Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9692b54-cc14-3668-90e2-ed659182c229.roa
File:                     b9692b54-cc14-3668-90e2-ed659182c229.roa (raw, json)
Hash identifier:          WWKz/hqDUZ59wrwG0uWj9SnHmsGYMdPwOnU8UEFl7WE=
Subject key identifier:   34:1F:F6:22:4E:DD:4F:FC:9F:80:0B:38:46:50:F6:0A:55:E8:89:7C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D091284B74E71B2CD04DCF280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9692b54-cc14-3668-90e2-ed659182c229.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397237
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:84:b7:4e:71:b2:cd:04:dc:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=d4b2cce8-3a66-45fb-8750-41da5bc607a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:3f:a4:d8:ee:a2:49:35:8d:0c:8b:8a:af:
                    63:f6:1e:eb:7d:0f:3b:1a:15:67:9a:d8:f4:bb:5f:
                    63:fb:67:ed:6f:4a:17:fc:12:06:1c:e7:82:ce:5f:
                    12:8b:ca:09:82:f8:5f:a8:29:c8:70:aa:08:2e:da:
                    e0:70:bb:09:7a:38:56:d9:db:0b:4a:13:49:d4:d6:
                    e2:b8:bc:90:49:61:25:b3:97:55:4b:3a:83:44:da:
                    33:e3:2b:ce:c9:64:4e:51:aa:81:ee:53:df:73:2d:
                    f5:94:06:9d:f8:62:69:c2:bc:f4:18:ec:0c:1e:2f:
                    34:35:99:eb:98:f8:0c:fe:1e:d7:ee:6f:d2:02:df:
                    cf:07:0c:c8:0e:08:d3:66:3b:15:87:04:14:12:e2:
                    90:ee:f8:68:3e:fc:3c:37:63:43:63:ae:66:c2:92:
                    16:de:e3:2e:50:30:64:e6:61:53:92:81:b7:eb:24:
                    b9:bb:d2:7f:c9:a2:a4:17:23:f8:5b:06:95:ee:4c:
                    de:13:d2:91:9c:9b:2c:18:3b:3c:8c:7d:25:b7:22:
                    f4:a0:8f:a9:f5:c1:62:91:1d:0c:9e:61:13:fc:71:
                    03:e5:3f:98:e9:77:e4:f9:c6:29:07:a4:64:38:91:
                    bb:26:ee:b4:ab:54:6d:29:3e:8e:fc:ce:7d:b6:8a:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1F:F6:22:4E:DD:4F:FC:9F:80:0B:38:46:50:F6:0A:55:E8:89:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9692b54-cc14-3668-90e2-ed659182c229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:47:59:0c:be:61:fa:c8:2b:8f:89:f4:23:75:e0:3f:8e:bc:
         63:dd:0f:6b:24:52:ac:90:77:05:fe:49:b4:af:ce:19:6f:b9:
         e3:10:9b:bb:1a:d7:08:d5:ba:df:e2:78:92:51:c5:24:30:8a:
         c6:ff:3a:b5:0e:95:de:b2:50:ee:16:a6:8e:8e:a4:0d:fe:6d:
         f7:a4:8a:d6:4b:37:1b:39:27:87:82:86:c5:c9:9a:61:89:3e:
         c8:60:30:02:38:b6:6c:ef:65:a9:fe:e4:56:ed:b7:fb:54:b1:
         d0:c9:4f:31:fd:fe:ce:e3:f2:6f:2f:77:e4:ff:da:bc:71:77:
         3e:23:53:3b:ad:ba:9e:5f:c2:c4:09:88:b5:4f:1d:b0:b6:b9:
         f2:ae:19:f0:5d:87:0c:a1:f4:4f:b8:2a:14:17:ed:ab:03:72:
         6a:44:6b:7d:de:79:00:ec:45:6d:ae:b4:f9:b1:ba:9f:f1:07:
         f3:58:4c:a9:9f:82:cd:96:66:f0:82:11:a6:7b:b9:e1:0f:09:
         01:a8:4c:90:20:1b:d3:5f:b1:83:37:28:b6:32:28:ef:6d:f4:
         11:9b:be:6c:58:d1:45:c4:10:11:c8:6f:74:b8:5b:60:5d:a0:
         af:46:17:2c:05:28:83:13:c4:51:0b:f6:de:f4:8e:8e:b5:bc:
         6b:32:36:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:59 2026 by rpki-client