Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2540ddb6-b525-319a-b4fb-fa75b0dfeb03.roa
File:                     2540ddb6-b525-319a-b4fb-fa75b0dfeb03.roa (raw, json)
Hash identifier:          /158iQFyW6gvd2vgIvNLpdNoqsog2tPEeOZYW6zrke4=
Subject key identifier:   BF:54:E6:F7:CF:1F:68:89:50:20:DA:46:97:D8:6E:13:AA:9D:7F:FB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CA1FDCC7D403C4C7A8618
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2540ddb6-b525-319a-b4fb-fa75b0dfeb03.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397240
IP address blocks:        204.74.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:a1:fd:cc:7d:40:3c:4c:7a:86:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=02dbe6ab-3019-491b-92e4-04b7321288cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:a3:57:5c:9f:1d:c2:00:88:e1:79:bc:a9:
                    db:6e:e4:8a:35:e8:c4:b0:11:aa:cb:f6:e4:8c:67:
                    d6:23:91:71:4f:7b:85:d6:23:ae:0d:d9:ba:bf:1b:
                    30:83:f9:dc:86:b7:09:eb:92:90:32:dc:f4:5b:c0:
                    47:e6:55:72:b4:13:99:a9:3e:b4:a1:a5:4e:74:6c:
                    ed:8a:d7:8a:46:61:06:9b:a0:31:1a:81:87:1a:60:
                    4c:d9:68:d8:49:ce:15:e1:af:8f:34:32:f1:1d:17:
                    83:55:f7:a5:bb:2d:28:28:e5:50:89:93:4c:56:92:
                    15:88:37:4d:75:72:eb:14:f4:c0:20:be:7a:e3:36:
                    39:2a:39:76:9a:c6:3f:e1:05:02:08:15:92:a6:d4:
                    10:1f:e6:08:c4:58:79:91:8d:6e:c5:d5:2b:a4:44:
                    7a:51:81:c0:94:b4:cf:63:8f:a8:76:8d:cf:90:7c:
                    72:18:d2:ea:00:70:31:6e:dc:09:de:ec:54:69:25:
                    4f:98:71:99:2b:81:47:7a:da:90:29:10:56:ea:82:
                    e1:16:04:69:b4:fc:ba:b9:af:2a:04:8d:1e:65:fc:
                    9a:a9:ae:03:eb:76:e8:e7:ec:79:d6:24:bc:dc:a0:
                    1b:6e:e0:7b:dc:fc:a9:cb:23:43:bb:65:f1:0f:e6:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:54:E6:F7:CF:1F:68:89:50:20:DA:46:97:D8:6E:13:AA:9D:7F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2540ddb6-b525-319a-b4fb-fa75b0dfeb03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d4:93:f7:db:70:15:76:29:d3:46:7a:a8:42:ad:fe:21:6f:
         00:26:dc:20:e7:f9:cb:81:9e:cd:d8:26:d6:1a:8f:37:9c:cd:
         f2:f8:cc:09:67:73:ed:9a:22:1c:a2:ba:54:73:4c:27:73:d2:
         df:00:f1:be:91:ec:c3:9a:1a:49:35:4f:d4:dc:0e:71:2c:29:
         2a:ad:3e:31:f2:5d:db:7d:a1:9e:4e:59:1f:3b:40:cb:d9:79:
         4d:02:1d:ed:cf:d5:d3:42:fc:25:2d:2d:f6:6e:02:0a:67:b1:
         a4:61:98:d4:aa:53:66:ae:31:c0:dc:b0:b5:f0:90:8f:36:c3:
         68:20:af:eb:3c:9d:d4:f4:39:3e:dc:4e:bc:69:cb:82:5f:a1:
         66:3c:a1:45:69:53:99:06:e1:70:12:8f:61:18:1f:50:2c:19:
         3d:03:c0:63:02:5f:b9:d4:ac:ae:86:3b:ae:9c:38:d3:c9:ad:
         b5:90:5b:bb:42:6b:fc:dd:51:0e:25:4e:6f:7f:76:56:31:e1:
         b2:9c:32:cf:1a:e5:b4:ef:41:cc:df:97:4f:bd:68:68:2c:9c:
         af:d3:40:a2:6c:af:c1:1b:85:44:e9:96:c9:cd:e1:3e:a0:5e:
         85:1e:84:04:62:59:46:4e:8f:ce:bf:fa:43:bc:78:2a:0b:16:
         3d:38:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:17:32 2025 by rpki-client