Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/f359fc4b-be9e-3134-a46f-0ea552d7c602.roa
File:                     f359fc4b-be9e-3134-a46f-0ea552d7c602.roa (raw, json)
Hash identifier:          6s7hg0YyPHL64h/PCgoFf3F2UsusWvLcWmdMkyXFRlQ=
Subject key identifier:   BE:F6:85:78:1B:33:D4:C0:DE:31:B0:13:8F:C0:EA:99:B8:54:AD:31
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584F63F817A0ECC146B06A4BAC80
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/f359fc4b-be9e-3134-a46f-0ea552d7c602.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     715
IP address blocks:        204.61.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:17:a0:ec:c1:46:b0:6a:4b:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=3fd23c0e-41cb-47ba-b6eb-0d00ad3c812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:53:b7:13:60:8c:3d:55:a4:98:3d:fa:58:
                    27:8b:7f:90:d8:c4:5e:a2:25:f8:bf:d0:82:43:fc:
                    19:61:77:4f:1f:2f:f7:22:1a:12:08:6e:c7:49:16:
                    98:bd:69:6f:7c:dd:e9:40:1d:78:fd:6f:c8:93:18:
                    94:82:4a:92:ca:22:03:6d:31:e8:43:68:03:64:27:
                    ff:8f:c0:99:77:c7:ca:e2:fc:de:84:8d:49:31:5e:
                    b4:88:a4:c5:8a:2c:84:37:36:8f:a1:38:43:e1:de:
                    09:fe:db:31:fa:1f:c2:ea:d3:29:88:5b:50:82:f0:
                    55:34:1f:67:b5:76:95:fd:e6:9e:98:de:1a:22:78:
                    6b:e7:eb:4a:33:7f:dc:24:62:9f:b6:14:e1:43:21:
                    1d:92:2b:9c:98:69:cc:be:ca:9b:50:ff:c6:fa:f0:
                    14:a7:ff:bb:56:d2:86:67:6c:d0:5d:bf:4e:5a:68:
                    a4:24:9c:c0:c9:f8:cc:26:37:c7:2c:0d:9f:66:ef:
                    e3:56:e6:b8:81:c0:38:ee:89:e9:ee:50:44:78:03:
                    12:0a:5d:94:e9:4c:df:d5:66:59:5b:25:7a:27:54:
                    d5:ce:9a:7e:75:c0:f0:c5:57:45:32:25:1d:56:46:
                    85:7b:dc:08:41:53:47:d7:8e:2b:a4:3f:e6:2c:22:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F6:85:78:1B:33:D4:C0:DE:31:B0:13:8F:C0:EA:99:B8:54:AD:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/f359fc4b-be9e-3134-a46f-0ea552d7c602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.61.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:60:04:3e:6e:20:7a:ce:9c:9f:75:a8:61:f1:34:50:d8:5d:
         a7:6e:c6:32:41:d1:eb:6e:69:05:6f:98:05:d7:2d:5f:ec:6b:
         fe:ce:5e:66:53:38:26:e7:eb:b1:25:54:99:b4:31:1d:46:b9:
         c7:c1:d7:37:76:40:e9:38:d6:e2:32:6e:61:50:fc:0a:12:58:
         a2:20:27:50:03:ef:f4:bf:35:a0:b4:94:5b:7c:5f:f8:4e:cc:
         b8:6f:79:c7:a2:fa:6b:ca:dc:aa:99:74:9c:73:df:9b:9f:f0:
         c1:e5:6c:71:7a:0e:8a:60:6a:ed:a5:66:84:56:5d:8f:02:2f:
         06:c5:01:4b:4f:2e:ed:52:ca:f6:10:46:10:91:c9:48:80:44:
         29:d7:79:4a:9a:59:7d:68:6f:2a:75:da:5f:61:e8:46:f9:49:
         36:3b:f4:75:e4:f0:86:46:c6:dc:31:6b:ec:e6:af:4c:18:7c:
         9e:19:d4:1d:b8:0b:55:c0:6c:3c:cf:e0:a6:49:7a:49:83:07:
         b1:48:38:0a:ca:b8:98:d3:97:c8:26:d9:17:05:6f:42:2e:20:
         31:41:00:1c:03:ba:09:f3:d3:91:44:a8:46:d4:3a:6a:9f:59:
         ad:c1:60:17:60:1c:9b:7b:a4:ad:d5:0c:c0:27:9e:a4:d5:70:
         b3:bd:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 04:51:48 2026 by rpki-client