Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
File:                     af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa (raw, json)
Hash identifier:          RxIDF23F3NmycGQM6/3q6nxSaVk8E6vpI/Q9bKJnREE=
Subject key identifier:   DA:52:BD:B2:0A:2E:B2:27:25:BD:98:E8:2D:1B:31:D1:D3:BE:75:0C
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584B8BE20F59684AB531A031A180
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     42
IP address blocks:        207.34.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:0f:59:68:4a:b5:31:a0:31:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=c44c35c6-f003-457e-a246-df5ef45dfd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:b2:b4:61:a5:ff:26:7d:5e:7d:82:9e:ac:
                    13:52:60:5c:ca:11:9a:90:10:dc:a1:7b:46:43:09:
                    b2:29:e7:c7:3a:4f:fd:60:28:1f:f9:37:84:21:e4:
                    bd:63:d4:f3:be:19:1d:7d:16:1e:73:91:70:6c:66:
                    e2:b1:89:6b:1f:58:56:26:4b:0d:42:b2:05:59:70:
                    7c:03:e8:25:41:56:e4:2e:97:8d:2f:f6:10:c4:bf:
                    cb:9a:6f:3d:25:80:d3:af:ea:2b:43:46:38:05:3e:
                    0a:ef:67:ef:ad:8d:56:a8:49:e1:19:8b:90:9b:2a:
                    71:ec:4c:bc:ea:c4:bd:3e:72:db:a6:17:b7:e7:b7:
                    af:10:a6:6c:08:a3:0f:aa:e9:84:52:1a:4f:30:e9:
                    6f:d1:66:8f:98:ae:17:64:cb:50:ef:d5:3b:0c:36:
                    f4:a2:b0:a2:34:c0:65:cf:5f:a6:69:59:ef:1b:19:
                    6d:c1:70:04:3e:90:f8:d9:44:f7:02:89:10:61:c6:
                    c5:9d:4f:46:4a:85:70:69:40:cb:d2:70:7f:3d:a4:
                    10:2f:64:85:fb:4c:36:f2:a4:75:3c:d5:ee:53:8d:
                    20:e4:00:8f:f8:30:fb:28:e8:46:3e:37:67:30:40:
                    61:9e:9d:14:3d:49:98:e2:8e:d2:66:20:dc:99:f2:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:52:BD:B2:0A:2E:B2:27:25:BD:98:E8:2D:1B:31:D1:D3:BE:75:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af3a9a50-f23f-3ef5-a366-4aa140481c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2e:aa:77:ce:2c:3a:4d:6d:39:8c:d5:ce:bf:7d:b7:75:9f:
         07:fd:60:20:1f:0c:e4:d9:04:5f:6f:4a:a1:03:c5:b8:3c:c3:
         49:2f:a9:4d:56:a3:85:0e:e1:59:8a:00:51:4a:66:b2:f8:71:
         76:17:b0:3b:09:42:91:f8:30:8d:61:02:f8:a5:d0:71:fd:a1:
         3b:4d:08:87:29:c6:3c:1f:92:14:54:56:4c:df:d5:e0:d0:4f:
         21:bd:18:93:79:b9:61:36:c4:25:06:c9:c0:6b:88:37:68:52:
         d4:d5:53:d5:df:d5:da:b1:f9:03:05:fe:f0:ea:ed:47:b7:81:
         0d:52:9b:5a:90:fe:8e:cc:c1:fb:93:1b:67:7d:9a:35:33:97:
         00:f4:f3:c2:11:ae:5c:45:7c:f0:02:f4:b2:ab:ad:8d:32:a5:
         7c:9b:ad:d8:f8:1e:7e:60:4c:e1:fc:78:95:91:f0:ba:5e:df:
         d2:53:d8:3f:f1:f9:79:3f:63:b1:c4:9c:70:22:02:30:e1:c7:
         45:60:11:ca:81:cb:d3:ef:f0:d7:36:8d:23:f4:10:fb:62:0a:
         b4:81:77:26:71:41:79:59:34:0c:7d:d9:fb:d4:5d:da:63:f6:
         52:9c:2a:d7:8a:a6:9d:c9:e2:09:a6:d1:69:77:98:52:06:93:
         14:39:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:25 2025 by rpki-client