Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe74c02a-bb72-3732-945a-eb4391a13010.roa
File:                     fe74c02a-bb72-3732-945a-eb4391a13010.roa (raw, json)
Hash identifier:          vZpwALSvP9GjLbqv9b249seJX4e5TbQiXeEw3NF7VdE=
Subject key identifier:   B5:4D:91:B3:8B:CD:9E:E2:CF:9D:7E:8A:83:AF:8E:3E:2F:A3:8F:F5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF7179B38AD0261501A844E28
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe74c02a-bb72-3732-945a-eb4391a13010.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397240
IP address blocks:        156.154.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:9b:38:ad:02:61:50:1a:84:4e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=c6b8a332-d6e2-4fdd-bc98-20c907ae0dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:a7:6c:e3:1c:4d:fc:aa:6b:6f:7e:69:45:
                    2f:2a:5d:fc:71:10:75:62:00:b7:3e:61:8f:48:27:
                    02:c1:a3:c7:6a:94:40:30:4a:12:b0:f7:ad:37:5d:
                    13:4f:ed:4c:c9:94:f3:41:ef:a9:c0:45:9e:a1:30:
                    d6:d8:46:33:bc:00:ac:8e:bc:96:1c:49:7f:cc:d2:
                    65:39:64:10:6d:6b:00:69:09:f2:3e:17:f5:ff:89:
                    5a:8a:03:f2:79:9b:01:c4:4b:d0:7a:e4:31:7b:54:
                    62:62:50:c8:42:d7:73:5f:de:29:ca:7c:72:6d:f9:
                    93:97:4c:7a:0c:3d:72:60:41:3f:67:98:bc:d7:5b:
                    23:a6:08:67:0b:f2:f5:ba:97:9d:71:bd:07:17:de:
                    02:c6:25:1f:6f:a8:dd:37:cd:6e:b4:a7:11:55:60:
                    15:76:ef:56:55:39:43:96:be:46:87:df:90:d3:c7:
                    f6:c9:e3:72:01:f1:7b:54:3d:da:c1:43:3f:ee:e6:
                    6e:bd:09:51:d6:8c:08:f8:f5:f3:33:bd:77:e6:95:
                    33:d7:bb:8e:94:e3:a0:b2:dd:7e:93:0a:7d:d7:27:
                    2c:b4:15:0c:e4:e6:50:da:52:83:90:df:73:70:b4:
                    ce:fe:6a:42:a0:e0:7d:5f:8e:3b:91:38:75:87:c4:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4D:91:B3:8B:CD:9E:E2:CF:9D:7E:8A:83:AF:8E:3E:2F:A3:8F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fe74c02a-bb72-3732-945a-eb4391a13010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:f4:fb:74:9f:1b:4e:67:90:e7:ff:9b:5a:ca:1e:70:b4:
         ca:33:55:08:61:48:78:30:d6:9a:22:cf:a8:17:d9:1e:58:b2:
         27:56:ba:e6:c1:ab:b1:12:91:35:54:0c:8e:4f:a8:d5:f9:0b:
         a5:db:5e:a7:a0:d9:89:98:c9:cf:7a:98:8f:b1:75:93:f1:1b:
         31:25:9f:1e:c3:68:0d:24:da:70:d8:1c:6e:dc:f7:e7:71:76:
         a2:f9:d0:fc:ff:81:cd:50:98:a7:fe:8d:b7:72:45:3a:51:07:
         ff:8e:2a:cf:c6:cc:c2:08:49:46:cc:13:a3:b5:3b:8e:61:20:
         54:bb:4b:56:57:3a:4b:af:7a:33:c8:a8:11:0e:ec:2b:c6:17:
         d5:b5:a7:4e:46:0d:35:2d:52:40:f5:a7:18:55:e8:c0:41:5e:
         47:9a:56:65:b4:b3:2c:c4:8c:12:af:40:28:bd:e5:d3:91:89:
         65:70:7f:0b:51:70:43:89:13:a9:30:f0:83:b9:c2:b5:98:49:
         db:27:2b:1a:9b:32:c1:0e:e3:d3:df:88:3e:47:0d:a2:9d:ad:
         2c:31:92:16:b3:9a:46:f0:c2:e0:a2:4c:73:b4:8e:69:1b:2b:
         64:b4:d1:d3:51:f8:4b:19:0e:7f:77:45:df:e7:cb:1f:ef:73:
         c1:c6:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:05:21 2026 by rpki-client