Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/598299c4-8652-3925-b443-52f1d725ebd6.roa
File:                     598299c4-8652-3925-b443-52f1d725ebd6.roa (raw, json)
Hash identifier:          53lEWPk8ymVHcTZa8f6Ys6mm3CJ1h+08jDbkw6fYWNA=
Subject key identifier:   63:08:6C:F2:65:A2:B1:9B:43:4D:BC:99:3D:9B:C1:43:F1:D9:6A:83
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F3FAD6024194253A46264FA80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/598299c4-8652-3925-b443-52f1d725ebd6.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     397224
IP address blocks:        204.74.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:60:24:19:42:53:a4:62:64:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=f713614f-88ac-4e43-a1f4-2f11baad6edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:21:2a:49:81:9e:40:b8:e8:1a:d8:d4:19:65:
                    b1:c7:7f:ad:b9:ef:3c:eb:7c:5b:f9:d0:c6:d3:85:
                    61:17:eb:14:00:74:d4:4f:06:9d:6b:51:af:3e:28:
                    69:87:b0:31:43:d5:68:b1:73:68:46:68:24:16:89:
                    f5:5a:99:aa:f0:ed:fc:b6:be:9e:57:ec:db:a8:78:
                    c2:de:03:0e:7c:56:50:13:fe:4c:a6:4e:1b:c0:6a:
                    80:c0:79:ea:c4:1d:3d:1c:69:c0:43:d6:7c:5a:f9:
                    9a:3d:4c:bb:62:5e:45:0c:b0:39:a6:d6:7f:4d:9c:
                    ea:12:be:84:62:ae:34:f8:9e:ff:42:8c:e9:bd:27:
                    b6:e4:d0:1a:ec:bd:1d:21:a2:fe:f0:34:7b:36:cc:
                    80:5f:d2:5e:ca:c4:5a:18:a1:b8:f6:43:71:d9:69:
                    dd:72:29:e0:59:d4:dd:d1:c4:3b:a3:56:6b:a2:e6:
                    62:4b:25:1a:65:26:3b:35:93:ca:86:40:79:db:bb:
                    e0:8c:73:91:a0:71:35:10:65:db:af:28:a1:20:99:
                    59:06:c8:9c:db:7d:49:67:db:2b:f3:f2:6e:91:6b:
                    75:7b:8c:c8:71:c7:94:49:98:ae:60:9c:73:27:ab:
                    67:cf:19:20:35:9e:df:df:b8:ac:56:3e:99:43:b2:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:6C:F2:65:A2:B1:9B:43:4D:BC:99:3D:9B:C1:43:F1:D9:6A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/598299c4-8652-3925-b443-52f1d725ebd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:01:28:0c:51:a5:3f:c6:f3:d4:57:8c:d9:2e:76:e7:55:55:
         fc:31:86:96:07:76:97:6a:f9:aa:45:98:4d:6f:6f:ca:4d:fa:
         2f:ff:7d:dd:77:3f:5a:ad:1f:95:b1:a4:00:1d:a5:20:a5:55:
         0b:61:79:07:8a:08:85:9f:bc:a3:ec:62:b4:e8:2f:06:a5:bc:
         e5:28:5e:4a:5a:19:81:12:7d:b0:ca:6d:4d:0f:3f:ea:f0:68:
         90:ab:cc:72:08:3f:53:6e:5e:6c:5b:25:08:92:61:5b:36:f4:
         24:36:b6:1f:54:3b:a7:2c:ee:05:84:12:c6:f3:fb:9e:43:0d:
         a3:ad:77:1c:56:a0:33:03:71:b6:f0:90:f2:32:d0:20:9d:96:
         75:19:16:de:86:06:ba:69:70:b6:55:75:6f:fb:03:89:4c:c3:
         15:72:2c:2c:07:78:ad:58:3e:ff:32:52:58:6d:bd:f7:3f:0a:
         1a:28:9e:07:ca:56:8d:0c:be:20:a9:42:0f:1b:5f:25:52:63:
         05:5e:69:d7:d5:2a:56:92:a4:3e:5b:6a:e3:18:97:ea:16:1b:
         c1:4d:db:eb:5b:f0:92:4c:a6:ae:54:06:54:98:3a:b7:b5:95:
         77:61:81:a9:44:48:5b:51:eb:b0:bb:e5:48:ed:2d:0f:14:89:
         cb:ba:db:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rWAkGUJTpGJk+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZjcxMzYxNGYtODhhYy00ZTQzLWExZjQtMmYxMWJhYWQ2ZWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yEqSYGeQLjoGtjUGWWxx3+tue8863xb+dDG
04VhF+sUAHTUTwada1GvPihph7AxQ9VosXNoRmgkFon1Wpmq8O38tr6eV+zbqHjC
3gMOfFZQE/5Mpk4bwGqAwHnqxB09HGnAQ9Z8WvmaPUy7Yl5FDLA5ptZ/TZzqEr6E
Yq40+J7/QozpvSe25NAa7L0dIaL+8DR7NsyAX9JeysRaGKG49kNx2WndcingWdTd
0cQ7o1ZrouZiSyUaZSY7NZPKhkB527vgjHORoHE1EGXbryihIJlZBsic231JZ9sr
8/JukWt1e4zIcceUSZiuYJxzJ6tnzxkgNZ7f37isVj6ZQ7IrPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMIbPJlorGbQ028mT2bwUPx2WqDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTk4Mjk5YzQtODY1Mi0z
OTI1LWI0NDMtNTJmMWQ3MjVlYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsBKAxRpT/G89RXjNkududVVfwxhpYHdpdq+apFmE1vb8pN+i//fd13
P1qtH5WxpAAdpSClVQtheQeKCIWfvKPsYrToLwalvOUoXkpaGYESfbDKbU0PP+rw
aJCrzHIIP1NuXmxbJQiSYVs29CQ2th9UO6cs7gWEEsbz+55DDaOtdxxWoDMDcbbw
kPIy0CCdlnUZFt6GBrppcLZVdW/7A4lMwxVyLCwHeK1YPv8yUlhtvfc/ChoongfK
Vo0MviCpQg8bXyVSYwVeadfVKlaSpD5bauMYl+oWG8FN2+tb8JJMpq5UBlSYOre1
lXdhgalESFtR67C75UjtLQ8Uicu62/Y=
-----END CERTIFICATE-----
Generated at Mon Oct 5 10:47:50 2026 by rpki-client