Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa
File:                     7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa (raw, json)
Hash identifier:          tmpbt6FYwc+KLYURgSTm9bfTD0Mhz6ZxIlAktzKOSt4=
Subject key identifier:   8F:0E:C9:53:48:35:A5:E9:4B:21:15:E2:FE:38:D7:33:09:57:52:09
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497E8446C464DA3944E85EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397213
IP address blocks:        204.74.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:84:46:c4:64:da:39:44:e8:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=528195f6-143f-4b1a-8578-f690f64f0700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:4b:7c:ff:a4:a5:a1:05:7f:58:72:91:c4:
                    6a:de:d6:9c:90:38:f0:d8:eb:c0:f5:47:e0:8f:7b:
                    08:0f:d9:c4:e1:c8:2b:07:cb:45:86:3a:da:55:bc:
                    2b:fd:a8:4a:76:89:22:79:7e:6c:3c:f6:6a:bc:10:
                    87:09:ff:43:26:a8:e1:91:28:90:02:82:20:1b:ac:
                    c6:d9:6f:6f:93:d2:16:90:2c:e2:41:91:71:91:bc:
                    8c:9f:c7:89:65:d4:d7:25:5f:46:c6:f8:ff:70:5b:
                    fd:ab:5e:79:d5:11:a7:c0:54:23:fb:d4:b2:a0:81:
                    59:db:07:d9:ef:8c:33:ac:bd:c6:45:9a:37:e6:9d:
                    aa:83:65:f6:0e:c4:21:26:1c:16:0a:9a:33:82:31:
                    fa:b5:64:46:b5:b1:b2:ae:08:ed:41:02:39:0e:b0:
                    26:c1:6f:f3:ab:70:90:d4:5d:f4:f9:bd:57:69:12:
                    f3:05:a1:df:ee:b1:e7:85:f5:cf:76:1a:f0:08:1f:
                    b6:91:a2:a9:6a:c5:b6:96:d0:38:d3:5b:c8:c4:71:
                    be:dd:ba:a4:bc:2e:1d:6c:c9:80:c4:f3:4c:bc:5c:
                    d0:08:a5:4f:c9:5b:16:52:8c:c1:0b:42:bf:7b:07:
                    c6:1b:d7:2a:68:8d:4f:90:8e:f7:6f:35:c0:cd:91:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0E:C9:53:48:35:A5:E9:4B:21:15:E2:FE:38:D7:33:09:57:52:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:70:cc:cd:ad:08:83:cc:70:1b:f8:8d:ec:9e:65:3e:b0:52:
         23:97:a8:fb:f8:70:64:c4:96:ef:02:f3:33:e4:74:a9:87:f0:
         bb:5d:a5:6c:86:98:8a:d0:c4:f4:62:f0:59:24:cc:05:98:25:
         32:03:d2:4e:a4:f8:c6:28:52:eb:d5:93:db:41:ff:2d:85:1a:
         bb:01:e9:da:74:4c:d1:89:de:45:02:1b:79:f9:54:da:79:0e:
         47:f6:f9:73:e0:34:f9:e8:23:6e:89:56:60:7c:c4:fc:ec:51:
         ad:91:06:65:d6:37:e7:d8:f6:4d:19:88:83:d3:55:09:16:0a:
         70:57:5a:5c:e1:e7:eb:1c:e8:de:52:e6:d4:67:9d:f1:43:b4:
         6d:ec:58:ba:ee:82:33:1f:ab:66:52:bd:33:fd:c6:69:3a:b4:
         b6:d1:db:00:15:8b:58:a2:0b:16:fd:14:6d:b8:17:ef:95:12:
         ff:81:dc:f8:79:2e:7a:da:02:6b:42:b2:bf:96:ff:f3:ba:ed:
         65:13:3d:e6:8d:fa:b7:fd:3c:84:1f:08:da:6e:b1:b3:48:0f:
         6a:b6:43:71:dd:71:08:cf:86:dd:5b:7c:cd:79:6d:eb:08:bc:
         f0:b3:1f:46:84:22:c1:af:6a:3d:ec:06:a6:e3:48:33:44:93:
         91:96:92:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfoRGxGTaOUToXsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTI4MTk1ZjYtMTQzZi00YjFhLTg1NzgtZjY5MGY2NGYwNzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJBLfP+kpaEFf1hykcRq3tackDjw2OvA9Ufg
j3sID9nE4cgrB8tFhjraVbwr/ahKdokieX5sPPZqvBCHCf9DJqjhkSiQAoIgG6zG
2W9vk9IWkCziQZFxkbyMn8eJZdTXJV9Gxvj/cFv9q1551RGnwFQj+9SyoIFZ2wfZ
74wzrL3GRZo35p2qg2X2DsQhJhwWCpozgjH6tWRGtbGyrgjtQQI5DrAmwW/zq3CQ
1F30+b1XaRLzBaHf7rHnhfXPdhrwCB+2kaKpasW2ltA401vIxHG+3bqkvC4dbMmA
xPNMvFzQCKVPyVsWUozBC0K/ewfGG9cqaI1PkI73bzXAzZFbDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8OyVNINaXpSyEV4v441zMJV1IJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2ZhMTE3MzQtNDllYS0z
Y2M2LTk1ZWQtZGRlNjlmN2UxMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNwzM2tCIPMcBv4jeyeZT6wUiOXqPv4cGTElu8C8zPkdKmH8LtdpWyG
mIrQxPRi8FkkzAWYJTID0k6k+MYoUuvVk9tB/y2FGrsB6dp0TNGJ3kUCG3n5VNp5
Dkf2+XPgNPnoI26JVmB8xPzsUa2RBmXWN+fY9k0ZiIPTVQkWCnBXWlzh5+sc6N5S
5tRnnfFDtG3sWLrugjMfq2ZSvTP9xmk6tLbR2wAVi1iiCxb9FG24F++VEv+B3Ph5
LnraAmtCsr+W//O67WUTPeaN+rf9PIQfCNpusbNID2q2Q3HdcQjPht1bfM15besI
vPCzH0aEIsGvaj3sBqbjSDNEk5GWko4=
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:02:10 2026 by rpki-client