Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b533a29-55d1-3b22-9974-0efccbb6eae6.roa
File:                     2b533a29-55d1-3b22-9974-0efccbb6eae6.roa (raw, json)
Hash identifier:          +3XQ923X+yD4yMhgOwDv/Y6tJ+kWoQ9s6+AmWL2QAts=
Subject key identifier:   BD:22:53:19:B6:45:7A:64:D0:F4:02:E8:B8:09:00:07:93:8C:67:25
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DFBD6071E55BEE243A3066300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b533a29-55d1-3b22-9974-0efccbb6eae6.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     397230
IP address blocks:        204.74.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:07:1e:55:be:e2:43:a3:06:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=e367f54d-bdfa-4f07-bade-5671e927d6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:60:cd:d2:8d:fe:bf:6c:f7:b8:3a:2d:97:
                    cc:25:ec:60:b5:34:e3:04:f1:30:93:0b:09:9e:77:
                    9c:ba:bf:cb:d7:da:12:17:72:40:e2:df:97:ce:49:
                    65:33:16:fb:64:12:64:29:e1:49:d4:24:06:08:5c:
                    e7:ed:2e:f3:ff:de:8a:77:b4:1b:20:18:22:c0:57:
                    a1:b3:8d:c1:c4:55:d1:ec:42:25:b5:f7:f7:16:9d:
                    07:02:15:3a:6b:de:0e:a7:87:46:c2:fd:ac:21:00:
                    dd:6a:89:d9:86:d4:6e:68:70:16:2d:ab:f5:24:3c:
                    be:f9:01:f8:e3:16:4f:fd:a5:0f:72:4b:7d:c2:80:
                    4e:55:f4:72:1e:35:db:6f:51:62:b5:a6:36:d3:c4:
                    86:2a:1c:d5:a8:db:62:48:95:93:1d:be:de:3b:a6:
                    38:6a:54:3f:ed:63:2f:2f:24:11:f5:b7:72:24:3f:
                    79:0e:f3:bd:a6:c5:e3:bd:7e:3c:17:cb:11:45:75:
                    bd:3d:55:e4:e7:af:2f:33:72:16:dc:8c:ef:26:54:
                    a2:90:72:5e:a8:73:83:62:6d:ab:0e:74:6a:da:2e:
                    17:6d:fa:7a:66:1c:cc:3e:dc:6a:27:80:e8:4b:89:
                    10:2f:64:12:79:d4:dc:a1:9e:1a:12:54:fc:35:aa:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:22:53:19:B6:45:7A:64:D0:F4:02:E8:B8:09:00:07:93:8C:67:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b533a29-55d1-3b22-9974-0efccbb6eae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:20:d6:d5:05:66:c3:11:3e:2e:5e:3e:d0:55:c7:62:f9:ac:
         99:48:f6:45:ae:54:43:ad:fe:ea:9c:90:96:e8:99:3e:8a:51:
         69:44:45:ba:0d:b4:e8:9d:78:26:d3:e8:b1:b1:08:9a:a4:6e:
         15:01:1f:48:66:b2:80:e2:b9:72:35:ac:dc:77:f3:65:b0:7f:
         ce:fc:3d:b6:fd:45:c9:8c:b5:9c:b2:85:56:40:87:76:88:2b:
         9e:29:3f:df:80:e1:56:d1:31:93:66:82:5b:7a:84:96:be:ab:
         17:25:e1:d6:12:eb:49:17:38:89:78:5a:62:c9:13:be:7c:ff:
         f4:07:a1:3c:99:d6:bf:b9:b9:91:51:8d:ac:b1:c6:27:67:4c:
         b8:57:d4:bb:da:1f:86:0e:c5:c2:52:af:3d:21:2e:8d:86:f0:
         8f:ca:62:12:c2:27:e5:6d:6c:e6:4b:de:38:c0:3b:69:5a:80:
         9a:e3:b9:d9:37:4c:51:de:3d:ce:54:fb:fa:ac:3d:87:c5:9c:
         cb:2f:ae:a7:1b:ae:00:d8:6e:2b:e5:83:dd:ce:98:7c:c1:b3:
         9b:f0:65:e6:52:01:19:25:29:3c:02:17:29:31:38:5d:9e:bc:
         14:f5:21:b0:7a:c3:51:7a:e7:e1:56:57:a8:f1:54:12:f2:f0:
         f8:d1:9f:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371gceVb7iQ6MGYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
ZTM2N2Y1NGQtYmRmYS00ZjA3LWJhZGUtNTY3MWU5MjdkNmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15pgzdKN/r9s97g6LZfMJexgtTTjBPEwkwsJ
nnecur/L19oSF3JA4t+XzkllMxb7ZBJkKeFJ1CQGCFzn7S7z/96Kd7QbIBgiwFeh
s43BxFXR7EIltff3Fp0HAhU6a94Op4dGwv2sIQDdaonZhtRuaHAWLav1JDy++QH4
4xZP/aUPckt9woBOVfRyHjXbb1FitaY208SGKhzVqNtiSJWTHb7eO6Y4alQ/7WMv
LyQR9bdyJD95DvO9psXjvX48F8sRRXW9PVXk568vM3IW3IzvJlSikHJeqHODYm2r
DnRq2i4Xbfp6ZhzMPtxqJ4DoS4kQL2QSedTcoZ4aElT8NaoXeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0iUxm2RXpk0PQC6LgJAAeTjGclMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmI1MzNhMjktNTVkMS0z
YjIyLTk5NzQtMGVmY2NiYjZlYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcg1tUFZsMRPi5ePtBVx2L5rJlI9kWuVEOt/uqckJbomT6KUWlERboN
tOideCbT6LGxCJqkbhUBH0hmsoDiuXI1rNx382Wwf878Pbb9RcmMtZyyhVZAh3aI
K54pP9+A4VbRMZNmglt6hJa+qxcl4dYS60kXOIl4WmLJE758//QHoTyZ1r+5uZFR
jayxxidnTLhX1LvaH4YOxcJSrz0hLo2G8I/KYhLCJ+VtbOZL3jjAO2lagJrjudk3
TFHePc5U+/qsPYfFnMsvrqcbrgDYbivlg93OmHzBs5vwZeZSARklKTwCFykxOF2e
vBT1IbB6w1F65+FWV6jxVBLy8PjRnws=
-----END CERTIFICATE-----
Generated at Wed Jun 10 03:04:06 2026 by rpki-client