Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5b9ea761-38fa-3b44-b9f8-510747547c4d.roa
File:                     5b9ea761-38fa-3b44-b9f8-510747547c4d.roa (raw, json)
Hash identifier:          lWAqtzF1hD0+8eZTa2Ka9no412zHf+J9eVBOCmFNXDE=
Subject key identifier:   68:66:3E:1B:FD:AA:43:A3:61:91:28:AC:68:14:93:CF:22:A1:DB:CE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B09765C10777402893E600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5b9ea761-38fa-3b44-b9f8-510747547c4d.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        204.69.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:97:65:c1:07:77:40:28:93:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=a5b30803-b780-4060-b018-eb5afdc75223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:a9:8e:00:2a:1d:e6:ff:ae:e3:70:80:56:
                    95:0d:f2:98:c0:82:75:54:2a:f2:fd:1b:c8:bf:2f:
                    54:cd:4e:ed:9b:3b:b5:00:9a:83:59:ff:ab:9b:5b:
                    8b:47:54:2f:1e:33:54:67:ed:cd:2f:43:34:d1:ac:
                    bb:27:2d:85:c7:b7:53:18:21:ee:d2:22:6a:34:6b:
                    03:19:0c:c0:84:c6:e2:46:d9:95:f3:95:ce:87:50:
                    ac:56:0c:03:fe:08:a1:58:c7:28:18:d0:e2:56:af:
                    3e:29:f8:09:dd:0c:b3:12:91:30:a0:b2:b6:e9:da:
                    d4:4c:af:e5:93:e7:30:9b:86:2e:ad:b7:c6:1b:35:
                    4b:c5:a6:65:b1:75:dd:56:2d:2e:f7:c1:20:55:c1:
                    9f:fe:25:91:5a:1c:0c:21:b4:27:07:70:30:73:ed:
                    74:53:10:ba:2d:51:cb:10:a9:a7:af:35:50:7e:f6:
                    0b:03:29:20:50:6a:a3:f0:16:24:7a:42:6e:ca:42:
                    6e:4f:0a:23:58:b9:b3:b4:9d:18:7b:62:94:02:2a:
                    b6:3e:cf:4b:60:fc:49:1c:da:b9:f4:11:87:86:65:
                    a0:d6:00:96:3d:00:31:99:24:82:fd:7a:45:82:f8:
                    13:ff:52:5c:b8:e7:12:8d:1b:de:9c:3e:99:7b:5c:
                    3c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:66:3E:1B:FD:AA:43:A3:61:91:28:AC:68:14:93:CF:22:A1:DB:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5b9ea761-38fa-3b44-b9f8-510747547c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:58:85:e9:a6:5d:aa:a4:ba:c7:fb:0b:f1:ad:38:f8:d0:
         fd:42:72:63:bf:45:5b:4e:2b:42:82:d3:33:70:df:08:54:93:
         03:98:08:dd:13:18:cb:c4:f2:a9:26:28:c7:0f:8d:d9:97:f8:
         d0:4f:f5:e9:09:a8:92:e1:c4:ea:00:73:7c:71:e7:22:3e:fe:
         4c:74:74:ec:0d:f5:f7:2b:0b:fe:ca:d4:cf:07:09:b1:f8:c3:
         9a:ff:fd:ec:a0:f7:d1:7d:79:9e:5f:27:50:a4:62:2a:57:b3:
         d9:61:16:77:92:0f:73:15:0a:33:db:9f:54:26:cb:f5:ae:43:
         54:be:7a:6e:c4:09:6c:d9:ce:4d:89:96:38:58:26:2b:1d:e5:
         15:9e:ad:fa:36:e5:5a:9f:6f:66:13:03:d5:1f:83:0c:ae:1a:
         31:85:fb:b3:7f:0f:db:3e:ad:10:b1:04:bc:ce:d6:4f:58:5c:
         69:d6:01:7e:8d:bb:62:aa:25:15:87:68:e4:5e:c2:3c:04:92:
         c3:78:21:e5:01:b0:14:53:09:27:1c:97:3f:59:40:95:d2:dd:
         ee:da:bf:42:e5:cc:da:3e:12:43:c4:8b:66:7b:b0:40:2a:bf:
         51:2d:a8:4d:60:ef:83:2c:81:35:16:ec:b4:fc:55:e9:7c:54:
         6e:e9:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:24:03 2026 by rpki-client