Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbdb9a08-69d3-31ce-9127-6a76972e561b.roa
File:                     fbdb9a08-69d3-31ce-9127-6a76972e561b.roa (raw, json)
Hash identifier:          iMd8/aF1140BIwkh6pVC1cXBlUHzBeP0XTX9NGBr2Rk=
Subject key identifier:   A2:B4:CD:4D:FD:65:53:D2:08:DB:9B:10:AD:6E:A0:31:98:52:93:FE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497E8846CBD3C3FEE4D014C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbdb9a08-69d3-31ce-9127-6a76972e561b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397230
IP address blocks:        204.74.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:88:46:cb:d3:c3:fe:e4:d0:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1603d53f-17e9-4df8-9f6f-9a74ef5686b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c8:68:39:4a:24:83:d8:05:f9:c3:15:1b:55:
                    cf:21:4f:6b:90:92:27:c5:f9:1c:1e:70:98:b2:16:
                    e9:61:49:91:24:88:ee:9f:43:71:09:ba:ee:6f:b1:
                    44:bd:1f:7b:ad:c0:22:a0:39:f3:36:f9:8f:3a:14:
                    b0:07:51:7c:d9:ad:37:4e:08:d7:0e:04:67:7f:d6:
                    0d:52:fe:fe:42:b6:94:bd:83:b3:dd:56:4a:c2:fd:
                    c2:1c:04:39:70:28:1c:02:82:75:16:91:68:b3:0d:
                    a5:9a:14:15:06:dd:a9:a3:d8:85:95:97:82:49:41:
                    68:e9:46:96:0a:b1:7f:2f:0d:f6:17:a9:f2:02:46:
                    86:dc:da:84:aa:56:06:a3:4c:43:a3:24:f9:7e:cf:
                    6d:0f:13:4d:9b:fd:03:99:71:2a:95:c5:80:45:53:
                    43:42:bc:37:45:6d:7a:4b:87:38:c9:a6:9f:fd:e2:
                    4f:e3:88:3b:e3:56:92:f8:02:fa:b5:c4:b6:1a:66:
                    c2:9f:c8:01:fd:b4:29:05:45:f9:3c:e6:76:16:d5:
                    38:bd:25:cb:4d:ec:a6:73:18:17:f0:db:75:86:1f:
                    f2:ac:65:e5:8b:c9:ee:ea:70:7c:ef:d9:f0:fe:86:
                    e3:bb:24:4c:40:03:90:3e:c3:b6:79:4a:3d:74:2f:
                    b7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B4:CD:4D:FD:65:53:D2:08:DB:9B:10:AD:6E:A0:31:98:52:93:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fbdb9a08-69d3-31ce-9127-6a76972e561b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:96:e5:94:46:a4:79:30:a8:82:8f:a6:73:24:36:4b:8a:9c:
         5b:66:01:3c:ae:c4:a5:0f:a1:90:ff:c8:54:00:d3:1e:89:74:
         2b:6d:ee:31:47:84:0e:59:68:e0:c7:3d:02:59:7c:e0:38:2e:
         a5:39:3e:85:a6:e0:da:62:9c:4b:f1:01:0a:a4:ac:6c:ea:c1:
         c2:fb:8b:83:73:3d:22:fe:71:fc:d1:e0:9f:93:fd:93:bc:5f:
         39:9e:1a:e5:ee:3e:f6:c2:7c:1d:96:26:08:ad:9a:87:dc:e6:
         92:c2:08:8c:6d:38:28:e7:0b:7a:22:f9:c3:9d:a1:d7:53:fa:
         f5:9c:0d:ca:ef:2d:48:b1:48:42:f9:8f:02:ea:83:57:1a:f0:
         6d:72:24:32:6d:af:27:39:cd:e1:8e:12:ef:e6:6f:84:a3:b6:
         bf:46:ef:9f:af:82:e4:05:10:b3:36:fd:52:e3:5e:9c:3f:60:
         76:73:e8:0a:5d:d1:1c:79:66:35:08:df:34:8c:f6:3c:8b:d7:
         50:a3:94:60:fb:7c:ac:69:50:69:b2:20:90:56:d0:b0:db:1c:
         50:01:55:02:7f:a3:45:37:c9:56:37:c0:23:b6:ee:7a:4c:7b:
         62:0f:8a:77:54:38:93:1e:ba:cd:d7:ee:7a:f5:2f:5a:c2:81:
         c9:ac:df:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfohGy9PD/uTQFMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTYwM2Q1M2YtMTdlOS00ZGY4LTlmNmYtOWE3NGVmNTY4NmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8hoOUokg9gF+cMVG1XPIU9rkJInxfkcHnCY
shbpYUmRJIjun0NxCbrub7FEvR97rcAioDnzNvmPOhSwB1F82a03TgjXDgRnf9YN
Uv7+QraUvYOz3VZKwv3CHAQ5cCgcAoJ1FpFosw2lmhQVBt2po9iFlZeCSUFo6UaW
CrF/Lw32F6nyAkaG3NqEqlYGo0xDoyT5fs9tDxNNm/0DmXEqlcWARVNDQrw3RW16
S4c4yaaf/eJP44g741aS+AL6tcS2GmbCn8gB/bQpBUX5POZ2FtU4vSXLTeymcxgX
8Nt1hh/yrGXli8nu6nB879nw/objuyRMQAOQPsO2eUo9dC+3OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKK0zU39ZVPSCNubEK1uoDGYUpP+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmJkYjlhMDgtNjlkMy0z
MWNlLTkxMjctNmE3Njk3MmU1NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiW5ZRGpHkwqIKPpnMkNkuKnFtmATyuxKUPoZD/yFQA0x6JdCtt7jFH
hA5ZaODHPQJZfOA4LqU5PoWm4NpinEvxAQqkrGzqwcL7i4NzPSL+cfzR4J+T/ZO8
XzmeGuXuPvbCfB2WJgitmofc5pLCCIxtOCjnC3oi+cOdoddT+vWcDcrvLUixSEL5
jwLqg1ca8G1yJDJtryc5zeGOEu/mb4Sjtr9G75+vguQFELM2/VLjXpw/YHZz6Apd
0Rx5ZjUI3zSM9jyL11CjlGD7fKxpUGmyIJBW0LDbHFABVQJ/o0U3yVY3wCO27npM
e2IPindUOJMeus3X7nr1L1rCgcms38c=
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:21:29 2026 by rpki-client