Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99340e16-f8ef-326a-9da9-160422f75b3a.roa
File:                     99340e16-f8ef-326a-9da9-160422f75b3a.roa (raw, json)
Hash identifier:          6par9lIb7hQUtzObZXpjZJQH2+F0u+qoxplcSfhSaYQ=
Subject key identifier:   0A:15:09:B9:50:06:D8:99:95:E2:51:7B:B7:BF:F6:1C:F1:86:6F:05
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD6044F7C8D710C9DAB6F30
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99340e16-f8ef-326a-9da9-160422f75b3a.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397238
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:04:4f:7c:8d:71:0c:9d:ab:6f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=a2a37aa8-9f31-4e08-90e7-01aa645e5548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:d0:38:ce:90:ec:cf:3b:41:83:a3:e7:09:
                    85:8d:dd:2b:be:38:cf:a8:b0:74:21:c0:78:bf:71:
                    64:c5:e7:4d:59:5f:04:8e:7c:86:a1:8b:3c:1b:2d:
                    f7:b2:87:e4:4f:93:bf:73:8f:03:e8:3f:a9:3f:71:
                    6e:5d:77:75:94:e4:31:d4:0e:ae:14:bc:0a:73:cb:
                    20:8c:1e:b7:d4:5b:86:14:ed:eb:f4:b9:0a:5a:55:
                    47:25:a9:cb:90:b5:97:f1:e7:57:7f:c6:0d:5b:4b:
                    9a:f8:d0:54:e0:7e:61:06:2c:be:fe:57:04:8e:99:
                    63:cb:0b:ca:d3:a8:b4:fc:d8:1b:fb:45:a6:a2:ce:
                    58:b9:f8:a9:e9:4a:65:c8:96:14:5b:24:de:59:b5:
                    ef:e7:25:fd:4d:64:a8:23:7b:a3:d1:40:c2:8c:3e:
                    39:a3:d0:e6:ac:99:29:34:8e:0e:1d:68:79:0a:45:
                    3f:bc:b8:85:72:03:8e:2b:7a:5b:73:80:b7:74:39:
                    f7:1b:6b:ec:10:10:e1:c8:4a:a4:43:2d:b1:dc:56:
                    e6:89:c0:e4:e5:83:33:56:df:2e:c9:c0:46:22:78:
                    f4:f5:3d:03:e6:00:7f:ca:7e:93:fa:0f:a2:a4:31:
                    d9:b0:32:b9:2b:92:d0:78:cf:c5:bf:a4:a9:14:66:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:15:09:B9:50:06:D8:99:95:E2:51:7B:B7:BF:F6:1C:F1:86:6F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99340e16-f8ef-326a-9da9-160422f75b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:fa:80:2b:af:58:84:cf:3b:5f:43:e7:eb:fb:db:43:4f:
         86:b1:20:b1:db:ba:77:d9:f4:e9:99:71:60:67:c2:c0:6a:22:
         f1:84:e4:6c:2e:ec:4a:2a:3f:8d:cf:73:5f:73:df:1d:60:b9:
         dc:3d:f5:eb:44:a3:39:31:38:27:d7:d4:50:70:bb:bb:38:d9:
         4a:5d:81:b3:98:f6:a1:b3:5d:21:a9:42:e4:2e:1b:7a:b9:83:
         ed:01:82:12:8f:ad:e6:35:ee:bc:dd:6c:11:75:b5:c3:ae:d0:
         6f:4c:89:8f:27:14:28:86:f9:9b:d1:40:d6:97:dd:e1:e9:7b:
         a9:77:e6:bf:e7:ba:85:2d:b1:f5:56:1b:f3:7a:ea:d6:01:fc:
         1c:4a:5c:67:d7:6e:5e:e9:5c:aa:c1:32:2f:2b:9f:aa:e0:72:
         2b:e7:b6:c4:ba:2a:1f:66:be:81:6b:30:ae:5b:60:48:e3:64:
         6e:8f:41:e5:22:3e:2b:16:63:88:79:42:34:5e:05:b4:ec:23:
         9b:85:02:f8:69:c5:0f:fc:71:ce:c4:1b:48:c3:37:2c:cc:7b:
         1e:5c:a3:f9:f8:dd:d7:39:f9:bf:c1:07:2b:1a:ac:30:33:75:
         8f:59:15:79:95:a5:78:c8:f8:c6:92:90:9a:d3:44:05:fb:3c:
         5e:8d:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:52 2026 by rpki-client