Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e12e394b-a769-3beb-bde2-2d55fc979db9.roa
File:                     e12e394b-a769-3beb-bde2-2d55fc979db9.roa (raw, json)
Hash identifier:          b1vsvxnKdU0Nx0Oi50HBSKNxQrEVFAmgfb2PpoX6H8Y=
Subject key identifier:   4B:35:B7:6B:81:7E:0D:1D:D9:32:8D:27:00:99:F3:5E:37:B0:76:5B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B099D8F441AA0C32519700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e12e394b-a769-3beb-bde2-2d55fc979db9.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397231
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:99:d8:f4:41:aa:0c:32:51:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=fdddc96c-9d89-475a-b477-c73d80187046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:c1:03:25:9e:21:ae:a9:98:79:56:2b:82:
                    05:b1:df:5f:61:e5:83:b7:65:49:11:63:40:61:b9:
                    fb:fa:64:3d:4b:7a:5d:20:11:36:e7:cd:8b:f7:71:
                    61:06:b1:6f:ed:18:e7:fb:e5:50:d0:79:56:7a:2c:
                    ce:fd:07:2f:32:cb:c2:84:1b:e6:63:e2:72:e2:de:
                    b6:22:3e:22:2e:e6:0d:01:30:c4:7f:0f:5b:7b:fd:
                    88:7c:f7:e9:ba:c5:15:99:e4:9e:13:dd:96:28:eb:
                    5f:82:23:b4:bf:a6:e1:20:b3:24:5e:bd:f9:ad:ef:
                    91:de:68:0f:bd:e1:9b:b9:c8:58:dd:68:74:83:49:
                    5a:9d:e3:97:22:fa:0a:83:ef:7a:b0:00:98:2a:49:
                    ff:99:e1:d0:4c:ec:e2:6b:e8:9c:cf:2c:85:e4:3f:
                    90:56:d7:d6:14:10:29:f7:31:d9:8b:9d:18:57:4a:
                    4e:36:5d:9b:b8:3f:94:fc:d2:3b:fa:a8:16:c6:ac:
                    df:83:1d:41:eb:09:5c:4a:c5:77:88:10:de:89:1c:
                    d2:b4:c6:62:87:dd:5b:60:2a:83:88:6a:7f:7c:f1:
                    8e:6b:e2:10:bb:43:1a:05:b8:35:6b:73:ec:18:d9:
                    1a:0b:26:ea:3c:09:fa:cf:2e:69:0f:d8:b1:d8:f0:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:35:B7:6B:81:7E:0D:1D:D9:32:8D:27:00:99:F3:5E:37:B0:76:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e12e394b-a769-3beb-bde2-2d55fc979db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:3c:7f:ce:c4:7b:a1:8a:7e:2b:7e:7a:97:71:af:d9:e8:
         92:ae:e2:f3:a0:7b:1a:5b:bf:b0:b3:57:d5:18:c4:3b:5a:5d:
         4c:be:16:0b:58:8e:82:ac:d1:9d:c7:36:dc:d5:35:dc:a9:42:
         5a:71:db:13:aa:c1:cc:e8:51:02:79:7d:d0:87:8f:d7:de:3f:
         f7:be:f1:b5:31:18:fc:e3:8a:90:29:9d:00:43:27:5e:b9:31:
         5e:56:3f:07:e4:af:8f:fd:c7:9d:92:03:ad:ad:c0:d5:a6:7f:
         fe:c7:aa:cc:2f:f9:51:9f:04:bc:99:b4:da:4d:ac:df:c9:91:
         39:57:8b:cd:61:ef:79:0b:0d:4f:c2:a7:a0:ec:ed:fd:29:d0:
         f3:94:a6:e2:f0:8a:f1:d3:cc:b2:53:dc:be:15:d5:20:a7:ec:
         dc:65:e1:78:50:3b:4a:f7:04:b9:b3:34:d7:e5:05:44:8b:c7:
         2d:49:3a:ec:e4:aa:1f:0a:1a:65:3e:91:8d:3b:4f:ea:f3:84:
         d2:41:67:b5:1b:66:a9:65:e3:10:9b:10:26:a0:d2:2b:3e:78:
         c9:71:24:2e:dc:c1:0e:05:3d:81:85:ef:58:cf:13:4c:82:48:
         a0:35:d3:52:f3:f5:68:2c:e0:f7:cf:4c:b1:c0:8a:a2:78:72:
         af:8d:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:56 2026 by rpki-client