Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41e6c04e-d778-3590-9542-1c463adc8f38.roa
File:                     41e6c04e-d778-3590-9542-1c463adc8f38.roa (raw, json)
Hash identifier:          FyGEaaLkVUXECvwCbrurEPRVInSkhyv1mh5Q68r2DYs=
Subject key identifier:   2E:91:FE:0E:38:28:DA:87:91:86:44:A6:9D:31:4D:3E:37:85:24:AE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA7992BC32672EF394DFA3D20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41e6c04e-d778-3590-9542-1c463adc8f38.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397239
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:2b:c3:26:72:ef:39:4d:fa:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1faf7ec3-acdf-4075-add1-2f9e34925684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:9a:2b:32:31:1e:44:5b:4d:19:0d:51:6a:
                    ec:d9:e0:26:6f:58:f5:44:8e:c9:64:3f:66:89:89:
                    29:96:9e:ea:15:7d:57:4f:b4:c8:b6:dc:e0:57:06:
                    30:84:4b:ea:7d:b8:37:67:43:a3:16:a3:f9:eb:c6:
                    31:db:07:83:33:e0:37:d4:31:46:43:c4:cb:cf:8f:
                    d6:12:3b:20:65:9f:f6:26:7a:31:ec:ab:2d:da:d2:
                    aa:b7:05:ca:bb:71:8d:2a:2d:26:a1:4e:53:4d:2c:
                    90:9a:f3:cf:8d:36:19:aa:0b:5b:99:6f:d3:40:65:
                    f9:42:b0:78:af:6a:3b:d4:63:88:77:b7:42:09:1e:
                    cd:8f:41:59:49:12:8c:ac:8d:8b:0a:0c:b5:f6:b9:
                    37:8c:0d:db:09:43:80:a7:3b:5e:d8:ed:37:c9:82:
                    d9:fa:ed:55:07:24:91:a3:53:9b:0a:c3:ec:95:d0:
                    fd:97:c6:f1:2b:a8:53:21:05:40:99:ad:04:2f:14:
                    60:be:0b:e9:d2:1f:19:12:04:c6:5a:0a:20:98:23:
                    ca:ee:d7:a8:d8:25:75:22:e2:70:94:6e:bb:98:ab:
                    0d:8b:93:3c:7a:c3:fd:bb:39:1b:11:a4:c1:06:a4:
                    b7:1c:90:90:bb:7e:47:2f:9b:62:71:2a:b2:42:f9:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:FE:0E:38:28:DA:87:91:86:44:A6:9D:31:4D:3E:37:85:24:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41e6c04e-d778-3590-9542-1c463adc8f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:61:90:f5:bc:60:88:06:57:30:1e:93:86:8d:ad:76:b4:
         e0:7a:05:5d:13:93:78:46:0b:8c:02:92:88:35:91:f7:1e:0b:
         75:8a:22:67:aa:19:c3:b4:af:c7:7a:0e:22:a5:46:ac:0c:e0:
         c7:97:ef:98:21:3a:4c:97:91:5e:14:69:15:60:49:b3:f1:a7:
         c7:36:c5:31:c9:11:ab:90:91:a5:b8:9d:23:d0:2c:f8:cb:b2:
         3e:4b:fb:a6:aa:5e:56:2d:cd:99:f3:93:a0:56:ff:4d:c6:a4:
         4f:84:2f:cb:2a:3a:c1:cf:a6:13:ec:80:e7:40:7e:33:36:ed:
         d4:57:83:e6:81:ac:1c:e2:67:9c:09:69:2e:5a:40:03:ad:11:
         15:e0:cd:1f:c8:5a:e7:59:c2:3c:da:ce:00:e1:5c:fe:7a:bd:
         58:35:8e:44:3e:45:7b:93:e1:9b:ee:f1:bf:a2:bf:5e:cb:13:
         4a:9a:11:b7:76:a1:58:91:24:76:e1:46:db:3b:31:b2:99:9a:
         c9:e2:bf:f2:06:15:c7:1a:66:9a:06:51:19:82:f2:dc:d2:9d:
         0d:bd:c1:ce:9c:0b:a3:16:68:75:0e:f6:0a:fa:34:d8:d2:ab:
         4d:64:bd:0c:1f:c2:49:ed:b1:e0:da:38:78:09:14:77:de:42:
         9c:0f:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:58 2026 by rpki-client