Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c968c83-5361-30e6-8a08-f2422f0acce1.roa
File:                     1c968c83-5361-30e6-8a08-f2422f0acce1.roa (raw, json)
Hash identifier:          ykH/a4a1p7p0TZ5hg4F38gNzyP5e9E8WGQUXhDbvd5Q=
Subject key identifier:   2D:51:E2:6D:DB:78:4D:54:B4:D8:E1:3B:E6:F7:2F:E1:04:A6:E2:E7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A3B7B2AFE7F893ECEBB96D660
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c968c83-5361-30e6-8a08-f2422f0acce1.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     397231
IP address blocks:        204.74.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:2a:fe:7f:89:3e:ce:bb:96:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=10799c81-8b2c-41d9-ba2b-486b10f36766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:98:2f:01:2d:06:b1:22:0d:8b:15:ab:25:
                    c3:20:13:12:7b:35:62:df:35:6e:c8:ce:fc:51:58:
                    ab:df:a7:93:4a:a6:eb:a6:34:36:1a:27:ae:68:d1:
                    36:ad:87:00:6a:0c:18:53:bc:46:d7:98:69:91:27:
                    5e:21:ca:2a:eb:4b:84:9f:07:5b:33:66:57:d9:9d:
                    9e:e8:4c:10:e8:b1:1d:f0:6d:ad:70:1b:09:34:26:
                    b6:c0:d3:3a:90:f4:79:a2:18:84:b6:e6:7b:1f:4d:
                    7c:3d:d4:68:73:04:e3:48:75:54:ff:1a:6f:99:55:
                    79:10:66:30:32:72:bb:b8:c7:05:b0:28:e7:99:06:
                    a4:92:99:be:73:3d:0f:3f:4a:5b:a4:ff:66:08:a4:
                    9d:56:62:8b:cb:e2:b3:8d:b1:4b:42:28:19:35:e1:
                    a1:36:68:2c:1f:d0:e2:98:e4:0d:bd:91:da:2f:3a:
                    62:d2:45:41:77:75:33:74:62:90:0c:20:53:78:be:
                    4c:37:c8:bb:4d:f4:3d:a6:bd:87:9c:ae:d9:77:97:
                    13:5f:90:86:be:0f:6e:f9:e7:d0:13:89:76:3d:b9:
                    98:04:03:20:77:3c:84:ab:db:c4:77:ad:04:9e:01:
                    71:d3:7f:6b:a4:6d:e0:16:ad:9d:20:6a:64:ca:f6:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:51:E2:6D:DB:78:4D:54:B4:D8:E1:3B:E6:F7:2F:E1:04:A6:E2:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1c968c83-5361-30e6-8a08-f2422f0acce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:62:6d:d8:5f:88:d6:b9:5a:5c:1e:49:0b:c7:83:16:2b:
         51:65:5f:7e:96:6f:75:a9:b0:35:1a:00:78:c4:ac:de:58:a4:
         68:8b:9c:f2:21:2c:92:3b:c2:89:5b:bb:d0:e9:a7:f8:de:81:
         71:5a:d8:10:c5:fd:35:ef:03:d1:45:5d:3e:a6:49:98:21:2a:
         14:aa:01:52:e8:a9:aa:3f:92:a5:cd:dd:4d:08:75:99:d3:30:
         5d:d4:bc:42:b5:e5:e7:ec:8a:58:99:40:34:02:8f:c0:37:f4:
         9f:35:97:9a:cd:eb:18:9a:22:aa:f1:89:a3:56:54:4d:f6:3e:
         cd:e6:1d:ca:38:74:c6:a1:2d:35:ce:8e:3e:46:e0:e7:bf:c0:
         e6:57:a1:3f:62:3e:7e:38:8d:fb:4d:72:c0:1d:aa:c4:29:d7:
         62:cd:0a:5a:dd:d4:3f:fd:d7:0b:91:6a:76:a9:37:e9:7d:e4:
         64:e8:ff:fe:16:81:3c:5b:23:52:d3:37:e6:c3:2d:d1:e5:a6:
         b3:d7:d9:b8:2a:96:9a:53:f0:b3:d6:2c:93:be:28:94:56:61:
         1d:9d:7c:c7:3f:63:00:c0:1d:c2:c2:a2:71:19:0f:d0:57:d9:
         10:6a:f0:41:91:82:a3:9f:d9:a9:93:31:86:86:bd:df:9f:47:
         d7:6f:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:19:32 2025 by rpki-client