Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dff261e3-59a3-3aa2-bca3-3447cc83c87b.roa
File:                     dff261e3-59a3-3aa2-bca3-3447cc83c87b.roa (raw, json)
Hash identifier:          a+sRj0zdzIz3AF1/5MiT4p5xcNhpj4yT5wJedLu3XPM=
Subject key identifier:   55:8D:09:24:69:D6:CC:6F:5A:E4:1B:5B:C5:13:5E:6A:34:09:D2:F5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F23C263A5660C5E43049FEB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dff261e3-59a3-3aa2-bca3-3447cc83c87b.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     399163
IP address blocks:        204.74.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:63:a5:66:0c:5e:43:04:9f:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=8581fca4-ce56-49ab-8dea-111e2b535a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:05:75:0f:75:58:76:e5:d8:83:5a:4b:29:
                    f8:cf:7f:91:93:55:4c:0b:dd:75:9c:f7:84:b9:46:
                    5d:c5:56:2f:b2:ad:eb:55:cc:cb:5e:3c:12:19:3e:
                    84:37:82:ee:29:8a:b1:08:a6:ee:71:7f:41:85:4c:
                    d5:cc:7b:5f:84:48:57:5a:e4:37:a1:b7:96:68:77:
                    a0:a2:e0:19:8e:cb:c8:1c:af:c1:b1:cb:78:f6:23:
                    1c:d2:df:97:a5:1b:59:4c:64:d5:3c:d3:28:f1:89:
                    dd:20:b3:50:d1:3a:6f:08:1e:10:fa:be:a7:d5:5f:
                    98:a7:90:fb:db:9f:d2:d0:8a:d2:4c:1a:39:fe:23:
                    94:77:4f:3c:5c:cd:1b:82:46:51:72:79:2b:e6:61:
                    6a:27:b7:ba:46:69:54:21:45:6d:36:bb:da:d9:6c:
                    34:59:7f:d9:2f:3c:bd:41:7a:2d:2b:aa:ae:42:71:
                    68:14:99:cb:c7:bf:f2:11:4b:6c:70:06:f7:4b:04:
                    d0:28:f5:2b:88:3f:07:6e:55:e2:24:06:6a:20:23:
                    d6:c6:2f:51:af:b4:bb:89:ac:f0:de:7a:87:44:9d:
                    9f:fc:fe:3c:bd:37:8c:0d:ba:2c:de:84:4b:a7:64:
                    c9:b4:46:cc:72:be:91:fa:b6:9f:0f:bd:0d:92:67:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8D:09:24:69:D6:CC:6F:5A:E4:1B:5B:C5:13:5E:6A:34:09:D2:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dff261e3-59a3-3aa2-bca3-3447cc83c87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ec:0f:a5:a8:90:cd:b9:e4:2e:31:42:3c:51:cd:82:6a:b4:
         f6:da:0e:ed:25:a5:92:3f:f2:bc:f7:d5:8e:13:d5:b5:37:c8:
         10:be:61:2b:0c:af:a9:b2:48:e6:c0:90:2f:a1:0f:c4:6f:d0:
         84:ae:3a:6a:ac:67:80:7a:36:40:0f:be:6d:03:ac:85:b3:80:
         a8:0c:29:a5:bd:4f:66:b2:bd:4f:cd:98:61:ca:8c:89:74:13:
         59:02:e8:e1:6c:3e:95:4e:1b:96:19:65:30:7a:79:e8:4c:ad:
         3c:15:e2:4a:a0:83:0c:ca:fb:7b:89:ff:96:c0:2a:63:f9:70:
         96:db:e9:96:db:69:68:3b:68:76:4d:f0:ec:5e:d0:92:bc:f9:
         d3:0e:a2:11:81:e3:18:9f:80:d2:20:23:f5:67:92:51:d3:6e:
         a1:89:53:99:0b:cb:04:04:d6:27:47:01:d2:16:c0:bd:54:ec:
         99:38:6d:37:f0:16:bd:d6:e1:ab:5e:ff:f9:c8:57:c0:95:3d:
         17:45:2a:e1:84:73:fa:f0:da:c0:ea:bd:01:bf:cc:d8:84:40:
         d7:03:e6:b7:29:3f:57:47:c6:6c:d3:65:56:b5:13:9d:8a:c4:
         de:6b:b1:e5:e7:7c:8c:26:d9:ee:d2:cc:aa:49:94:45:85:c6:
         bd:a7:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:31:27 2026 by rpki-client