Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd1631a8-8b30-31ab-94d6-65dd2291240a.roa
File:                     dd1631a8-8b30-31ab-94d6-65dd2291240a.roa (raw, json)
Hash identifier:          ofBhnLy7jDTKwHSgF2xiT5mS348qaCOgGLYU7HyT2tc=
Subject key identifier:   39:E5:9E:51:C4:40:D3:16:0F:3D:16:81:C2:A3:F9:36:1A:21:AE:32
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DAC458C1C772960879470B080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd1631a8-8b30-31ab-94d6-65dd2291240a.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     397233
IP address blocks:        204.74.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:8c:1c:77:29:60:87:94:70:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=bf960903-529e-4c6b-b804-15aca296e30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:4a:8d:5b:5f:d4:35:e3:34:e0:02:f1:0d:
                    c7:97:44:1d:61:db:dc:51:4a:78:c2:1a:f1:cb:0b:
                    de:d9:2f:ee:8b:c7:a2:82:a6:52:cd:26:2a:f1:5d:
                    d7:f4:07:be:46:aa:ca:67:dd:40:10:e4:3f:cf:2b:
                    21:ee:08:ba:6a:d1:ad:15:f6:96:79:ac:8d:26:8e:
                    8f:9e:02:28:57:52:22:81:d6:d9:44:f2:16:89:72:
                    9d:17:72:7f:2c:d3:68:93:66:f6:0e:82:cd:cb:c3:
                    cd:19:76:ea:bc:ed:0c:78:a1:76:f3:c9:86:3d:60:
                    f9:a9:e7:9d:2c:5a:af:81:1d:b0:64:64:94:7f:7a:
                    85:74:5f:7d:63:72:95:59:3f:40:f4:53:45:13:da:
                    0f:90:b7:ba:91:34:d7:97:39:38:6c:7d:81:69:f4:
                    73:72:db:03:d7:4a:f6:20:45:db:d5:62:e1:5f:30:
                    84:84:5a:bd:93:f0:55:56:20:f1:bb:28:cb:a3:42:
                    ad:49:ce:92:94:63:72:2f:98:9b:04:3d:1c:ea:10:
                    f9:9c:53:2c:b0:73:d2:57:79:d2:8d:3f:43:be:c3:
                    64:a7:28:54:f5:5b:3b:b3:98:8b:75:02:06:4a:75:
                    81:b0:ba:de:85:21:9a:1a:90:44:54:7f:cf:37:4c:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:9E:51:C4:40:D3:16:0F:3D:16:81:C2:A3:F9:36:1A:21:AE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd1631a8-8b30-31ab-94d6-65dd2291240a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6a:ff:1d:48:86:37:d0:d9:89:4c:f3:60:26:b8:38:74:32:
         e5:bd:fd:d8:08:b9:6a:fd:5b:67:6e:de:1f:08:5a:b1:32:69:
         ef:24:74:6c:b6:36:b1:62:37:93:6d:ba:e4:17:58:a9:a3:a1:
         9b:1a:9d:69:04:90:f5:6e:70:e3:c4:aa:8f:23:68:be:f2:2e:
         b5:c6:89:65:77:cc:46:f4:91:18:2d:5f:13:b8:fd:2d:f7:17:
         11:0e:46:6f:bf:cd:28:bf:11:14:55:8b:3f:d5:70:2b:e2:bc:
         87:c5:50:c4:d8:4b:57:cd:65:15:68:27:4b:03:16:e1:8c:55:
         00:ee:bd:a6:65:4d:1b:f5:c3:a0:f2:35:a8:3b:76:cb:48:78:
         86:15:11:39:e8:16:2f:96:9d:c6:2e:2f:0f:38:28:92:84:76:
         a5:bb:66:2d:a1:5b:8c:e5:af:2f:6a:78:a1:7d:91:4f:91:2a:
         6e:bb:b6:58:69:bf:5d:67:da:1d:93:4a:84:86:8e:3f:66:af:
         86:b6:87:91:80:7b:6d:58:de:15:e9:d8:47:87:6b:3a:2d:af:
         f4:df:c8:15:b4:5b:d1:7d:a7:8e:fa:07:be:6a:07:f1:15:89:
         c4:a4:53:f9:e1:c1:e2:9e:98:5c:e0:e7:b9:43:4f:19:f0:cc:
         94:0d:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:08 2026 by rpki-client