Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e451241-7039-3390-8178-d1fa006b3f94.roa
File:                     4e451241-7039-3390-8178-d1fa006b3f94.roa (raw, json)
Hash identifier:          HpUBdR0Sj9r7trPGXXA1MeEyYB/cyh6rBS5kMZ8hfWU=
Subject key identifier:   A0:7A:35:B2:92:CE:B9:F9:5C:0E:10:69:6C:42:0C:BB:2E:0A:B6:B6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497E8C13579084D918E29000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e451241-7039-3390-8178-d1fa006b3f94.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397227
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:8c:13:57:90:84:d9:18:e2:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2c6742a0-85e7-4404-810f-799c44529395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:60:e3:ee:bb:b3:f8:6b:f0:58:d4:b9:ba:
                    d3:36:09:5b:53:ed:1e:81:43:5f:c0:93:70:b1:fa:
                    ef:81:65:ef:32:55:0a:d8:97:d1:47:aa:58:52:63:
                    79:4f:6d:5b:24:4b:62:90:19:ab:77:2b:a2:be:80:
                    da:4b:ac:9a:cd:8c:71:9d:21:b8:a1:48:83:ac:93:
                    d3:b1:b2:1d:d2:49:53:66:44:ce:cb:8a:49:1e:e9:
                    dd:20:4b:48:91:b2:f6:f1:cc:de:01:64:34:cc:41:
                    2e:ae:07:f1:f2:f8:f8:e5:80:79:83:0c:15:7d:64:
                    29:28:1e:04:c7:96:f4:18:4c:83:89:d5:92:8a:98:
                    a7:71:71:7d:88:9b:bd:52:6e:07:3c:8c:37:b7:ed:
                    be:74:9f:13:3a:2c:37:34:88:3d:28:01:af:44:05:
                    a0:9c:ff:0f:c0:88:29:d7:3c:b4:82:7c:40:f3:72:
                    51:4d:3d:1f:27:98:32:ac:79:29:e4:24:bc:82:8f:
                    e5:d8:c6:85:21:05:3e:1a:8a:97:73:61:59:b4:5e:
                    9a:a8:c6:08:35:75:a9:7d:a0:66:06:2e:6e:f4:22:
                    3a:8c:4c:bd:20:68:51:2b:d6:ea:61:2e:c4:fc:cd:
                    7c:50:85:e9:0c:13:f6:d7:1c:9e:87:5e:06:69:fa:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7A:35:B2:92:CE:B9:F9:5C:0E:10:69:6C:42:0C:BB:2E:0A:B6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e451241-7039-3390-8178-d1fa006b3f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:da:60:71:44:cc:37:00:15:f7:bd:da:65:e4:86:0b:ff:
         51:2e:05:af:aa:60:e7:fe:95:d1:5f:53:e0:47:a4:7c:9b:4a:
         8d:fe:1d:3e:22:be:9b:68:00:cd:6f:a5:3e:11:99:79:c8:74:
         e0:5a:ed:5b:c7:c7:f8:d4:22:85:88:21:95:33:69:9c:27:91:
         96:94:91:92:b6:1c:13:9b:c3:96:c1:7e:81:ed:a9:55:32:7c:
         2d:1e:c9:28:c4:ff:c2:a5:04:b1:06:20:15:db:82:db:df:5f:
         5a:34:c7:03:34:83:75:7d:6c:ed:43:e6:2f:b9:5d:7b:b0:94:
         5a:85:1c:07:4d:8a:6c:71:d4:17:b4:47:66:83:25:d8:f0:79:
         52:08:db:be:7b:95:85:32:da:3f:20:6e:a6:4b:f2:77:fe:7e:
         99:f1:bf:ec:b3:e4:c8:bd:72:aa:ab:7d:eb:cc:81:45:17:58:
         58:1d:93:b2:8b:ba:3d:01:32:7e:68:f3:b6:fc:d2:2a:c9:51:
         24:fc:85:a2:d2:8e:5d:4b:8c:9d:74:af:ff:1f:b2:9b:2b:70:
         ec:e2:59:c0:61:a3:17:8f:98:c9:6a:ec:13:2a:05:5f:fd:d4:
         46:6a:cb:14:7e:6b:98:ed:c7:f3:a5:ae:be:56:c0:ea:02:bc:
         7a:df:dd:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfowTV5CE2RjikAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MmM2NzQyYTAtODVlNy00NDA0LTgxMGYtNzk5YzQ0NTI5Mzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv1g4+67s/hr8FjUubrTNglbU+0egUNfwJNw
sfrvgWXvMlUK2JfRR6pYUmN5T21bJEtikBmrdyuivoDaS6yazYxxnSG4oUiDrJPT
sbId0klTZkTOy4pJHundIEtIkbL28czeAWQ0zEEurgfx8vj45YB5gwwVfWQpKB4E
x5b0GEyDidWSipincXF9iJu9Um4HPIw3t+2+dJ8TOiw3NIg9KAGvRAWgnP8PwIgp
1zy0gnxA83JRTT0fJ5gyrHkp5CS8go/l2MaFIQU+GoqXc2FZtF6aqMYINXWpfaBm
Bi5u9CI6jEy9IGhRK9bqYS7E/M18UIXpDBP21xyeh14GafqdQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKB6NbKSzrn5XA4QaWxCDLsuCra2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGU0NTEyNDEtNzAzOS0z
MzkwLTgxNzgtZDFmYTAwNmIzZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEplMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzP2mBxRMw3ABX3vdpl5IYL/1EuBa+qYOf+ldFfU+BHpHybSo3+HT4i
vptoAM1vpT4RmXnIdOBa7VvHx/jUIoWIIZUzaZwnkZaUkZK2HBObw5bBfoHtqVUy
fC0eySjE/8KlBLEGIBXbgtvfX1o0xwM0g3V9bO1D5i+5XXuwlFqFHAdNimxx1Be0
R2aDJdjweVII2757lYUy2j8gbqZL8nf+fpnxv+yz5Mi9cqqrfevMgUUXWFgdk7KL
uj0BMn5o87b80irJUST8haLSjl1LjJ10r/8fspsrcOziWcBhoxePmMlq7BMqBV/9
1EZqyxR+a5jtx/Olrr5WwOoCvHrf3ek=
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:40:58 2026 by rpki-client