Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12ecd039-a589-3c66-ab93-e0b2df458cc8.roa
File:                     12ecd039-a589-3c66-ab93-e0b2df458cc8.roa (raw, json)
Hash identifier:          XcqXvRMJXIldnaVZvfCDARklDuunAqWI4du+bNMAqaE=
Subject key identifier:   AC:55:AA:D3:29:9D:4B:A8:09:27:06:26:9E:AE:88:D6:DD:CA:06:8B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09128712239638621D092C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12ecd039-a589-3c66-ab93-e0b2df458cc8.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397213
IP address blocks:        204.74.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:87:12:23:96:38:62:1d:09:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=d2fd1189-45b2-491f-b290-1e3ebc59c740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:60:5b:b1:e0:f3:a1:e1:2d:4b:6e:f0:cb:99:
                    6a:c0:16:6f:48:80:21:34:4a:db:e2:9d:1e:96:7e:
                    fd:5d:d1:96:29:6a:a5:43:79:56:3b:c5:17:ca:03:
                    33:0c:09:53:00:21:a3:b2:2f:d6:91:ed:6c:3a:ac:
                    1b:3c:65:29:e7:f0:96:32:0c:38:05:1b:ae:40:28:
                    c3:4f:44:b3:89:70:c2:6b:9b:7d:81:99:b3:6a:03:
                    af:14:cf:0a:1e:9f:d3:c5:53:9c:00:46:4a:1b:18:
                    34:30:d8:fa:b0:ee:31:ff:71:38:49:7c:91:1b:50:
                    02:4c:d7:79:de:08:50:5b:9f:53:8c:46:57:e0:8b:
                    67:24:1d:55:a7:12:26:94:cd:dc:b8:ca:a1:3e:6d:
                    a0:2c:54:4f:f4:b7:99:6f:83:08:3a:98:33:34:9e:
                    80:8a:7f:fe:49:03:d4:06:67:83:e3:0b:f2:38:02:
                    a5:4c:60:1e:46:6c:28:0c:67:ea:0f:64:9c:3d:72:
                    72:7e:a0:4a:2f:08:80:fc:69:8a:0a:fc:50:24:a8:
                    34:dc:35:0a:98:99:3e:72:a2:7b:e7:82:6f:ea:0a:
                    68:81:b5:4c:dd:7b:8f:d8:5e:a5:c2:2e:59:c7:a5:
                    27:b1:4f:cf:2e:b6:72:52:51:c0:a9:e6:c7:12:ed:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:55:AA:D3:29:9D:4B:A8:09:27:06:26:9E:AE:88:D6:DD:CA:06:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12ecd039-a589-3c66-ab93-e0b2df458cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:ca:44:4f:93:2b:dd:f4:36:7e:f4:7c:39:ac:45:6c:5b:
         e2:ba:d0:a1:13:d1:42:1d:98:4b:36:7e:5c:27:63:b2:5b:d2:
         68:79:8e:a6:64:de:3e:c0:21:53:34:a4:02:46:8c:03:90:e6:
         a8:19:d7:59:00:3f:3b:e7:e3:00:eb:70:95:54:00:3f:d4:54:
         fa:ba:0e:84:8a:c5:0c:4f:4e:60:3c:25:9f:34:85:1f:9f:31:
         7e:18:3f:92:29:5a:c6:8b:b7:83:dd:ec:d0:3a:1a:2d:fb:a7:
         e6:1a:00:d1:be:e8:66:c6:72:40:4d:eb:d8:26:d4:f7:d7:dd:
         05:66:e5:7f:c2:9f:94:5c:43:60:90:1f:d1:cc:89:48:34:a4:
         5a:c0:e1:56:c4:c2:fb:91:55:75:22:f8:fb:8c:31:f9:c8:fa:
         a3:ca:6c:6b:c0:90:e8:fb:8d:49:ea:07:a5:b1:79:8d:14:47:
         07:31:f0:d6:9d:61:06:e9:38:3f:88:5a:cd:95:19:0b:77:27:
         7d:d5:2a:0e:19:3a:82:4a:cc:4b:8d:0e:67:4d:39:a8:67:e6:
         92:87:77:6a:01:86:25:66:cb:34:d6:d6:94:a8:e4:92:76:19:
         83:84:ce:56:9d:92:dc:02:06:00:cb:10:dc:2e:a2:71:eb:d9:
         e6:7c:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:38:21 2026 by rpki-client