Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/de55e962-862f-3780-82a1-1ca6bbef1e33.roa
File:                     de55e962-862f-3780-82a1-1ca6bbef1e33.roa (raw, json)
Hash identifier:          +b1cAMnp9yrBSLaeFI5wv+1WFEBRfs3wsFajcCjlVWk=
Subject key identifier:   6B:03:9E:5F:10:75:AA:CB:62:D6:ED:E5:7D:10:C1:E2:34:20:6E:30
Certificate issuer:       /CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd
Certificate serial:       010D0C9F4328584E4989D533B877E2F6BB4AA180
Authority key identifier: 2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/de55e962-862f-3780-82a1-1ca6bbef1e33.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     3688
IP address blocks:        74.117.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:d5:33:b8:77:e2:f6:bb:4a:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=3d737eaf-4137-411a-9c75-e5f8994473d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:00:45:84:5b:35:a5:0f:c4:ff:70:24:ec:
                    41:aa:21:d6:2d:2c:26:c4:85:41:75:6d:e9:b4:44:
                    9e:77:10:96:7a:b2:59:74:8a:74:c0:30:a8:ad:eb:
                    2f:bf:52:13:4b:85:44:5b:c8:01:e3:54:6c:be:6d:
                    74:14:38:6b:b6:34:a9:b1:06:c6:60:dc:6c:78:9f:
                    44:ca:68:90:ab:48:07:12:71:19:b3:57:66:c7:92:
                    37:99:64:76:c7:ea:a5:09:9e:d4:01:e7:90:fd:aa:
                    25:83:0d:12:18:9f:69:53:be:f3:6d:c7:e1:5b:0b:
                    e4:9b:14:80:f7:8f:7f:67:b9:48:aa:f0:91:61:8f:
                    50:18:2f:6d:b4:8c:21:bb:d9:30:9d:39:96:66:bd:
                    0a:f7:8a:2f:7e:b0:06:9f:f5:f0:af:1c:77:90:86:
                    95:4d:a2:05:53:6f:2e:b3:ff:9a:7d:1f:1c:2f:76:
                    f3:17:58:89:8f:8e:a9:20:e6:bf:9d:0f:42:04:51:
                    d3:04:6c:08:a1:88:58:15:b1:68:11:48:54:8b:29:
                    87:d7:05:5d:12:c6:a4:bc:81:66:35:e3:9f:9d:03:
                    83:f9:fc:92:a4:a5:51:27:c9:b3:47:a4:c4:de:15:
                    d1:72:62:41:44:ef:6b:28:e5:fc:01:19:ce:c3:1f:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:03:9E:5F:10:75:AA:CB:62:D6:ED:E5:7D:10:C1:E2:34:20:6E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/de55e962-862f-3780-82a1-1ca6bbef1e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7d:fd:ac:03:e7:62:df:1f:1f:9a:ab:5b:78:29:c1:8b:6d:
         52:b3:44:b3:71:7f:08:bb:e3:c9:76:c3:85:dc:08:d2:50:70:
         85:c6:51:5e:c2:30:36:53:99:f1:ae:05:ec:81:d1:b8:e5:59:
         4f:a2:e1:63:a6:ee:91:2a:ad:e0:03:ec:51:e1:94:33:2f:83:
         98:50:2d:10:49:c4:6e:54:53:ce:37:a4:81:45:36:a2:1f:dc:
         ea:5e:2d:28:89:97:1f:43:8a:b8:11:72:b9:3a:54:56:b8:25:
         25:08:e6:6d:12:71:73:ba:5c:ed:36:dd:f2:17:73:c4:16:e0:
         39:fb:a9:eb:b5:2d:95:05:d4:ae:e0:1d:16:85:bd:d0:81:84:
         2e:e6:b2:50:ca:01:1d:81:f2:97:d2:82:57:ec:9e:be:61:a8:
         ca:16:cc:64:37:33:66:0f:e2:c0:c7:b9:ae:cd:35:52:03:92:
         be:da:5d:67:84:3e:8c:ad:7f:64:34:f3:69:51:02:04:51:ff:
         d0:65:82:59:77:03:ca:38:94:33:06:b0:eb:1f:1d:85:0e:23:
         97:cf:0c:98:5b:af:09:06:a4:50:d1:c0:b6:39:0b:fa:31:eb:
         15:b4:f4:f1:a3:69:d4:29:df:27:9e:cc:15:35:4d:9b:f9:5d:
         09:d0:6f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 21:10:18 2026 by rpki-client