Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea033822-f1a6-3013-b5ca-bfb913c58ec2.roa
File:                     ea033822-f1a6-3013-b5ca-bfb913c58ec2.roa (raw, json)
Hash identifier:          jWvsq3E2T/oB3TzBsKaUDiODTnlMcIFjTKsTTtCSnHI=
Subject key identifier:   92:8B:3F:B1:F0:88:EF:A5:30:2E:45:4E:B4:BF:8A:3E:7D:48:38:35
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497EB19DADF62F78F2BACCF0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea033822-f1a6-3013-b5ca-bfb913c58ec2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397219
IP address blocks:        204.74.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:b1:9d:ad:f6:2f:78:f2:ba:cc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f1f4901f-6ee9-4063-864e-e6d41de08bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:92:72:78:3a:ac:a6:ca:1a:c4:9e:b6:3a:
                    a7:7a:a3:4e:45:75:2d:c0:78:f2:2c:46:37:3c:21:
                    f5:94:2c:55:7a:fb:76:0f:21:55:ee:45:ca:3d:94:
                    a4:26:3a:f6:0f:57:e8:40:ca:9a:c1:c6:9c:07:84:
                    c7:1f:fb:2a:0d:a4:46:ed:ff:e3:8f:7f:53:30:05:
                    68:57:d5:64:a6:84:28:59:5e:70:9f:0f:e2:14:d8:
                    d8:e3:07:e0:57:cf:0f:a2:1b:a6:4b:0e:db:05:80:
                    83:e5:e5:90:66:24:b0:63:b1:c5:ee:6d:db:54:54:
                    0e:1e:25:56:d3:61:ed:72:93:78:3b:1d:34:a3:20:
                    6d:14:1c:76:62:3a:71:c8:03:94:51:5b:cb:70:13:
                    d1:7d:06:1c:6e:96:54:9c:ea:f8:0b:c7:eb:9d:fb:
                    c8:b8:d7:58:68:52:66:e7:17:bd:bd:06:b4:63:4c:
                    fd:35:57:ab:e3:f1:29:d0:13:b2:73:bb:b3:2d:b8:
                    12:45:66:11:de:0b:8c:bb:06:c7:a8:b0:c8:ee:00:
                    e6:55:81:24:1a:51:fc:33:2b:2b:94:d6:3e:4b:46:
                    31:30:4f:97:74:6b:4d:8d:4e:ed:29:f1:64:46:22:
                    90:8b:6f:ed:e2:1d:b8:2a:55:ac:ba:33:6d:5c:00:
                    5d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8B:3F:B1:F0:88:EF:A5:30:2E:45:4E:B4:BF:8A:3E:7D:48:38:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea033822-f1a6-3013-b5ca-bfb913c58ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:89:f5:bc:09:42:0d:0f:1a:ee:f2:87:61:03:34:e4:2b:01:
         d9:6b:a7:16:7e:6d:c2:c0:39:29:f8:20:bc:0c:28:03:cb:13:
         37:86:86:6b:9c:3a:5c:93:40:f5:72:bd:80:e4:e3:13:c2:02:
         5b:9f:e2:82:d6:8b:89:f0:bd:e6:cd:57:7e:6b:56:01:69:ce:
         75:de:01:8f:02:82:02:b4:3e:1f:97:5f:22:ec:29:8a:91:25:
         ae:8c:7d:01:c9:63:0a:85:ea:6e:a8:8b:ad:5f:1d:04:5d:30:
         5e:3d:fb:08:06:fa:19:1f:d1:70:07:78:f6:49:d5:a3:b4:83:
         49:a7:37:f6:12:0a:c8:86:2d:3a:17:e5:5a:e4:a6:a6:27:f5:
         2a:c0:25:a3:e5:e1:15:13:f5:e5:25:04:cb:b1:8d:7f:db:e4:
         44:aa:73:d0:9b:11:1b:c7:22:c4:bd:84:40:68:db:96:61:5e:
         3d:a8:07:f5:63:56:19:a8:92:d3:bd:c7:af:b3:8b:15:2a:f2:
         35:a0:da:90:1c:15:0f:9b:bc:b9:68:c3:2b:ea:95:c3:c2:ae:
         e8:07:e6:a0:34:7c:01:00:38:ed:4e:8a:04:22:99:53:f0:63:
         f2:87:ad:50:89:86:02:69:e3:df:4a:3e:9d:a7:14:47:8b:ba:
         4e:44:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:08:37 2026 by rpki-client