Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7e0df1a-7c6b-32ff-a166-9ec9814e3fc1.roa
File:                     c7e0df1a-7c6b-32ff-a166-9ec9814e3fc1.roa (raw, json)
Hash identifier:          dHqa2EeCTfr/h270tHWg3mfIm4D23ax1IJZ9m+ySpME=
Subject key identifier:   93:5C:9B:1C:39:C1:B0:35:A1:6E:12:24:21:85:42:C5:8F:07:9C:46
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B09CA0C06FE911C8FBB780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7e0df1a-7c6b-32ff-a166-9ec9814e3fc1.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397225
IP address blocks:        204.74.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:9c:a0:c0:6f:e9:11:c8:fb:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=b468f43c-6616-4d29-80e5-72ce96e4de53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e1:a0:24:a6:bd:c9:03:4c:77:10:85:99:3c:
                    eb:5e:bb:0d:97:b4:38:08:2e:a2:77:4b:a1:10:61:
                    2c:d0:0e:86:9b:e9:a1:d5:8e:ea:ce:33:38:ca:21:
                    80:1f:92:d4:df:9d:0d:df:72:c3:c1:0c:27:b7:ac:
                    5e:aa:33:2e:41:a6:3e:82:83:12:ba:da:6a:3a:bb:
                    f7:b0:7f:0a:61:51:01:47:65:33:23:7a:0a:4a:5d:
                    dc:4f:5a:67:75:eb:ad:eb:f0:95:a7:a7:33:99:80:
                    73:97:53:4b:ad:0e:d0:72:79:80:48:92:16:22:f5:
                    19:14:87:40:61:f5:65:cb:56:3f:ea:92:1c:87:0e:
                    83:e4:06:4f:82:95:49:f5:a7:b1:8e:a6:b7:7e:37:
                    70:0e:0f:1c:55:d9:9a:e0:fd:cd:76:75:bd:f8:a3:
                    67:9f:22:6d:d0:41:70:4f:9e:95:a8:2c:d0:87:8f:
                    d3:64:1e:bd:90:61:41:5a:3c:eb:55:2a:96:c4:4b:
                    b3:83:48:93:82:36:ef:75:e0:77:9d:9c:99:5c:ed:
                    2c:e6:b0:4e:75:3b:0f:2b:a0:58:92:21:28:15:0d:
                    67:5f:aa:85:5e:fd:d8:e9:5a:66:00:1c:aa:dc:ab:
                    ca:cf:03:7b:e7:b8:d0:f8:78:ac:4d:55:c4:03:4f:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5C:9B:1C:39:C1:B0:35:A1:6E:12:24:21:85:42:C5:8F:07:9C:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7e0df1a-7c6b-32ff-a166-9ec9814e3fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:41:5d:8b:4a:7d:dc:98:bf:76:cc:02:4c:58:cd:14:52:c7:
         5b:4f:3a:10:f9:3e:12:38:0d:99:53:e6:a3:61:1b:5c:4a:e5:
         5f:d2:f0:d6:5c:53:44:f5:2b:8c:0e:b1:3d:78:e2:b3:6c:79:
         c3:da:81:0d:55:10:16:75:51:cf:c2:0d:5e:e3:fa:37:ae:e9:
         ce:13:fa:e0:48:e1:e2:17:b7:bc:86:2e:e3:54:94:91:94:df:
         74:86:71:ef:08:63:64:12:cd:46:3c:92:94:a0:7f:e2:c0:94:
         35:95:f9:f6:f2:16:b8:1f:ab:80:e4:4a:6a:cf:fe:12:b4:8e:
         7c:2e:af:9e:c2:0a:c9:a0:3b:6c:02:11:5b:2b:f1:0e:07:b6:
         d1:ba:8b:af:b8:a1:54:16:57:32:fb:dc:de:04:cb:4f:a4:d4:
         68:ab:1e:01:95:3a:07:85:e6:3f:95:bb:af:07:e6:b3:d2:df:
         bf:60:38:14:85:50:c2:52:cc:ca:b4:82:6d:5b:0d:70:78:d8:
         f4:2e:85:0e:e6:4d:c7:b7:29:18:cb:15:ab:cd:d6:c0:de:13:
         67:6e:14:5b:87:7f:bd:f6:81:1e:5a:8a:26:3b:57:d3:2e:aa:
         6c:73:aa:52:01:5d:dc:86:68:28:af:5e:7b:e4:cc:36:b4:34:
         1e:bc:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:45 2026 by rpki-client