Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09e1be13-412e-3420-9d10-10ee28f83974.roa
File:                     09e1be13-412e-3420-9d10-10ee28f83974.roa (raw, json)
Hash identifier:          n9D9+IZ8FBj/aeOKOGfzE67cvpFNVO+52vXvl4CCBPw=
Subject key identifier:   18:9D:F1:9C:0B:A9:F3:BC:9A:11:9A:8A:49:4E:BE:0A:22:F7:17:BF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A4F05D408DA4A21CEBA283A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09e1be13-412e-3420-9d10-10ee28f83974.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397223
IP address blocks:        204.74.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d4:08:da:4a:21:ce:ba:28:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=50f02fc9-8425-4c3e-9d5f-94c726a9a6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:ed:ed:4e:b1:2d:76:92:26:94:41:48:7f:
                    d6:1b:7b:71:c8:a3:db:e6:f2:23:89:c3:97:2c:4b:
                    42:97:24:66:79:80:f6:5f:29:be:60:e8:71:14:11:
                    08:78:d3:88:10:ba:39:e1:25:b4:09:de:90:4a:b4:
                    10:a2:03:a1:28:55:7c:ff:a0:3a:61:81:8a:6b:f4:
                    f3:e1:40:fa:b2:39:dc:a6:7d:22:47:5f:c3:48:54:
                    d0:8e:e7:8c:ba:90:89:f6:92:c6:42:6d:d7:c5:9a:
                    69:32:53:42:bf:83:ba:01:c6:1f:ab:8f:f9:5b:1a:
                    04:4a:19:d2:2b:a9:91:ad:75:91:4a:06:99:02:9d:
                    5a:d7:ef:15:51:01:39:68:47:57:ae:96:3c:79:6e:
                    26:a6:91:dc:f6:b9:57:d2:d8:01:34:96:d6:d6:b4:
                    ee:e0:13:48:4e:7b:ae:8f:7d:af:a5:57:65:96:b5:
                    f9:12:fd:57:a9:1f:d5:f7:11:6b:e8:83:89:dd:20:
                    89:29:5f:08:d4:11:71:1e:77:dc:eb:13:3a:eb:f3:
                    32:fd:24:5f:cb:e9:69:89:67:82:50:c9:12:21:6f:
                    86:e7:d9:40:aa:80:18:c8:cc:ef:5f:e7:71:77:3c:
                    a0:d4:1b:5a:f6:5d:c9:e5:30:90:63:de:da:6c:eb:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9D:F1:9C:0B:A9:F3:BC:9A:11:9A:8A:49:4E:BE:0A:22:F7:17:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09e1be13-412e-3420-9d10-10ee28f83974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:18:29:26:8d:67:5a:99:1f:bb:b6:1c:d0:4f:7d:cd:e1:4b:
         8f:38:0d:6b:1e:34:f2:b2:38:f8:ee:62:3d:b0:b5:db:5e:d1:
         d0:78:df:28:59:42:49:74:44:1f:10:9d:f6:3d:b9:15:80:34:
         83:38:78:95:54:69:16:d1:79:77:f8:8d:e3:b0:df:e7:ed:15:
         d5:7d:09:07:59:04:3c:e1:21:33:f3:8b:53:c4:a9:24:fb:69:
         b0:e2:3d:44:4f:0c:d4:5b:01:c7:d6:67:13:f2:be:64:b0:4b:
         57:e9:be:db:d6:bf:f9:89:37:a9:f7:01:41:78:de:92:e2:0f:
         a9:82:26:3e:44:ec:bb:75:71:3b:9c:22:bc:b0:a3:44:dd:53:
         da:dd:64:03:67:ed:e3:2f:0d:34:12:6e:44:1c:74:ac:1d:cc:
         41:d6:55:f4:2d:2d:ae:12:37:4e:bf:c3:4e:8e:89:3c:08:79:
         47:ef:0a:84:e6:71:6f:47:14:2c:97:5d:50:f6:f8:a4:43:57:
         b8:18:ed:cd:58:36:99:17:97:27:de:75:0c:d3:88:46:75:d7:
         74:5d:08:e8:41:90:fa:2d:de:5a:8c:8f:c7:a0:e5:0d:fe:a0:
         c8:37:b5:66:32:b5:00:03:53:4a:b0:4e:5a:6b:ab:fa:7c:0a:
         e0:a3:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:44:42 2025 by rpki-client