Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5de10dd6-fc90-35cf-8d4d-19b0895543b6.roa
File:                     5de10dd6-fc90-35cf-8d4d-19b0895543b6.roa (raw, json)
Hash identifier:          tSRQ68UUofbugGinPdDslTsjeuGui5niN3+aNg3Pp9U=
Subject key identifier:   8B:45:21:C8:DB:13:A6:76:30:65:D6:FF:8C:D8:16:C5:F5:FD:70:DA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA792C0E98E081EA5B0824680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5de10dd6-fc90-35cf-8d4d-19b0895543b6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397227
IP address blocks:        204.74.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:c0:e9:8e:08:1e:a5:b0:82:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d17749f0-417d-47e9-8a6c-251361ad331a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:89:ee:e1:d4:96:31:11:0b:0e:34:1b:52:
                    8c:7b:9c:b5:93:08:c3:d4:81:39:b4:08:88:c9:3a:
                    77:a2:d6:7c:c9:bb:77:b5:70:b3:59:79:98:31:11:
                    08:2e:31:99:cb:5f:22:44:9c:47:52:14:9c:db:db:
                    f2:be:71:e5:b4:c9:00:44:3d:f1:f9:f0:76:e6:d9:
                    d0:e7:1b:31:26:a2:4f:77:2e:33:c0:92:b7:3f:73:
                    6a:c4:44:e1:be:a6:16:db:e8:0e:cb:cc:43:7f:11:
                    e2:3b:81:4e:ec:c6:ad:6f:13:5e:99:9c:ba:26:87:
                    86:40:39:81:10:c7:86:c8:3a:c2:ce:f3:a2:c8:46:
                    0a:e2:e1:3a:a1:ae:10:f4:c1:b0:38:e4:bf:8b:02:
                    2c:62:be:3b:32:55:95:bd:8d:23:2f:56:1e:18:10:
                    89:d2:7a:e2:75:07:41:a6:99:9a:5e:66:55:dc:0b:
                    b7:d7:f3:0d:73:df:3d:6c:3f:26:eb:22:57:ff:07:
                    c0:e6:b5:be:90:dc:88:41:41:72:f6:e9:3d:28:83:
                    91:4a:81:ce:e9:f0:8b:7d:67:74:9b:23:8e:75:f9:
                    c5:10:7c:ef:5b:11:06:cb:00:64:7f:f5:4a:ab:b6:
                    3d:37:ba:02:33:b5:f9:07:05:b0:f8:f2:15:6e:6a:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:45:21:C8:DB:13:A6:76:30:65:D6:FF:8C:D8:16:C5:F5:FD:70:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5de10dd6-fc90-35cf-8d4d-19b0895543b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:3e:75:86:e0:b9:37:4d:0d:55:b9:29:f8:b8:dc:e0:f4:
         a1:20:9a:20:82:4b:01:7f:dd:09:f2:d8:18:93:0d:c4:91:7b:
         26:60:4f:93:43:5f:36:66:88:fd:5c:4a:8b:65:4d:7c:24:0b:
         15:ea:0a:77:af:50:4e:5f:86:a4:f4:5d:d3:27:b0:67:d9:9c:
         69:d3:5e:19:5a:cb:af:e2:fb:91:db:b4:ba:81:78:4c:75:31:
         c3:34:27:40:85:be:ab:86:e7:d0:cf:e7:b6:ab:a7:ac:4e:a2:
         e1:6a:e8:71:59:8e:00:3d:2c:94:16:93:83:bf:53:09:58:e5:
         01:26:dc:08:4d:87:a1:68:19:32:ec:4b:fe:0c:53:91:18:1c:
         8a:4c:2e:c7:f4:dc:53:cb:b1:38:63:c9:97:69:df:a0:6d:47:
         09:bd:11:51:19:a8:be:66:f4:aa:3e:a7:bb:3d:66:c4:32:35:
         27:df:c3:67:1f:4a:29:e6:4b:8f:15:98:50:0c:57:fc:93:5b:
         ce:83:5f:4c:84:f6:b0:47:d2:a0:9a:70:42:ec:e6:e6:e4:28:
         0b:74:04:75:11:ec:ca:f9:1f:15:46:8a:cc:e1:23:64:c8:f3:
         87:d0:89:16:c0:92:50:dc:96:18:aa:e5:7a:48:a5:49:b7:3d:
         9d:72:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:33:52 2026 by rpki-client