Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/145a513e-1f0c-3ee8-8dc0-55d53f7e89d0.roa
File:                     145a513e-1f0c-3ee8-8dc0-55d53f7e89d0.roa (raw, json)
Hash identifier:          BQH9X3VJfMSw53gnO/XBZxPd4DVKsUX8A1II3h1HFAg=
Subject key identifier:   F8:52:63:1B:70:B9:8E:53:82:A1:C8:D9:6C:E0:8E:2B:B5:D1:40:1E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09127E334318BEB6B3DDC800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/145a513e-1f0c-3ee8-8dc0-55d53f7e89d0.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397232
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:7e:33:43:18:be:b6:b3:dd:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=e8bcb903-48ff-4696-8b00-3f5c81a5651d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:db:97:be:9d:c4:db:8d:48:be:e3:0c:41:
                    91:0e:a9:50:a0:8c:0a:7a:0e:fc:47:3e:63:01:d9:
                    e0:8a:cb:fb:7d:82:45:db:90:97:c2:ff:0a:0f:a2:
                    1c:07:cc:22:6b:ff:d0:e9:9c:11:6a:f3:76:d3:e8:
                    0a:a2:d9:41:65:ee:0d:37:d0:e2:b9:d1:98:b3:16:
                    46:e6:68:8a:d1:1b:ea:8b:51:f4:e5:67:4f:2c:f5:
                    79:7e:c5:25:19:af:92:e9:ce:01:94:4c:61:62:c3:
                    dc:27:54:2c:06:41:cc:90:fc:9e:a0:4a:59:97:87:
                    36:aa:9b:99:d1:cd:c0:a8:f7:77:b5:e3:37:d2:79:
                    3f:3b:d2:ef:88:73:f0:ef:1a:43:e6:6a:8a:ab:ae:
                    c9:31:5f:82:8b:fe:8c:89:d6:9c:a3:3b:1f:91:26:
                    07:fc:67:f6:8d:f4:ef:b5:ec:5f:83:25:c8:a0:1c:
                    3c:10:9e:84:66:0f:51:a0:a6:99:60:e2:45:14:d6:
                    20:44:63:35:7b:a9:ff:29:73:b2:e3:c0:54:7c:43:
                    ba:e9:76:0d:36:28:04:6e:e9:ab:00:4c:d9:6b:65:
                    55:6c:d9:84:7d:7d:2f:8a:21:b0:88:ea:5b:32:14:
                    bb:81:a6:fa:88:6f:24:de:e9:71:1e:44:6d:10:72:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:52:63:1B:70:B9:8E:53:82:A1:C8:D9:6C:E0:8E:2B:B5:D1:40:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/145a513e-1f0c-3ee8-8dc0-55d53f7e89d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:f6:bb:e2:38:45:bc:9b:ee:35:b2:ab:e4:34:7e:61:8a:
         3b:00:8e:9e:64:1c:9d:fe:3e:24:8b:f0:bd:f1:6e:d3:0b:8f:
         ca:32:b0:bf:55:f8:6a:4d:bd:2a:64:89:24:d3:ba:12:6d:cb:
         8e:1e:bd:3b:6d:65:2a:bc:04:ab:2b:7f:68:b5:fd:8d:53:2c:
         95:eb:57:3e:3a:b8:97:bf:2e:da:e4:2a:31:56:e9:6d:e4:a6:
         75:fe:65:c5:4c:07:ee:d7:b3:1d:b9:99:d1:4b:61:a2:2c:55:
         7a:76:b7:98:6b:90:a2:6b:bf:31:b2:0f:b9:e2:98:2f:0d:53:
         48:5c:63:cc:01:2a:c9:7d:a1:b0:3f:5a:44:ae:89:00:b5:b0:
         9a:14:0b:d5:a4:50:25:94:02:b5:9e:ce:c2:d8:d2:d8:f7:26:
         a1:62:ce:9f:eb:36:ee:21:46:6f:cf:5c:7e:c8:f3:d9:6e:6a:
         99:9c:05:40:55:e5:e1:79:ca:2a:86:01:92:71:7b:20:df:20:
         4e:fe:85:37:6a:4a:8b:d2:29:15:d3:c3:c3:59:49:7c:35:35:
         bc:47:72:c8:26:f8:bf:0f:6a:26:71:f4:51:c4:d8:17:8c:36:
         ef:34:e3:5d:35:60:07:10:23:2c:c4:ae:a8:34:d0:24:03:f8:
         b3:64:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:34:26 2026 by rpki-client