Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11004f0e-3c4e-3d9e-898c-fe8508874591.roa
File:                     11004f0e-3c4e-3d9e-898c-fe8508874591.roa (raw, json)
Hash identifier:          /uLGkherz/WlbIeyZ910fjbK5tzXQU4C5HPyQvZMBIE=
Subject key identifier:   6B:16:47:54:55:AB:C6:24:3A:61:BF:18:B7:F3:25:F1:35:A8:B5:0B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E201082C142438C7612080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11004f0e-3c4e-3d9e-898c-fe8508874591.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397239
IP address blocks:        204.74.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:01:08:2c:14:24:38:c7:61:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=b938bf89-84f7-4e6a-a242-29d70ecdc28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:5b:98:db:d1:df:89:98:c4:ec:04:81:e6:
                    09:f6:17:ff:b6:51:77:c0:da:c3:f4:37:37:c9:87:
                    79:c4:ea:85:f0:21:ea:28:94:98:5d:49:d0:84:11:
                    cd:89:59:ce:01:83:31:75:a6:20:f9:85:a0:df:1f:
                    71:da:ff:0a:6c:aa:c6:b7:00:bd:9e:43:3c:eb:70:
                    0d:61:05:6c:65:d4:ae:be:ad:71:30:cc:ce:33:78:
                    7f:bc:50:f6:d6:72:ef:99:bb:d0:06:f5:b0:29:78:
                    c4:90:38:fd:fb:0f:de:ab:b2:a9:d7:b1:90:c0:36:
                    40:2a:1d:ae:56:44:a4:b2:1e:d5:6d:24:8d:b3:a3:
                    96:da:1d:47:c8:94:55:87:61:53:cf:ce:27:d7:7e:
                    b3:29:4d:d9:87:c2:43:7c:4e:a8:e6:a7:77:3c:af:
                    07:0b:2b:5f:d0:a8:16:9e:96:70:e6:2f:bb:7b:50:
                    55:67:80:4c:2c:92:1d:6a:15:7b:b1:05:86:c2:7e:
                    e3:f6:c1:2a:86:94:fe:76:63:8b:f2:bb:ae:3e:7d:
                    16:72:e8:98:bc:eb:89:5d:0a:47:91:f1:68:27:18:
                    54:b7:b0:ea:84:7a:20:22:3a:0d:06:d3:c9:03:0d:
                    f5:dc:a8:c8:0b:8e:d7:b9:51:54:27:38:d8:6d:6c:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:16:47:54:55:AB:C6:24:3A:61:BF:18:B7:F3:25:F1:35:A8:B5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11004f0e-3c4e-3d9e-898c-fe8508874591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ca:2b:bc:1c:b5:9f:70:a6:4f:06:24:85:b8:93:5f:4e:96:
         4f:f3:89:2f:a8:2b:4f:08:07:a6:cb:18:7b:eb:4f:70:58:30:
         0f:fa:0d:2c:0c:40:14:54:fc:cf:f9:e9:88:46:f6:9b:ca:4e:
         a5:2a:2b:79:0f:a6:4b:a1:66:e0:e7:d5:a4:79:b8:97:eb:42:
         89:db:df:a9:7b:30:92:86:06:3a:1e:b9:40:35:a2:d6:88:ae:
         36:b2:4f:35:18:a6:7e:8f:ae:ff:de:d3:92:9e:f5:93:28:d7:
         6b:a7:87:37:79:ff:02:e0:22:9d:b8:6d:94:ad:04:8b:a0:17:
         53:cb:64:9e:f4:91:c7:a1:6e:21:72:73:8f:e6:f4:35:5d:d3:
         fb:e2:81:52:34:45:f5:cf:8f:90:8c:75:3e:42:ae:e9:2e:4e:
         3d:3d:0d:2f:0f:da:e7:ed:84:01:b6:c8:a4:0c:81:5c:51:44:
         04:2c:62:a0:67:fd:5a:cf:fc:9b:f1:c3:94:c4:9c:c7:20:e5:
         6f:6d:3c:e5:94:27:a5:62:87:15:c6:fe:60:67:6c:1d:8d:39:
         39:3c:32:b5:c7:98:35:6e:c5:2f:09:71:45:8e:f5:6e:3e:e8:
         69:80:a2:90:07:88:a2:51:b6:89:73:08:f2:7a:67:a3:60:69:
         ee:90:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:17 2025 by rpki-client