Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95d5fe63-8e5d-3e08-91fc-cdb17c9c20ac.roa
File:                     95d5fe63-8e5d-3e08-91fc-cdb17c9c20ac.roa (raw, json)
Hash identifier:          GBtfF8zNAHjhIHjnabpV1XuaHRdyOauhITHTp4JYaZw=
Subject key identifier:   06:C8:F3:0D:A6:94:70:33:21:54:CC:B3:90:5E:BB:1F:88:D1:32:18
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DAC458B91A84D480E5629C5C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95d5fe63-8e5d-3e08-91fc-cdb17c9c20ac.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     397223
IP address blocks:        204.74.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:8b:91:a8:4d:48:0e:56:29:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=d17bfc95-b236-43c9-8995-2290a69a833f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:5e:17:32:e8:ba:c4:f8:1a:8c:bf:6d:32:
                    35:4b:31:8e:d1:47:35:dc:a4:4d:96:a9:97:e2:e0:
                    a7:c7:74:7b:cb:7e:f9:8f:31:4c:00:1a:ee:fe:1b:
                    1d:9c:da:c0:37:20:97:21:b3:03:af:c5:db:98:7c:
                    68:00:85:97:a8:e1:43:e1:14:fd:08:b0:4f:fa:b7:
                    38:13:23:65:4a:27:91:b1:89:e0:00:91:be:66:22:
                    7f:b9:ff:21:24:01:b2:5b:f4:bb:7a:b9:dd:fc:f8:
                    87:81:e4:f9:9f:2d:ac:78:c3:33:a1:10:3a:a9:ca:
                    8a:c9:33:3f:ca:12:0c:fb:c9:85:a6:c1:16:68:74:
                    ab:0b:ac:b1:bf:5f:9a:8f:0e:80:cd:0c:05:b5:72:
                    e9:6e:4a:71:f6:ef:67:4b:d8:8f:2d:17:f1:23:f6:
                    aa:6b:36:7a:95:1d:63:f0:de:8f:9c:27:29:e6:cd:
                    d1:b1:cd:11:6e:5e:6c:70:10:d5:91:31:07:48:d8:
                    82:e4:ae:f1:40:96:59:25:9c:d8:7c:f3:b9:68:4c:
                    99:4e:f3:f3:fc:a5:96:45:d7:92:62:03:47:36:b1:
                    50:54:61:39:db:aa:f8:cc:60:61:ad:51:34:bb:a6:
                    ed:16:24:d1:74:f8:07:4e:fd:f6:39:5c:da:f5:d8:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C8:F3:0D:A6:94:70:33:21:54:CC:B3:90:5E:BB:1F:88:D1:32:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95d5fe63-8e5d-3e08-91fc-cdb17c9c20ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:08:47:78:36:b4:61:9c:57:52:18:fe:11:27:bc:53:c2:75:
         a1:bd:95:3e:80:2d:cd:fb:d9:f2:e1:1a:8f:6a:a6:7f:90:c9:
         3d:ab:06:1f:37:2a:6a:08:c4:03:90:1a:d2:b6:c6:85:92:00:
         d6:96:f5:71:ad:5b:26:42:7e:54:98:14:ca:16:15:46:06:a5:
         c4:69:31:82:b0:b8:83:39:24:53:c7:a1:21:52:41:6b:0b:b7:
         cf:65:eb:53:79:6c:ab:a7:f6:f0:22:3f:0b:9a:68:45:6d:16:
         78:1a:03:ad:2a:dc:68:b1:9b:15:bf:4a:f5:36:94:ad:4d:4e:
         43:ef:7d:84:26:19:19:f3:73:15:d8:4d:5e:59:8f:fc:f1:d7:
         92:9b:e3:64:e3:43:fd:b1:e2:4a:3e:33:e8:bd:61:7d:c3:c9:
         6b:a9:96:a5:84:20:fa:65:e2:55:76:b7:c5:eb:37:d8:66:6a:
         dc:b8:a8:af:8c:92:fa:82:96:b9:69:17:8f:f8:83:44:45:29:
         a7:f1:d7:98:5b:25:1f:87:16:6d:dc:76:10:19:7d:60:22:43:
         f1:67:d5:21:ef:40:2e:71:18:00:b4:31:ac:24:e1:cf:8c:20:
         68:49:cd:67:29:9b:e4:1f:d1:ec:1e:c7:85:3c:fa:43:1e:11:
         66:d4:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:50 2026 by rpki-client