Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e66e887b-7c8b-30de-8be9-2521bfbeebe2.roa
File:                     e66e887b-7c8b-30de-8be9-2521bfbeebe2.roa (raw, json)
Hash identifier:          8vsXG7+oTK/xTJkdazrReR23Mjipja9ad950ccwuSDg=
Subject key identifier:   5C:1C:B2:A5:70:E0:10:2E:19:E7:26:37:75:0A:76:36:A8:6D:45:4C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09128297058FD1A03CC82580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e66e887b-7c8b-30de-8be9-2521bfbeebe2.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397236
IP address blocks:        204.69.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:82:97:05:8f:d1:a0:3c:c8:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=3e0b50c6-032a-4c44-8e50-8548a8691fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:a6:fb:16:d8:ef:27:49:24:94:fc:7c:54:
                    49:75:b2:69:db:24:86:e8:78:84:2d:1b:73:41:9c:
                    b9:90:98:eb:c3:ce:71:5e:be:8c:90:d5:75:62:71:
                    20:37:6a:fa:4f:e2:73:47:80:9d:ba:25:9f:43:27:
                    17:00:d0:9f:02:29:8b:a8:55:9e:a9:b8:69:51:77:
                    d5:5f:d5:40:78:ab:0d:46:68:8a:7a:bd:dc:3c:bb:
                    10:f3:46:b5:da:f5:cd:4d:11:59:85:90:82:95:5b:
                    21:9c:ea:22:8d:64:e3:6b:05:06:6f:69:1d:80:2d:
                    c7:13:4c:bb:ec:6d:7a:6a:75:00:ab:63:8d:b9:d0:
                    55:12:d9:b6:71:4e:4e:5b:66:a8:ac:2a:32:d9:cc:
                    52:93:44:ab:ba:52:34:dd:28:27:68:00:2a:de:57:
                    18:c0:2b:ca:77:1f:7b:08:bb:aa:f7:88:21:fa:48:
                    42:e1:86:c7:70:fa:9a:2c:9b:4e:2a:d5:b2:54:a3:
                    47:7b:39:13:42:0f:7c:db:0e:36:0a:54:73:2d:d0:
                    32:fa:6e:ee:74:74:18:31:e9:72:16:48:71:8b:3f:
                    7e:43:11:83:a2:3c:8f:be:aa:ee:fc:46:e0:df:0b:
                    92:6e:53:18:ae:bc:7b:da:fa:ce:74:59:2c:06:71:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:B2:A5:70:E0:10:2E:19:E7:26:37:75:0A:76:36:A8:6D:45:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e66e887b-7c8b-30de-8be9-2521bfbeebe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:be:9a:24:e7:36:6b:6b:09:d6:65:c8:ea:04:e8:1c:10:10:
         f8:51:e7:b5:77:fc:0d:5b:13:70:cc:a4:e4:ff:48:c5:78:f3:
         9b:9b:72:ca:72:4c:e9:62:db:e0:23:da:12:75:ca:9a:a4:dc:
         de:aa:a6:ff:8c:c0:b2:81:9d:4c:f4:76:d3:ae:9a:8c:18:d5:
         10:02:ad:7b:52:a0:e1:11:65:e9:c0:50:fc:45:b7:6f:73:54:
         00:e7:3d:37:a2:31:6e:4c:3a:27:14:a1:12:de:2e:03:71:27:
         74:eb:48:37:53:a5:36:d4:de:6d:c9:89:ec:54:65:cc:06:e4:
         14:91:b9:6f:d1:91:80:ac:23:19:94:22:03:f8:ff:e7:1f:f6:
         3f:f7:34:42:c7:b3:cd:72:b7:19:48:01:9c:55:61:c1:0b:1a:
         15:84:2e:96:6c:2b:97:de:01:af:ab:c7:6c:95:31:e8:8e:d9:
         0a:67:b0:bc:ea:5c:7d:aa:df:4c:1b:ef:21:58:ab:8f:18:59:
         bd:0c:0c:2b:ff:00:73:31:43:f8:0b:9f:a2:c6:ed:74:b7:93:
         1e:82:c8:d1:ca:50:0b:c9:32:0f:f0:06:01:ef:55:40:69:50:
         60:51:78:ae:c9:55:a1:e8:bd:81:ee:df:c1:f4:c4:5f:cd:a7:
         34:50:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:32 2026 by rpki-client