Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b533a29-55d1-3b22-9974-0efccbb6eae6.roa
File:                     2b533a29-55d1-3b22-9974-0efccbb6eae6.roa (raw, json)
Hash identifier:          9hA2twWeEsvZVSfR3hIK0QtF35pDdC7Y4mGPxqAx9yQ=
Subject key identifier:   E7:93:A6:B1:58:5C:43:CC:73:A5:87:E1:CA:83:69:FF:3D:42:62:C1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D1B1A3A20AEFB96339B023480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b533a29-55d1-3b22-9974-0efccbb6eae6.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397230
IP address blocks:        204.74.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:3a:20:ae:fb:96:33:9b:02:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=e9809ac1-c59b-41a5-8445-0d9fc078cb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:c2:b7:d3:ec:e3:c6:bb:9d:47:4d:99:84:
                    46:53:0f:3c:6d:62:28:a1:3e:6e:47:03:87:36:82:
                    dc:e9:0d:64:3d:f0:ae:72:27:00:9e:e4:bb:a2:ef:
                    b5:7e:78:9d:ee:34:cb:0d:9f:4c:07:5e:c3:d7:6d:
                    25:e7:93:34:3e:67:71:01:ac:2a:03:ef:1c:c0:7f:
                    5d:5a:42:59:5b:b1:a3:cd:44:cb:da:df:58:1f:22:
                    eb:85:19:da:88:8b:a1:6a:e6:37:39:da:9a:39:1f:
                    71:41:b1:40:e6:45:ce:1c:73:6c:08:5d:54:a1:d5:
                    34:bf:17:53:fc:1f:d5:02:42:14:b4:7d:bc:a3:18:
                    ee:e3:68:1a:8a:d7:10:39:d9:c9:f5:e7:5d:0b:a0:
                    4d:5b:ea:9d:d6:5e:19:e7:7f:01:3a:62:3c:b7:0b:
                    6d:5f:dd:53:c3:2a:d5:bf:c1:b0:06:b1:bd:3c:6d:
                    ea:b5:45:82:09:82:d0:b2:dd:c3:00:67:36:d6:62:
                    3d:94:aa:12:91:33:ff:b8:74:1a:90:33:8c:60:98:
                    bc:89:82:3c:8d:13:14:e3:24:18:33:4b:2f:26:f8:
                    0f:75:90:bd:86:2e:c8:0d:a8:2a:2d:52:09:ea:fd:
                    1b:42:20:c8:a0:f2:9a:9c:9c:ae:a5:9d:0b:c3:e6:
                    aa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:93:A6:B1:58:5C:43:CC:73:A5:87:E1:CA:83:69:FF:3D:42:62:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b533a29-55d1-3b22-9974-0efccbb6eae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:e7:dc:16:f0:8f:f7:38:1b:b9:0f:cc:5a:e7:09:ee:8a:
         aa:f8:1f:56:fe:0e:45:b9:a6:3a:4f:13:3b:09:92:7b:b4:6e:
         0c:2e:58:83:58:89:af:e4:74:e9:4d:fa:38:27:80:bd:c3:db:
         66:b6:86:25:02:cc:7a:05:cd:d7:e1:99:e7:88:8f:6f:c9:cf:
         7c:1a:7a:35:c5:59:6f:53:51:20:c5:f5:1d:24:13:dd:9c:26:
         2c:3a:09:fb:9a:e2:fd:1b:04:07:0c:2b:c6:9c:c5:91:b5:52:
         59:71:5e:d4:fb:52:23:8b:59:5c:3e:ee:3a:8f:74:7c:e4:47:
         60:cb:44:61:57:bc:c7:25:fb:51:ae:c4:34:36:ab:43:77:97:
         4b:82:06:52:9c:94:09:b5:d0:eb:44:93:e3:e4:b2:0e:c0:d0:
         87:51:bc:2e:8c:4e:6a:94:05:d3:30:df:29:ca:cc:5f:3a:38:
         24:60:86:ed:a6:ac:c4:3e:95:0a:e8:81:91:5e:d9:81:13:20:
         e8:56:7b:90:bd:93:f5:59:3e:64:a4:d9:c0:4d:99:86:d2:7a:
         3a:33:75:71:98:28:6a:38:99:af:75:bf:24:f7:15:e6:82:82:
         21:9e:a6:fa:09:6f:e4:e9:56:72:ce:90:2e:22:7d:a4:ea:62:
         19:82:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:27 2026 by rpki-client