Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c47f804-4c7c-3094-91fa-3f424c66366b.roa
File:                     3c47f804-4c7c-3094-91fa-3f424c66366b.roa (raw, json)
Hash identifier:          Bzj20sF1ShaCAqbp2YLXVTgWUorjDVbSiqmjvsPeUzg=
Subject key identifier:   69:8A:9E:54:40:3C:2A:28:3E:E8:03:86:D0:8E:8A:4D:1F:98:C9:DB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA792DD6D782059135BB32EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c47f804-4c7c-3094-91fa-3f424c66366b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:dd:6d:78:20:59:13:5b:b3:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8ac8d61b-cb5a-4bc8-b837-d3c9194cd6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:89:f8:20:06:31:f9:5a:ca:8f:2e:c1:0c:
                    5f:4c:f7:2f:8d:b2:b6:e9:f7:0d:21:da:5f:a3:22:
                    c7:98:77:00:82:4d:b2:4c:2d:76:71:7e:55:73:39:
                    dc:13:cc:3e:25:fa:93:f2:c5:b7:f7:f8:23:4d:99:
                    be:1b:c6:7e:a8:d9:eb:36:ff:08:46:c0:e0:7a:d8:
                    35:0e:df:f6:bc:d1:cc:be:e0:08:58:ed:0c:a4:be:
                    05:07:ea:fc:5d:e7:2a:40:af:ab:78:05:79:d7:cb:
                    33:c8:ba:7b:1b:81:25:82:af:fd:12:1c:ce:ae:71:
                    3b:20:eb:ae:12:03:f3:00:df:07:4d:1a:ec:ec:80:
                    11:e8:1a:6b:b5:70:2b:4c:6e:6a:71:ab:aa:6b:d0:
                    b2:ea:e2:12:a3:c8:c6:81:b5:6c:eb:37:04:28:48:
                    6f:d8:62:07:80:81:25:19:4b:e0:5d:66:b4:bc:f1:
                    b0:7a:7a:ba:17:f6:d8:a7:8c:bf:70:2c:54:58:b0:
                    f7:2e:42:44:67:b9:85:02:82:b8:73:f2:76:5c:27:
                    73:82:f4:7d:81:2c:b3:d3:38:9c:c6:43:df:56:53:
                    30:4b:8d:69:c9:23:83:66:77:af:53:eb:f4:63:dc:
                    2d:48:e5:e1:8e:23:db:b3:34:d9:b7:d7:f2:73:5e:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8A:9E:54:40:3C:2A:28:3E:E8:03:86:D0:8E:8A:4D:1F:98:C9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c47f804-4c7c-3094-91fa-3f424c66366b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:4b:ab:75:a1:76:d8:d6:99:41:05:79:09:16:e3:45:d4:
         a0:d1:fc:cf:2c:f0:06:84:07:8d:ac:7d:a5:26:2c:6c:c2:71:
         4b:bc:d1:a6:01:6d:24:20:41:0d:63:51:3f:56:4a:ca:83:00:
         e2:9f:9d:c6:2e:09:88:0b:77:36:0f:2e:13:ba:38:94:71:b1:
         a2:03:63:ee:04:ee:4b:e6:6a:78:73:bb:39:3e:4c:50:4c:f5:
         1d:f3:6d:76:16:e7:f8:fe:d6:c0:f8:a7:c6:2d:93:c7:9c:c1:
         b1:82:73:8d:9a:a0:6f:2e:ff:19:72:28:99:90:ce:8d:f9:6e:
         74:82:18:22:a4:d9:e9:f3:ab:ed:1c:b3:df:da:fe:15:af:42:
         e7:70:bb:9a:42:af:78:f8:03:d0:f0:22:7a:86:86:2e:50:1c:
         18:f4:b8:6a:42:b0:b2:e6:16:81:70:61:35:d0:aa:4f:d2:2e:
         ec:39:c1:9a:81:a6:f7:4d:09:5f:ce:31:8c:95:a2:0b:8b:a9:
         c4:da:6f:c4:aa:1b:63:4d:b1:b5:6e:9f:9d:74:8f:10:65:e1:
         9d:04:37:a4:ba:18:c9:ac:10:e5:9b:5f:f1:83:8e:ea:68:5b:
         79:08:d8:c4:49:a8:78:60:0e:12:b1:78:a2:4c:0b:11:8a:73:
         7f:1d:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:23 2026 by rpki-client