Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/74abb825-6751-3f34-9f0c-a033ce95f33c.roa
File:                     74abb825-6751-3f34-9f0c-a033ce95f33c.roa (raw, json)
Hash identifier:          2v41RjhTjf5RTKboTTnQNzKYqJ+KhBcKNFh2dkgahd8=
Subject key identifier:   89:77:09:9C:BD:AB:09:84:22:4E:AD:5F:55:69:9C:5F:21:8D:2A:A6
Certificate issuer:       /CN=c0737391-61e0-4d30-9aa1-7caa06980033
Certificate serial:       010D0C9F4328584B328C32681F7F2BE6D4714270
Authority key identifier: 4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/74abb825-6751-3f34-9f0c-a033ce95f33c.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     30136
IP address blocks:        204.228.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:32:68:1f:7f:2b:e6:d4:71:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0737391-61e0-4d30-9aa1-7caa06980033
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=ef342996-5d58-4723-a216-e67a1204dd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:ae:33:48:ed:66:af:00:45:d7:d6:27:68:
                    9b:a2:c0:0d:4b:4a:f0:cb:5f:42:54:a8:54:67:69:
                    c0:f1:60:60:8d:5e:23:1c:2b:d5:92:2a:6b:58:58:
                    4e:0a:a4:83:42:e6:4a:c3:66:b3:af:1f:4b:62:f5:
                    5d:5c:e9:4c:6f:b2:9e:af:ab:29:fd:8d:96:23:bf:
                    6e:b8:ba:d8:19:35:b1:54:04:47:86:24:9d:07:49:
                    4e:11:5f:87:b4:37:18:f5:5d:9f:3d:52:c0:fb:8e:
                    fe:20:ac:9e:c3:2d:27:27:82:3d:8e:dc:c9:bc:72:
                    a9:da:15:2d:c6:f6:fa:95:a3:f3:aa:0a:42:96:5f:
                    ed:ee:90:22:87:c2:0c:34:91:e3:be:ef:99:92:cd:
                    4f:de:a3:6b:a6:26:fd:7b:84:f3:5c:e1:2c:25:e5:
                    ba:33:02:1f:d3:d9:57:b6:a9:01:47:3f:f0:fe:5e:
                    53:04:a1:1c:34:0d:3d:50:87:51:b2:f6:22:81:92:
                    75:7f:32:59:75:90:26:b4:04:ff:e9:5b:98:bd:69:
                    fc:07:76:95:50:f3:6b:e6:61:c6:2e:fd:7e:e2:c9:
                    9c:2c:1d:b6:08:87:49:b6:4a:0a:e1:04:5d:a1:b8:
                    4d:1a:c0:f7:81:e3:89:e0:f4:d3:4f:ca:bf:84:a9:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:77:09:9C:BD:AB:09:84:22:4E:AD:5F:55:69:9C:5F:21:8D:2A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/74abb825-6751-3f34-9f0c-a033ce95f33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl

            X509v3 Authority Key Identifier:
                keyid:4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.228.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:a7:3c:e2:bf:ab:72:8c:cb:98:f5:04:aa:51:21:8f:b7:
         fb:ab:c6:13:c1:6f:80:2b:fe:30:43:5f:ce:87:6d:73:38:06:
         ae:84:db:ec:2d:e4:2b:bd:d3:b9:db:91:98:a2:a8:c2:36:c0:
         3c:d3:6a:c3:4e:f5:06:56:30:37:e2:68:a6:46:be:98:f8:06:
         fa:3a:5f:3f:89:b0:0c:5a:bb:b5:78:43:1d:f3:2d:d5:3e:fe:
         da:7b:50:57:25:71:90:6e:cb:5e:b0:34:07:ba:1b:4d:fc:50:
         51:a2:ec:ed:ba:09:0a:76:85:a6:49:7a:52:0b:1d:31:ff:a4:
         a0:dd:11:74:0e:60:6d:3c:38:2a:84:6a:99:b0:dd:c1:00:4f:
         16:07:6e:37:89:b3:59:e8:fc:71:74:96:40:ea:c3:85:51:f1:
         3e:73:aa:cc:50:60:8d:ea:75:e8:dd:04:d0:d2:a3:3d:1e:b6:
         2b:9d:8a:92:2f:94:97:1d:8e:4e:85:e2:37:c6:37:0c:7a:ff:
         f8:b3:f8:f0:2a:d2:b2:49:d3:d1:58:76:72:a5:29:a8:1f:24:
         6e:4e:34:8b:14:17:88:24:34:7d:96:0b:ea:5d:7c:2b:17:8c:
         37:a8:71:72:94:62:9e:b0:19:37:98:a2:e3:d4:d9:53:dc:7b:
         af:87:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:44 2025 by rpki-client