Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e6700cb-04e2-3d23-b240-c8f3dee4c677.roa
File:                     6e6700cb-04e2-3d23-b240-c8f3dee4c677.roa (raw, json)
Hash identifier:          ppYxYfXDxyk5So2Ig/56ZOwvxvCmTrIYAO4b7kCGFTM=
Subject key identifier:   47:8C:72:E2:4F:22:56:B2:41:9E:8D:38:C5:30:F1:09:98:4D:9E:CA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA799336D07EE83F4A01E47C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e6700cb-04e2-3d23-b240-c8f3dee4c677.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397241
IP address blocks:        204.74.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:33:6d:07:ee:83:f4:a0:1e:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6432f2e2-14d4-4310-afab-39b8f0838f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:e9:91:dd:ba:e8:15:55:a9:47:f2:1e:06:
                    30:3d:b8:6b:ce:94:2b:a1:ac:78:40:4b:ac:5a:6d:
                    e1:a4:ab:12:89:4d:b3:da:2c:44:f4:90:4b:93:32:
                    3d:b5:00:4c:5d:c4:a1:05:9c:ee:66:3d:82:78:98:
                    89:54:a0:df:91:16:ce:a7:98:8c:c0:9c:40:e8:dc:
                    ca:16:1f:6c:7b:f1:0e:5e:de:1e:d6:fb:ff:95:a9:
                    52:3e:4c:4a:e6:91:b3:ec:de:ba:79:7e:b9:2f:48:
                    2f:d1:58:db:ec:94:4b:7b:21:9b:e0:01:4b:d5:75:
                    5f:e5:a0:f5:87:e7:1c:6f:dd:70:bf:8e:ea:02:1f:
                    b8:12:52:de:54:4b:2b:9b:60:3b:01:1b:33:2b:98:
                    9c:1f:85:4a:cd:41:81:ac:58:7e:9d:0a:ff:bc:85:
                    31:cb:c4:83:03:c9:2c:47:ab:af:fa:0f:7d:7c:c2:
                    60:3f:af:a2:9c:da:38:57:69:14:cb:16:1f:1d:4c:
                    35:f2:cf:d3:12:f7:a5:a3:b8:01:92:a2:ec:15:47:
                    5d:ba:20:17:05:a2:96:e1:02:a7:9f:42:9d:0f:a8:
                    a7:87:e9:ec:ef:c6:49:d7:f9:67:7c:a2:e2:40:dd:
                    68:2c:60:7b:fb:08:aa:a3:2d:55:9f:0c:e8:9b:46:
                    fb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8C:72:E2:4F:22:56:B2:41:9E:8D:38:C5:30:F1:09:98:4D:9E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6e6700cb-04e2-3d23-b240-c8f3dee4c677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a5:a9:d1:ce:c1:08:94:3a:1d:c6:47:2f:25:ae:ac:0a:05:
         e8:2f:fd:ce:6a:e0:1b:23:00:15:2e:e6:f7:0b:52:a0:33:80:
         2a:65:ad:fc:dd:ec:b9:3f:f2:13:03:77:1e:0a:e0:93:72:1b:
         8a:b4:07:18:18:a3:c5:6c:80:fe:10:d2:43:e2:76:42:fe:37:
         50:ed:a7:e4:eb:25:73:33:4b:2f:3d:dc:01:e1:6b:40:10:e7:
         8c:05:b7:26:0e:b8:7d:46:de:03:ae:01:48:f1:63:cc:a5:d8:
         3b:c7:3e:b7:3d:98:cc:a5:a4:93:2b:4c:5f:cd:a4:d4:af:7d:
         f5:88:26:24:bd:e7:0d:8d:5a:ae:a5:7b:fc:de:78:e1:56:15:
         64:fb:5e:c2:da:62:8d:46:45:7a:da:c8:f7:2e:05:1f:2f:a7:
         78:9d:f5:39:f0:0d:77:7e:44:45:4d:ea:82:c1:a8:75:d0:b8:
         01:e4:44:4d:bd:05:fb:08:69:64:71:13:e1:93:e0:cd:0a:df:
         8a:8d:3b:8c:91:69:49:71:25:83:eb:94:b3:b5:8d:2d:88:57:
         1f:11:0a:82:81:54:fb:20:dc:5f:62:da:aa:95:8b:49:b6:89:
         27:19:76:e7:32:d1:9f:27:b3:3f:d6:b4:54:3e:5d:22:44:d2:
         ca:d9:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:48:48 2026 by rpki-client