4mU2PORGoSjBFknXB6IlJ+4getXGczGJfyS4X3cNb
2SNfsNiyb4gpBO35juFkpn62WL5pNe/X68LqBylPqn3QEXa2igwJgTSnhgtvITyG
bVtfzaLhRNBrxVxxOHTHa6Cisw1l+5MacpKtT7ZvY/T83Hjn4895yRvD3C5C0iPF
p6Mb7nrmoA975NRY2zPO++rZbs+qxIXv1X1pe8WTwvcOSucdPDZSBxhHh6y0Z8X0
RRHQsCRmpAT1niN4yqIlfFBxcOdkR54=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:06 2026 by rpki-client