Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fac6fb8-fb31-3022-ab42-d5869cf0cd28.roa
File:                     3fac6fb8-fb31-3022-ab42-d5869cf0cd28.roa (raw, json)
Hash identifier:          12vsjcS+BwOesKsmasOiBQIh5Xrhg8LgAybPKtGZS6w=
Subject key identifier:   1B:10:9D:07:A3:07:E6:73:12:C5:EB:5C:51:64:18:49:63:6B:E8:9A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D091294599FFC7D5BAEFB4140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fac6fb8-fb31-3022-ab42-d5869cf0cd28.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397224
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:94:59:9f:fc:7d:5b:ae:fb:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=28c2cd2d-37f8-4401-9370-86138bfca99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:7d:76:cf:7f:5f:a7:9c:73:41:65:20:ef:
                    b7:b3:f8:46:d5:4d:35:53:fd:9e:ec:c6:20:f6:f6:
                    e3:58:da:ec:50:3c:42:18:7e:1f:bb:30:4c:25:21:
                    a4:13:77:20:68:42:d1:68:55:77:41:e0:33:17:e7:
                    18:f0:7a:45:ed:f9:f6:15:65:8e:00:72:0c:0e:37:
                    89:6d:4f:78:42:7a:86:42:61:54:49:07:0f:58:da:
                    aa:07:80:67:82:44:b1:3e:bf:9b:0e:e8:e4:fa:51:
                    18:4c:ee:81:dc:9c:2e:3b:82:e4:2a:5b:c8:b1:e8:
                    0f:15:eb:df:79:7f:5d:3f:b3:10:c2:be:18:4d:c0:
                    ee:11:72:46:f9:d9:38:b8:b5:eb:20:3e:8a:94:06:
                    62:f4:c9:02:36:dc:c7:6c:e9:49:19:3e:c8:5f:e8:
                    d6:2d:26:46:6f:6b:38:73:6b:c2:aa:8a:22:5f:b2:
                    bf:9b:d1:f5:11:18:c6:6b:b4:5f:f6:b9:e2:a4:b8:
                    bb:b4:ec:91:2e:ce:84:ef:39:b4:78:8b:4d:c2:52:
                    c7:24:1c:83:47:f3:57:8b:5f:87:96:04:41:23:76:
                    40:50:9c:71:1b:19:65:34:4c:47:45:1f:a0:30:f6:
                    17:99:48:a9:53:57:f6:09:f5:df:5a:30:87:f3:be:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:10:9D:07:A3:07:E6:73:12:C5:EB:5C:51:64:18:49:63:6B:E8:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fac6fb8-fb31-3022-ab42-d5869cf0cd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:08:7c:8a:b9:16:db:7e:bb:ca:8d:bf:e2:70:7d:e1:86:bd:
         1f:d0:ac:33:17:4b:d1:bd:f4:f5:44:bb:ce:0c:d3:57:80:d7:
         14:a4:04:36:c8:ba:6d:ca:9e:5c:3f:b9:69:e2:00:52:1d:05:
         d5:79:07:43:3b:35:d9:6c:73:34:c6:42:71:27:25:13:ba:df:
         59:ca:ee:31:2f:b2:29:6e:d5:98:68:84:5f:27:a7:ba:ca:c7:
         59:37:7a:ac:6e:1e:d9:cb:65:ad:67:ca:ef:74:22:96:27:b5:
         6c:22:98:bf:ed:44:cb:88:6f:21:c2:49:bd:02:07:c4:72:15:
         58:ff:7d:40:ef:f5:2e:96:29:81:e3:3c:f2:12:c6:75:57:57:
         b7:5b:83:87:92:ec:8e:4f:47:e5:ae:1f:51:ab:10:10:0d:4a:
         f5:db:fa:53:54:86:88:f1:96:77:33:34:f5:07:01:41:81:a3:
         75:4c:80:4e:54:05:75:db:09:77:71:e7:a3:41:57:f9:e8:2a:
         e2:8d:ef:ab:86:82:01:25:fa:33:56:60:43:65:31:e3:15:69:
         d6:90:59:c8:95:43:d2:b3:b0:14:61:01:f0:f9:08:5b:b4:52:
         6b:7e:93:e4:69:33:a1:26:33:2c:c1:0c:6b:46:b3:ca:f8:3b:
         6a:77:d1:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpRZn/x9W677QUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MjhjMmNkMmQtMzdmOC00NDAxLTkzNzAtODYxMzhiZmNhOTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl419ds9/X6ecc0FlIO+3s/hG1U01U/2e7MYg
9vbjWNrsUDxCGH4fuzBMJSGkE3cgaELRaFV3QeAzF+cY8HpF7fn2FWWOAHIMDjeJ
bU94QnqGQmFUSQcPWNqqB4BngkSxPr+bDujk+lEYTO6B3JwuO4LkKlvIsegPFevf
eX9dP7MQwr4YTcDuEXJG+dk4uLXrID6KlAZi9MkCNtzHbOlJGT7IX+jWLSZGb2s4
c2vCqooiX7K/m9H1ERjGa7Rf9rnipLi7tOyRLs6E7zm0eItNwlLHJByDR/NXi1+H
lgRBI3ZAUJxxGxllNExHRR+gMPYXmUipU1f2CfXfWjCH874R2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsQnQejB+ZzEsXrXFFkGElja+iaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2ZhYzZmYjgtZmIzMS0z
MDIyLWFiNDItZDU4NjljZjBjZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkIfIq5Ftt+u8qNv+JwfeGGvR/QrDMXS9G99PVEu84M01eA1xSkBDbI
um3Knlw/uWniAFIdBdV5B0M7NdlsczTGQnEnJRO631nK7jEvsilu1ZhohF8np7rK
x1k3eqxuHtnLZa1nyu90IpYntWwimL/tRMuIbyHCSb0CB8RyFVj/fUDv9S6WKYHj
PPISxnVXV7dbg4eS7I5PR+WuH1GrEBANSvXb+lNUhojxlnczNPUHAUGBo3VMgE5U
BXXbCXdx56NBV/noKuKN76uGggEl+jNWYENlMeMVadaQWciVQ9KzsBRhAfD5CFu0
Umt+k+RpM6EmMyzBDGtGs8r4O2p30Wo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:06:04 2026 by rpki-client