Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88f19cb8-f2b9-39f8-b2f1-7b62b14ca5e2.roa
File:                     88f19cb8-f2b9-39f8-b2f1-7b62b14ca5e2.roa (raw, json)
Hash identifier:          dXM34m6+rRcNSlsEcNpmPHCJBjSKJyA0MjRtOpW8VoE=
Subject key identifier:   A0:F8:B6:01:F4:71:43:DD:5B:57:FE:52:68:14:F8:AD:7C:7E:43:17
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD6026C7C68545E5AE01F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88f19cb8-f2b9-39f8-b2f1-7b62b14ca5e2.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397232
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:02:6c:7c:68:54:5e:5a:e0:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=c1b286b4-9a4d-41ed-9917-7a2261f231be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:d7:fe:63:d6:2b:dd:0b:0a:7e:e3:1d:50:
                    1d:bb:0e:2c:cb:c7:8f:61:8d:1d:b3:91:73:99:fc:
                    e8:39:88:b1:25:f9:89:81:dc:79:d7:87:6f:c6:ac:
                    e3:ae:c7:57:9f:5b:55:a5:6b:80:b2:ff:c5:d9:b7:
                    d4:eb:b4:2f:7d:83:6e:9c:9c:43:a0:02:a4:5f:40:
                    c8:5d:53:8c:18:ac:20:b8:06:35:6b:33:0b:e0:10:
                    a1:13:b8:b5:0b:34:1d:d4:8e:a2:a1:96:c9:61:64:
                    bc:c2:64:02:32:4c:c6:0a:ba:10:b3:0d:30:99:7c:
                    3a:78:ac:86:99:c6:ec:6f:df:26:ae:3e:4f:1f:52:
                    02:e8:5c:bc:1c:d4:b8:ff:62:9c:63:d3:49:11:f4:
                    d7:42:aa:34:c4:6a:b2:78:4b:c2:62:84:0b:54:04:
                    18:8e:74:f7:73:9b:3c:6b:f4:0f:30:43:f9:ce:31:
                    12:4b:49:d3:d9:14:81:a3:94:38:0a:39:60:51:95:
                    1b:19:11:55:62:6b:16:b0:cc:37:54:18:24:39:07:
                    16:ef:aa:58:25:23:4d:e6:12:92:ce:5c:3b:9a:c4:
                    e0:f0:8d:a5:f6:a2:37:06:f8:64:1e:31:0d:62:aa:
                    fd:0a:66:c6:f3:3e:1c:c1:98:0c:e3:27:6f:8b:23:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F8:B6:01:F4:71:43:DD:5B:57:FE:52:68:14:F8:AD:7C:7E:43:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88f19cb8-f2b9-39f8-b2f1-7b62b14ca5e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:84:f2:f2:81:2b:a7:ba:e9:bb:f1:58:84:c8:a1:45:d0:8b:
         08:f0:93:e9:49:3b:df:99:01:34:4c:3c:ba:90:77:34:e1:4e:
         f7:0e:11:c4:2f:31:18:dc:90:d1:6b:e8:5c:1c:04:05:c4:d9:
         dc:05:e6:81:b6:5c:b9:70:4e:38:14:c4:19:d1:54:00:bf:9f:
         86:1b:89:f7:d2:50:8e:ff:3e:05:0b:7c:44:6e:b4:09:22:8d:
         34:98:35:d3:54:8a:08:d2:58:1c:e8:f0:f5:2f:94:dc:1b:5b:
         bf:ef:14:17:e7:63:f2:c9:dd:0e:38:5e:f4:4a:bd:69:12:3c:
         86:8c:1b:3a:98:38:19:24:af:3d:54:8a:2f:3c:b9:20:4c:ee:
         56:9d:33:39:9b:b4:77:b2:4a:73:24:e0:98:0f:46:c1:01:45:
         d3:6e:65:44:5b:6a:77:98:96:26:f8:f3:be:86:c2:37:f2:07:
         20:5d:10:0e:29:1d:d3:dd:52:ab:e5:61:ea:50:6c:50:48:87:
         e1:05:f5:8b:82:ce:72:71:b5:b3:8e:09:97:6a:f6:03:5d:bb:
         44:64:75:7b:88:75:d3:b7:79:51:45:7e:07:24:c5:ad:a5:66:
         e5:f9:fc:53:59:83:3b:b3:b6:9c:c4:d6:c9:c3:5d:c3:36:e2:
         11:e5:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:58:42 2026 by rpki-client