Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf78a91f-9717-3a67-bde3-49f9bdf85459.roa
File:                     bf78a91f-9717-3a67-bde3-49f9bdf85459.roa (raw, json)
Hash identifier:          JRD/BMao1chi/ZfbBOogXhVFCQA9pYabGTlVHBfLEaQ=
Subject key identifier:   4B:2B:8D:16:29:ED:6D:05:04:9A:51:AD:2F:03:EE:F9:A9:57:44:63
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E815F9C3437710CE7D39B6440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf78a91f-9717-3a67-bde3-49f9bdf85459.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     399153
IP address blocks:        204.74.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:9c:34:37:71:0c:e7:d3:9b:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=bff514bc-08cd-4754-a81b-1c2aa9b7c6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:69:d8:a2:64:1a:86:fc:4e:09:53:53:5f:
                    43:46:f7:a9:3b:25:60:2e:80:b0:21:fb:d0:69:4b:
                    dc:45:ef:8b:01:97:33:cb:44:ca:4c:0c:f6:24:7a:
                    6e:be:5e:75:06:11:25:6f:13:d7:c2:4b:fa:79:41:
                    30:82:d2:d0:64:f9:03:8d:6b:5d:98:cd:87:53:93:
                    63:e5:1b:cd:3b:af:b5:74:24:b9:e1:27:04:45:c9:
                    8d:ea:8d:06:e5:88:bb:4c:44:9e:92:c6:cc:02:26:
                    31:5a:3f:1c:36:0e:c8:63:06:ae:8f:f1:a3:7e:28:
                    77:f5:41:6f:1e:b0:99:a4:80:3c:c4:64:ea:3d:86:
                    ba:ad:66:4e:39:06:ef:bb:d4:66:41:95:4a:4d:23:
                    32:0e:90:de:c6:49:82:d8:e4:f2:e9:b2:65:ee:e0:
                    a6:b7:02:a8:95:72:06:4e:1a:de:f3:be:9a:2c:01:
                    18:f1:79:e0:5a:bf:23:16:28:da:c1:f0:d3:98:ac:
                    e9:ac:a9:16:1c:79:4a:1f:58:a6:30:e0:e5:ec:a7:
                    4b:55:b5:f0:fe:2f:6a:9c:c6:85:87:12:69:97:cd:
                    ad:73:6f:5a:a2:7e:54:73:ce:df:9b:3e:ee:b3:5a:
                    ad:34:c1:14:1e:85:cc:10:cb:b3:12:04:d0:34:4b:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:8D:16:29:ED:6D:05:04:9A:51:AD:2F:03:EE:F9:A9:57:44:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf78a91f-9717-3a67-bde3-49f9bdf85459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:98:df:df:06:97:14:30:cd:ef:d9:d0:1b:ce:b8:f2:57:87:
         61:4e:f3:2b:f4:ab:2a:8d:3e:aa:f1:64:1f:1b:af:56:15:44:
         47:a1:fa:05:1e:e6:ec:cb:c1:22:c2:01:37:c9:fe:cb:02:1b:
         87:49:dd:2d:c8:6b:c8:10:6b:17:1b:7e:31:a0:f7:a3:19:49:
         d7:ae:58:49:b6:82:54:71:cf:ba:4f:e5:4e:0e:b2:58:df:56:
         25:07:9c:5e:b8:05:07:cb:a4:d9:0c:72:d2:7d:bc:6b:58:96:
         df:82:46:85:84:23:e6:d1:ea:bb:76:44:a4:f4:60:e4:83:70:
         7f:cb:c8:fc:4b:19:ec:f5:ac:79:ad:4a:95:08:07:dc:f5:87:
         5e:55:e7:c4:e1:7f:ed:cb:e7:1b:68:2e:5f:e9:3e:66:c6:c5:
         97:e5:e3:0a:7e:35:f6:7a:04:28:07:12:0e:20:f7:43:12:69:
         d9:55:45:59:d4:87:c1:72:3f:40:1a:89:00:55:66:ad:ef:f1:
         a6:ed:b6:b9:c8:17:83:5b:03:13:17:80:f3:65:de:7c:a6:13:
         11:77:63:a2:88:a9:89:28:73:a2:e0:b7:69:3e:04:83:ec:b4:
         c4:33:ef:a3:aa:db:48:a5:da:fc:3e:7a:7f:a2:51:75:81:e0:
         f2:9b:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:49 2026 by rpki-client