Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010b0099-f8c6-38db-a10f-00a3df2a49fb.roa
File:                     010b0099-f8c6-38db-a10f-00a3df2a49fb.roa (raw, json)
Hash identifier:          ReW6dqqyvhDlyBxLC4/gg6eJCOWDHshbb+qWtIPjfok=
Subject key identifier:   5D:F2:86:BF:EC:D3:EB:5A:CA:FD:08:42:28:B7:E6:E7:F8:35:B8:54
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1DBF598EED8DBE15E9680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010b0099-f8c6-38db-a10f-00a3df2a49fb.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397215
IP address blocks:        204.69.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:db:f5:98:ee:d8:db:e1:5e:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=f47c01e7-78c3-4217-8c44-a694a300cc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:25:c4:ca:69:59:f2:81:34:97:58:9e:62:
                    0e:64:cf:42:92:13:69:05:6a:82:ae:6e:c4:2a:e3:
                    ae:39:37:0a:80:02:ef:61:11:f4:30:d0:af:8b:e9:
                    f7:6d:a6:75:85:03:c8:91:d5:cd:ab:49:09:76:f0:
                    21:eb:4c:e3:a3:f2:0a:f9:3e:a4:96:aa:27:02:2b:
                    9c:0e:db:cf:08:de:9a:79:1a:f4:63:66:e9:7f:94:
                    1a:b7:f4:99:d1:47:2a:d3:7b:94:fb:8c:94:63:36:
                    73:21:37:2d:77:c6:f4:bc:94:0f:63:15:07:b1:e8:
                    00:5a:f1:81:25:94:8b:65:ec:5a:1f:58:1e:d7:70:
                    4d:1c:2a:80:30:65:1c:3f:cb:5e:ce:33:a3:0c:a7:
                    89:4f:10:c5:c9:a1:5c:1a:eb:2d:90:0c:45:fb:a6:
                    66:4c:26:db:cb:21:ca:66:50:96:61:9b:2f:a1:4c:
                    79:15:43:d1:93:2b:a9:82:94:80:f8:d9:c6:a4:61:
                    f5:d6:4f:ff:8a:67:dc:f0:2b:83:c3:74:fb:c5:ce:
                    0b:d7:88:ff:23:72:d6:ca:d4:d5:20:c7:3d:aa:51:
                    c8:84:69:5a:ff:fa:c2:c2:7e:b0:a6:f6:3f:43:d9:
                    75:19:6f:f9:4e:4e:9d:e5:dc:6b:9e:93:55:d7:08:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:86:BF:EC:D3:EB:5A:CA:FD:08:42:28:B7:E6:E7:F8:35:B8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010b0099-f8c6-38db-a10f-00a3df2a49fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:90:26:4c:12:af:96:30:e1:8a:97:56:c1:de:ae:01:60:
         9f:d5:a8:c7:a7:41:47:11:25:05:20:a5:f8:fe:6d:7a:63:2a:
         8c:5c:ab:9a:ae:18:fe:b6:bc:2b:9b:0e:59:67:03:b5:cc:2c:
         0f:43:b4:31:a9:aa:e8:1f:60:49:3e:31:24:24:56:5a:39:a4:
         d8:9a:41:4a:1b:2c:97:53:85:d1:fe:85:eb:6e:1b:fc:e7:35:
         9d:34:0c:5b:79:33:d8:7a:fc:c7:0c:38:bd:0f:53:1a:a5:ad:
         33:fe:e5:0a:e7:69:e4:da:62:a7:ec:d6:ae:5c:b0:73:34:08:
         30:9f:f6:80:e6:9d:17:d7:15:04:71:c6:36:41:ae:c9:9a:17:
         23:38:03:24:15:bc:8b:f5:cf:f9:4e:24:06:57:73:61:88:db:
         75:3e:76:b6:07:31:48:06:4a:da:e1:70:81:28:80:28:ac:c5:
         54:40:60:ad:ab:34:0a:6b:87:d6:76:f2:83:d9:4e:f1:6f:11:
         f6:fc:61:28:08:ce:6f:6f:06:3c:8c:a6:ec:f9:55:35:9e:cd:
         7f:93:a1:90:f1:5e:c6:c9:d9:1b:67:2d:ad:05:17:2a:67:13:
         35:9f:50:1a:8e:05:b7:d8:17:a1:39:34:1b:08:4c:bf:d4:ce:
         e3:cc:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:57 2025 by rpki-client