Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c86ec7de-d2c1-39fe-be93-1e09cb2ce80c.roa
File:                     c86ec7de-d2c1-39fe-be93-1e09cb2ce80c.roa (raw, json)
Hash identifier:          LJFQWLac/wp6I29ssB8QaPCGZWXMLu9Gr3qszo4LISA=
Subject key identifier:   00:43:08:98:7A:27:C3:CA:69:88:E3:1E:E2:E7:FF:EA:AE:0C:FB:9C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA7992B045D59B78AB6ADD600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c86ec7de-d2c1-39fe-be93-1e09cb2ce80c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397235
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:2b:04:5d:59:b7:8a:b6:ad:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5c8ad980-63b6-4d12-aa72-dfedc67e907d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:89:bd:43:2c:20:1f:1d:f7:85:f5:37:17:
                    51:23:85:ef:ea:f7:a0:00:3c:0e:2d:1d:9e:5d:51:
                    ab:fa:80:99:c6:cb:35:be:c7:74:f6:d7:57:3e:eb:
                    f6:2e:13:8d:f6:4e:a7:e5:31:b8:12:f7:5c:0d:44:
                    48:32:53:a7:cb:2a:22:64:6c:d6:64:62:1c:c8:8f:
                    6c:59:99:4a:c2:13:b9:f7:e4:61:62:ab:dd:0a:f6:
                    19:e7:d2:78:4a:70:12:03:af:9c:8e:04:8f:0c:bb:
                    f4:00:b2:f0:3d:84:16:12:b7:fb:85:18:2a:2c:34:
                    7d:db:98:34:0e:c3:c4:80:65:f9:eb:76:bd:ad:3a:
                    ea:de:65:10:f5:df:62:d2:6f:99:0a:b5:74:06:44:
                    05:51:8a:9f:17:2b:a7:5d:98:d0:da:39:0a:29:ef:
                    b4:bf:87:25:14:1c:da:bc:09:cf:cf:d6:11:c4:d6:
                    ac:f1:01:96:dd:5b:31:2e:99:7c:3a:fc:e6:1e:b3:
                    75:2d:44:01:cf:eb:9b:f7:2f:f0:ab:a2:6f:a1:f8:
                    97:5a:45:d7:0c:ce:27:ed:76:f3:c6:37:a6:c7:12:
                    54:59:d7:54:f7:ca:1f:31:48:78:df:88:53:64:c9:
                    39:dd:cc:66:22:1f:31:9e:5e:34:66:b1:04:16:04:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:08:98:7A:27:C3:CA:69:88:E3:1E:E2:E7:FF:EA:AE:0C:FB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c86ec7de-d2c1-39fe-be93-1e09cb2ce80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:76:7b:29:98:49:88:44:3b:f8:18:49:47:5e:0f:e0:a2:70:
         5e:24:96:27:3e:04:40:a5:85:a4:99:46:76:c3:f4:a1:7f:ff:
         fc:a4:b4:96:29:2b:46:53:a8:f8:97:6b:ee:00:98:e5:15:93:
         c1:48:dd:71:05:81:ca:ba:9d:9f:5d:09:70:66:d3:67:57:6e:
         93:97:21:dc:48:ed:75:38:bf:ea:ed:15:57:7f:60:24:03:ba:
         94:ca:6b:da:24:36:c4:1d:bc:19:a3:3a:ab:38:47:aa:71:27:
         ac:37:9f:7d:49:15:23:0e:50:40:b1:c3:3f:65:22:a0:6f:d8:
         59:88:75:bb:ff:57:cc:5e:e0:ee:33:7c:2c:5b:c6:e9:20:22:
         64:12:e9:3f:87:96:33:af:e2:5b:39:26:11:24:48:90:a3:59:
         48:4e:35:a9:fe:21:d2:92:c2:b5:17:59:91:43:75:a8:ad:a1:
         69:46:c3:20:57:03:a0:11:aa:a6:31:3a:52:8a:c5:11:52:14:
         36:3e:61:2b:93:f3:5e:ae:fa:d6:a3:ff:80:e9:dd:7e:4e:dc:
         8e:19:ec:0a:6d:57:88:5e:88:6c:1a:7d:f6:fc:66:68:60:5c:
         a1:12:db:73:4b:d1:00:dd:ac:23:c4:d5:4e:bb:2f:88:4d:63:
         aa:e1:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:51:44 2026 by rpki-client