Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ae15d2d0-ea1a-3894-b261-973118211e19.roa
File:                     ae15d2d0-ea1a-3894-b261-973118211e19.roa (raw, json)
Hash identifier:          xApeoe3obln4XvrR2YPy+5hA/iVuylsmoBTROPxq69w=
Subject key identifier:   F9:AD:AB:BB:CB:1A:7C:1D:D1:E9:09:4A:0C:AE:0D:38:63:29:62:02
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497C058DE6F41E15232485C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ae15d2d0-ea1a-3894-b261-973118211e19.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397226
IP address blocks:        204.74.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:05:8d:e6:f4:1e:15:23:24:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=761ff138-ef82-4abc-8b11-63824cbcfcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:5f:54:a3:09:16:3e:46:23:94:3c:4a:72:
                    db:be:81:42:16:57:26:f0:bb:97:7e:84:1c:6f:57:
                    97:3d:d0:94:36:34:d0:fa:93:bc:5a:76:23:ff:5e:
                    79:22:51:30:44:98:9c:35:c3:c3:a3:9a:24:e0:15:
                    bd:2a:1c:5b:b5:24:44:be:11:63:21:d8:ec:ee:01:
                    5f:3b:1c:81:83:bc:0a:ee:e3:8e:ed:0a:7b:b2:bf:
                    60:3c:37:7d:11:dd:c9:30:15:f4:88:34:0b:26:af:
                    e4:c0:2a:d5:85:af:24:cf:0a:7b:fa:db:f7:53:52:
                    2a:e0:fa:22:93:2e:c5:d2:00:78:86:36:60:66:65:
                    5d:c1:e7:d3:22:27:aa:27:6d:bc:7b:91:af:85:be:
                    af:12:b5:51:7b:b8:87:90:bd:99:7d:9c:b2:7f:d8:
                    c5:2d:55:80:36:9f:c0:c9:36:87:60:0d:71:11:87:
                    40:51:bd:f9:c7:38:9b:3d:f3:09:50:50:44:40:1c:
                    ef:70:c4:44:dc:15:45:45:ea:cd:db:b5:3b:b6:ee:
                    40:3a:e1:01:12:cd:6e:06:0d:4c:4d:f7:94:48:4e:
                    c2:76:8a:92:a4:cf:1f:9e:e7:95:11:d6:a4:ac:f0:
                    95:16:48:3e:99:2e:a6:20:5a:2b:d6:1c:37:eb:4b:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:AB:BB:CB:1A:7C:1D:D1:E9:09:4A:0C:AE:0D:38:63:29:62:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ae15d2d0-ea1a-3894-b261-973118211e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:ee:27:b2:b4:04:c2:11:42:25:07:82:4e:29:10:fd:82:
         2c:f7:1d:4d:9e:32:83:a5:66:50:87:0c:e4:86:26:07:58:b5:
         ef:b4:be:e6:b7:35:54:23:be:41:cd:0b:33:eb:00:fb:68:a1:
         26:29:61:0c:55:95:23:4f:67:37:44:3a:70:11:a6:2e:2f:7c:
         e8:32:68:6b:c4:e1:52:e2:ab:7c:83:4d:e2:f5:e2:b7:39:41:
         0f:47:37:51:c8:b6:6f:eb:17:5e:30:45:ce:0b:bc:0e:d0:04:
         a0:13:b8:50:65:a1:73:e8:a2:3d:dc:5f:7a:c9:9a:54:c4:af:
         82:e4:70:dc:9e:56:4e:01:11:88:13:3f:1e:e7:87:4f:c2:65:
         19:8d:ca:73:0d:96:f6:34:82:03:e2:32:d3:8e:ae:19:bd:91:
         24:1a:94:e0:49:36:79:9a:39:4a:1f:8f:be:44:2e:19:6c:38:
         8c:c2:97:fa:3f:bf:08:43:67:c8:df:6a:5c:e8:be:b2:8f:52:
         86:19:14:98:bb:eb:2c:a0:bc:e2:ba:fd:e3:f2:65:57:9c:40:
         95:b9:4b:67:d6:47:53:cd:a1:8d:ec:8a:12:15:79:4d:21:2f:
         e7:96:73:83:b5:24:4b:23:08:f1:2d:11:c8:23:c6:fb:f7:9a:
         33:44:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:54:21 2026 by rpki-client