Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bec0a05-5bef-3d51-9103-38147ea98253.roa
File:                     9bec0a05-5bef-3d51-9103-38147ea98253.roa (raw, json)
Hash identifier:          FF/7hysj7yoB4DQ8A0/uWsi8C8bG5veCyOK54SUdpFI=
Subject key identifier:   B4:7F:F9:E3:E5:3C:61:61:16:23:09:5A:18:F2:9E:7A:FE:68:76:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E815F9CF42894D7F2EAEC2B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bec0a05-5bef-3d51-9103-38147ea98253.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     399170
IP address blocks:        204.74.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:9c:f4:28:94:d7:f2:ea:ec:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=c31b57ca-438e-402b-8ec7-f48b07f5804b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:2f:ad:99:22:95:5e:c0:ef:2b:f9:ee:09:
                    10:6f:18:21:b7:2b:08:2e:2f:e8:55:72:a2:8d:57:
                    eb:59:a6:7f:7a:06:b9:fb:42:e3:60:2e:d2:88:ee:
                    c1:39:ba:2a:5a:2b:c7:a8:98:11:da:5e:07:1d:c7:
                    01:51:97:1d:71:b4:47:fd:be:19:47:27:bc:69:3a:
                    13:16:06:fd:fd:e4:40:45:29:57:34:5b:53:d7:1e:
                    4a:86:c0:10:57:f0:aa:23:6d:22:84:8f:5f:01:18:
                    00:4e:26:fb:de:08:43:79:87:a9:d1:23:37:19:2b:
                    45:90:52:dd:84:00:26:1f:d2:df:9a:2a:bd:38:81:
                    16:65:b1:4d:e8:a9:4c:4d:ed:6b:10:d5:18:95:85:
                    8a:ee:4b:59:75:73:30:f8:3e:88:be:5e:67:ab:97:
                    68:b1:58:da:1a:ac:d3:b0:8c:54:d1:49:78:c7:26:
                    2b:cc:55:b1:8c:fe:89:9c:75:3b:e4:97:36:59:c2:
                    e2:75:2b:49:00:c5:a8:6a:4d:b1:0e:bf:93:bd:b7:
                    0f:d4:2e:e0:cb:f3:1a:16:ac:3d:26:96:83:6f:d7:
                    ec:6e:1e:83:6c:75:66:91:36:a2:5f:80:d5:a1:a0:
                    9f:7a:9e:ad:2b:d1:5d:cc:1c:c0:82:9c:2d:9f:84:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7F:F9:E3:E5:3C:61:61:16:23:09:5A:18:F2:9E:7A:FE:68:76:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bec0a05-5bef-3d51-9103-38147ea98253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:77:8a:9e:02:be:17:ee:98:3f:8e:78:dd:c4:03:a4:c1:89:
         07:88:0e:95:1d:d0:bf:fd:d0:f0:64:28:02:d9:18:ee:27:4b:
         95:cb:8f:98:e3:b4:76:9e:ee:96:3b:25:c3:9f:0f:8e:7d:f1:
         59:22:9c:1b:16:35:f6:9b:a7:df:34:a3:46:30:2f:22:d0:15:
         e5:24:10:80:68:97:3f:cc:66:75:ff:36:ce:06:e1:b9:c9:49:
         aa:fd:02:7a:72:8d:c8:96:73:5d:81:1f:c5:c2:bd:10:9f:2a:
         37:28:23:26:2b:4c:9b:d6:a5:cb:53:29:8e:a9:2a:5c:3a:b6:
         ee:51:e1:44:66:c1:cf:b4:fd:16:b6:02:24:f8:f3:4e:ce:50:
         7b:62:47:bc:61:5b:cd:df:2f:f3:3d:b2:1a:0b:37:7a:fd:d5:
         4e:ef:b3:50:67:92:25:e6:70:00:b9:32:83:cd:0a:72:1f:9f:
         3c:76:9d:ec:3e:22:b4:14:93:f7:77:5c:aa:38:33:7c:09:3e:
         32:01:f0:b3:39:8f:a5:68:5e:76:42:c9:04:15:3a:9b:5c:23:
         eb:6d:55:c5:65:b4:c7:3e:48:42:38:ae:11:bc:8c:40:58:54:
         90:18:49:a9:f3:39:e7:52:3f:7a:26:d4:ea:a1:1f:17:17:8d:
         f1:b9:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:50 2026 by rpki-client