Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d3dafd96-0b6b-36df-a43b-bb46c4bac7fc.roa
File:                     d3dafd96-0b6b-36df-a43b-bb46c4bac7fc.roa (raw, json)
Hash identifier:          TF1Phe12jBxMTXsrwkdKo0D24Zup3u31Y7yFYxgimTs=
Subject key identifier:   DA:62:72:CD:D5:EB:DF:88:30:B1:E5:1E:FA:54:CB:5C:D1:E1:B8:68
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CEFF24C6860E144B7D01C7600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d3dafd96-0b6b-36df-a43b-bb46c4bac7fc.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     397235
IP address blocks:        204.74.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:4c:68:60:e1:44:b7:d0:1c:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=f8d25768-b16e-4477-a4c4-d6ed57805ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:e5:33:af:73:ed:1b:7f:42:b1:21:c4:de:
                    3e:0b:83:b3:10:5b:e2:e0:44:c6:45:00:bd:fd:57:
                    a6:95:9d:07:c1:84:b7:8f:4c:af:4c:d9:1d:72:54:
                    be:33:9b:5a:97:0b:b0:e9:21:d3:95:77:84:06:89:
                    69:3d:71:93:f5:ab:63:1b:93:ca:a2:75:88:70:0e:
                    f9:94:f9:d0:80:4b:ac:21:b3:9e:27:44:28:0c:f3:
                    5e:d8:b1:66:e0:84:11:d8:ef:54:77:88:76:6e:c3:
                    7d:3a:86:f1:6e:f8:e7:1b:5e:a9:2a:51:73:f5:66:
                    24:18:50:88:c2:cd:04:1a:aa:58:c8:5e:21:ea:ef:
                    07:42:f0:73:20:dc:92:49:67:52:1b:2c:ec:1d:39:
                    84:2e:67:44:35:c5:bd:06:62:75:6e:93:aa:cc:98:
                    4d:3a:2f:73:17:aa:21:eb:ab:d1:a0:30:0a:db:4e:
                    aa:06:5f:51:05:43:b9:f5:22:9c:34:32:b8:e9:e8:
                    e3:e1:d5:02:a5:ed:e3:0c:c5:a6:07:df:52:6e:c5:
                    57:c4:ae:a7:90:23:ce:6b:f4:74:e1:26:41:95:ec:
                    80:4a:8a:89:6f:d4:f3:80:d2:22:4e:60:9c:7e:2a:
                    8e:61:1d:32:20:45:b9:54:73:79:be:6b:34:16:0f:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:62:72:CD:D5:EB:DF:88:30:B1:E5:1E:FA:54:CB:5C:D1:E1:B8:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d3dafd96-0b6b-36df-a43b-bb46c4bac7fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:72:bc:56:ca:1f:61:34:55:e5:fb:36:f1:3e:1f:46:84:65:
         fd:7b:c1:ef:43:44:d6:a8:b7:ef:5f:a2:de:21:89:af:56:70:
         34:88:db:06:a2:62:f9:58:0e:cc:9a:13:e4:2e:d7:08:6f:35:
         1b:01:e5:26:a0:88:a6:ff:69:39:84:4e:e4:66:03:70:96:73:
         c6:6a:14:cf:61:77:fa:8e:60:23:ef:21:0f:a4:1b:3c:3b:30:
         5d:4b:3d:74:b6:1b:37:96:cc:7b:82:97:ab:9a:e5:78:4c:22:
         41:27:3a:c5:2f:87:49:c3:e7:0e:c2:7b:02:5e:87:82:10:da:
         1d:66:c1:67:97:f8:9c:87:12:df:7f:9f:b7:d6:2d:cd:83:ff:
         8b:5c:5d:95:02:4d:17:bb:12:a3:18:12:44:23:43:78:76:3a:
         1f:58:35:46:ba:66:37:8a:bb:98:6e:6c:0a:f0:6f:be:f5:87:
         f1:39:b4:38:05:30:62:ce:9a:a4:2e:11:e0:56:bf:9f:ae:b6:
         c9:57:5b:28:b1:d3:62:c7:4b:5b:a7:be:4b:36:95:5e:00:c4:
         3c:1d:72:ed:1a:71:c9:58:9f:28:c8:47:f9:d7:68:60:85:64:
         8f:07:58:33:bb:d4:29:5a:b5:43:55:2a:a8:21:8c:ab:73:17:
         9c:74:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:15 2026 by rpki-client