Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1b8d35fb-ee1c-3cfb-b80c-0bbbb7293fb8.roa
File:                     1b8d35fb-ee1c-3cfb-b80c-0bbbb7293fb8.roa (raw, json)
Hash identifier:          O5+4pEcasMQCvM+SUOgzwGPxLEzO52yqEDSsJlYadGo=
Subject key identifier:   A1:E6:61:E4:DD:3D:68:72:41:1E:24:C4:0E:78:26:21:97:10:C8:3B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1D742A9277A2CFCAC7920
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1b8d35fb-ee1c-3cfb-b80c-0bbbb7293fb8.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397215
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:d7:42:a9:27:7a:2c:fc:ac:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=b5b5e34d-0098-4a39-a88b-61c3e4c846ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:c0:c9:43:31:59:e0:de:8d:60:69:48:07:
                    ea:7c:f7:f6:a9:16:97:06:82:9a:a0:68:d9:c9:6e:
                    38:eb:eb:d7:9b:fa:1b:4f:31:05:15:3d:b1:9e:9b:
                    7f:0f:29:95:a7:08:8a:ad:bc:7b:dc:dd:86:23:c6:
                    dd:d5:82:c0:d8:44:58:7d:9a:78:3a:dd:45:fd:20:
                    58:28:34:b7:97:ff:f6:a5:34:35:25:15:47:77:a2:
                    3b:06:ea:5c:82:c3:3d:bc:a0:f6:83:b5:7b:25:35:
                    19:88:59:f1:9f:67:77:54:23:76:1b:a6:c4:f2:e2:
                    aa:06:ff:46:61:0d:ba:41:c4:5a:18:4d:71:e2:bd:
                    de:60:2a:16:d2:be:bd:3e:d2:41:29:97:74:ce:83:
                    81:15:81:4e:42:af:c2:26:9a:9e:d7:78:35:ea:81:
                    7d:26:de:f3:8c:ed:78:37:3b:7a:0b:9b:98:c7:56:
                    89:7e:d9:88:a6:88:24:2b:a9:da:13:4e:79:57:4c:
                    0d:9a:1a:19:3f:71:d2:c7:f9:24:8f:0d:39:43:69:
                    7c:77:3b:79:3b:2e:57:88:76:10:7b:77:2b:ff:fa:
                    b1:2c:d2:7d:02:8c:85:91:cb:ec:ee:dc:3a:d0:7f:
                    63:2b:3b:22:6b:05:6e:a3:08:27:86:52:39:da:fc:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:61:E4:DD:3D:68:72:41:1E:24:C4:0E:78:26:21:97:10:C8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1b8d35fb-ee1c-3cfb-b80c-0bbbb7293fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:08:10:aa:64:87:bc:e5:2a:22:b6:22:11:66:38:3c:40:35:
         47:26:c7:0b:5c:fc:be:5c:2a:21:b5:2d:1a:30:bd:bf:3f:08:
         ce:61:d3:09:7a:8a:d3:7f:d6:85:c0:89:bf:6f:ca:d1:04:f2:
         bb:c7:8b:57:3c:bb:a4:62:d2:c9:52:5b:7c:65:bd:ed:a8:9e:
         1e:bc:b7:9c:8c:c0:37:a1:9a:c7:2c:60:a1:5f:1e:d8:4b:90:
         db:32:1c:b7:d7:17:a3:74:40:b3:bc:a7:f9:63:e5:b3:e4:6a:
         10:59:5a:6c:00:53:18:b3:98:8e:69:7c:65:26:0b:3e:7e:a6:
         af:bd:3f:db:10:5a:b3:a5:f5:54:f1:33:96:de:7e:2f:61:4e:
         9b:16:29:35:bc:2d:c7:23:f0:13:2a:50:1e:13:9b:79:fe:65:
         6f:e1:40:14:b7:ba:04:f3:5a:67:ba:50:0f:04:f0:50:62:15:
         6d:32:d0:64:f2:af:12:32:de:7e:4a:a4:1f:11:ba:8f:34:7a:
         a2:60:a0:b4:76:6e:c6:21:fe:80:61:f0:91:0f:66:7c:d8:c3:
         08:55:26:67:a5:dc:59:7a:27:42:4b:0e:89:84:c2:e1:d3:84:
         fd:6a:81:85:22:45:d9:bf:ba:cc:a1:cf:3d:43:d4:89:e5:87:
         34:72:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:03:14 2025 by rpki-client