Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f87345e7-6e87-350e-afd0-af271555f3a7.roa
File:                     f87345e7-6e87-350e-afd0-af271555f3a7.roa (raw, json)
Hash identifier:          qJgWNnWRXgjPYRyt9Gv174C9st9TUyTDxOpfRNGGADA=
Subject key identifier:   22:40:F5:06:F5:FA:28:C4:1D:E0:8B:7E:3A:F2:05:1A:B5:8F:98:33
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA7992A387E81768EDC6A0BE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f87345e7-6e87-350e-afd0-af271555f3a7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397226
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:2a:38:7e:81:76:8e:dc:6a:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=330d0976-c646-4959-accc-c6d7e86853c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:92:d7:2e:cc:7c:88:be:02:e4:25:c0:93:
                    94:91:f5:d7:1b:39:a7:de:f5:60:7d:ba:27:b1:b2:
                    4e:56:da:05:39:da:9b:e4:36:41:23:b0:40:d4:2e:
                    07:ac:87:0a:55:49:7c:0e:4b:4d:35:25:21:d8:81:
                    25:78:ab:ef:41:8c:64:d0:ce:93:63:56:0a:a2:46:
                    39:14:94:66:f7:4f:9f:a8:83:0b:9e:5e:7f:37:d9:
                    de:9c:53:16:d0:3c:bd:a7:38:e7:4b:41:ca:21:10:
                    95:a5:14:e8:cc:ed:93:0a:e4:36:33:92:9d:83:43:
                    23:7a:06:60:12:0d:51:ca:a5:55:7e:73:d4:33:8b:
                    c9:be:51:d9:60:c0:c9:4a:d6:e0:a6:1c:a9:b5:82:
                    ed:c4:19:89:05:7f:86:71:36:e3:b8:36:7c:b0:3e:
                    63:bc:92:da:ed:28:e5:d1:8c:a1:26:79:e9:e2:2d:
                    2c:b9:db:9c:a7:2f:ff:8e:51:69:c3:86:60:e1:33:
                    25:48:da:bf:98:89:af:cd:56:de:ab:a4:57:79:33:
                    ca:8b:76:79:50:ed:35:3d:60:68:44:a0:4a:e4:ec:
                    c6:20:36:6e:33:0d:11:a5:76:54:5e:19:27:2b:0e:
                    36:90:fe:d8:5e:24:37:3f:f2:af:99:49:c0:0f:8c:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:40:F5:06:F5:FA:28:C4:1D:E0:8B:7E:3A:F2:05:1A:B5:8F:98:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f87345e7-6e87-350e-afd0-af271555f3a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:87:c7:24:a1:39:35:81:a3:10:47:94:7c:18:f8:6e:6c:b4:
         99:04:77:c6:7a:fd:25:27:f1:54:87:84:0a:e1:07:bf:4d:29:
         ee:f2:ac:9d:9a:1b:eb:c8:24:9a:5e:c9:94:52:39:bb:8a:c4:
         96:3f:85:8b:2c:51:52:26:da:89:f5:cf:89:ad:d6:b2:74:75:
         16:41:d7:cf:65:b9:2a:c8:82:88:e6:c9:c1:f3:35:80:ce:1a:
         2c:80:67:55:f9:a5:a6:5a:6a:94:24:6b:87:3b:06:29:6c:22:
         1e:dd:e1:28:79:e2:a7:ba:71:14:97:e6:44:d7:e9:01:de:21:
         b2:54:88:5d:2c:3a:2a:5e:1b:b6:34:0b:59:19:03:fc:b8:25:
         72:c9:a0:47:56:2f:63:81:69:3d:82:52:25:2c:7b:ca:5b:ef:
         7c:b5:16:1f:12:a9:35:f1:61:01:ad:96:2f:2d:5a:da:b3:33:
         11:35:b5:92:7b:9c:32:3b:a9:dc:e1:46:b4:7d:1e:3b:bf:f2:
         3c:63:1b:fe:ba:03:06:28:dd:af:8a:ec:e3:a1:36:30:7a:e8:
         8d:fb:0c:78:3f:2f:6e:5a:cb:29:3e:0f:3a:7e:f1:64:04:40:
         08:94:3a:3c:aa:bb:ce:1d:a5:6b:8c:49:6b:a9:d7:a2:aa:ec:
         37:80:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:38:28 2026 by rpki-client