Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bbdba78-d214-3c5a-b7af-0b0b680632d1.roa
File:                     9bbdba78-d214-3c5a-b7af-0b0b680632d1.roa (raw, json)
Hash identifier:          ztjUFgtjQIt+8j9bOpugQisslqMqulOUL1vjvUP4OOE=
Subject key identifier:   A2:B7:5F:BD:B8:80:6D:80:18:AC:82:28:3B:E0:CA:04:96:4A:0F:97
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D091294BDF0B2F7657C017E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bbdba78-d214-3c5a-b7af-0b0b680632d1.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397230
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:94:bd:f0:b2:f7:65:7c:01:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=8e3f5633-a7dc-4226-9faa-90982a481c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:1e:af:4f:39:52:bc:ce:66:c6:5f:47:5b:
                    6c:f2:04:3f:b4:9e:b3:9a:9a:cb:4f:cf:3e:64:8e:
                    e1:60:48:0c:52:bb:86:de:ab:da:ac:f9:ed:9a:68:
                    0e:b4:e1:0c:b6:66:0b:11:75:38:dd:53:d0:c1:f1:
                    3a:b5:59:01:3a:3f:c8:4d:64:f1:0b:c5:52:fd:c0:
                    db:06:d7:bd:7d:8d:97:b4:00:d9:2a:61:3c:12:b7:
                    88:b8:e0:49:23:b3:fd:66:c4:ed:ae:18:f5:8f:ff:
                    61:83:3b:4f:f7:86:6c:1e:f4:10:93:07:5d:db:64:
                    9e:33:8d:c8:8b:27:81:12:02:f1:9d:96:34:a8:51:
                    45:e8:cf:a4:30:4e:93:3e:66:bb:1e:a8:d9:f8:33:
                    8a:11:70:5c:e1:b1:7a:1b:f3:af:f1:6b:a0:df:39:
                    22:55:1d:24:8d:5f:ca:6b:20:8e:ae:f6:9b:86:75:
                    b1:e2:8c:b4:31:52:f6:32:63:5b:c3:b1:9e:0e:46:
                    21:0e:e8:b9:b5:3c:7e:12:53:c1:66:d9:24:3e:43:
                    c3:21:78:87:6b:3c:8d:49:27:7f:6b:6d:39:b0:2c:
                    91:2f:69:23:16:51:da:40:62:f0:af:fd:12:7c:23:
                    06:54:82:82:98:3a:85:fd:a5:5e:78:e9:05:11:8d:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:5F:BD:B8:80:6D:80:18:AC:82:28:3B:E0:CA:04:96:4A:0F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9bbdba78-d214-3c5a-b7af-0b0b680632d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:04:d9:10:5a:e8:6a:57:f5:c2:56:48:e5:79:65:84:31:9b:
         1c:2b:90:b3:ae:61:89:7c:67:03:34:be:24:b6:a2:2b:fa:5b:
         b6:b5:81:29:c6:5b:83:57:82:5c:06:05:15:03:2f:15:d8:b1:
         fb:ab:6d:e4:46:a5:5e:ab:da:7e:3e:c1:9b:b9:e9:93:47:08:
         1a:96:1e:32:d0:27:f9:07:7b:d7:75:98:b1:02:7b:ca:31:10:
         8d:72:5d:70:99:b0:84:b1:c0:b3:a3:06:4b:9c:cd:34:b6:29:
         2e:e7:ab:7b:04:bb:fd:c6:43:e4:95:cf:b1:20:31:76:05:d9:
         0e:f7:05:d3:92:d0:fd:88:3e:32:5a:70:f6:11:75:0a:0f:78:
         eb:a9:cd:0a:8c:df:13:0d:5d:15:46:7f:3b:b2:49:61:42:e3:
         a4:da:a6:b9:01:90:1a:9a:91:1d:6a:20:bb:26:42:20:89:d1:
         e2:da:f5:ad:64:a8:9e:f2:28:5d:ca:45:d0:41:ae:38:75:02:
         4f:a4:f5:45:14:a7:c3:8f:0b:d9:4a:ab:b0:3a:c6:2d:93:43:
         f1:52:a3:9c:dc:a9:57:cc:19:97:db:07:0d:f8:42:57:f2:12:
         47:89:6d:f7:14:10:68:72:eb:56:84:fe:ed:28:92:8d:3e:4f:
         bb:88:c2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:18:26 2026 by rpki-client