Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/290f7c32-efbc-381f-9a92-206511f7c756.roa
File:                     290f7c32-efbc-381f-9a92-206511f7c756.roa (raw, json)
Hash identifier:          LlUhB/WKt21+FGmPvUJYP+MA+dGTBjS6cy3H46KZL8g=
Subject key identifier:   14:09:43:2D:07:54:B9:92:CC:06:4E:07:A3:4F:A5:2D:EA:76:32:E5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1DEBC4AFF5928ECC64D40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/290f7c32-efbc-381f-9a92-206511f7c756.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397221
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:de:bc:4a:ff:59:28:ec:c6:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=c9de7648-3fe7-43a5-a31e-5d38619a2eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:fd:1a:2d:c5:5d:01:18:de:9c:0d:be:6e:
                    6b:b6:b3:84:33:1a:e8:4b:6f:f0:76:5b:4c:41:1f:
                    37:ba:2c:83:93:32:36:49:9f:79:a7:c8:6c:1a:29:
                    70:68:82:8a:a3:e9:16:f4:ca:d9:d2:dc:0e:a6:c8:
                    6b:84:72:2a:aa:34:6b:f7:c8:73:25:1c:c9:bb:63:
                    95:4d:58:e9:86:54:ed:72:4d:61:98:d9:86:09:a8:
                    b4:96:87:3d:87:7a:ae:e7:0e:0a:4c:6a:42:93:2b:
                    96:0d:3d:2f:78:ce:5c:36:7f:e7:f4:42:b0:12:29:
                    0d:46:05:4b:03:4b:59:3f:19:c7:51:96:1d:4e:25:
                    b8:4d:55:83:30:6c:3b:0e:5c:7e:4c:b8:42:af:45:
                    79:f0:54:e7:25:ba:9f:44:4e:9b:fe:ae:1c:68:e5:
                    b2:74:86:d8:27:d8:27:16:7e:11:4d:19:6d:a4:02:
                    83:ad:df:82:12:6d:65:ee:6b:2e:c0:bd:6d:b0:e2:
                    61:55:4e:72:99:65:2f:be:2f:9c:8f:af:4c:84:15:
                    89:c6:3b:69:69:83:5d:d4:8a:b6:d7:78:ec:3f:f3:
                    8d:3a:57:bc:90:23:a4:86:a9:18:96:7a:cf:81:d3:
                    10:4a:e8:32:ac:67:39:32:41:5c:19:42:f3:f4:35:
                    07:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:09:43:2D:07:54:B9:92:CC:06:4E:07:A3:4F:A5:2D:EA:76:32:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/290f7c32-efbc-381f-9a92-206511f7c756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4f:87:3b:8e:92:08:80:9f:42:73:13:f3:8f:f7:73:89:7e:
         1f:79:16:fe:95:3c:a6:93:46:a3:6a:23:37:e1:62:9b:f3:22:
         01:c0:f5:ab:d6:d3:e3:2a:e0:4c:7b:76:5b:35:26:ea:72:15:
         ac:50:cd:5b:12:d2:39:a2:1d:50:22:cd:52:23:f2:f0:fd:00:
         44:bd:6b:e5:34:e1:9e:99:85:9b:d4:ff:6a:0c:f5:47:bc:e8:
         62:8f:78:52:b4:3a:2c:c2:1f:c1:4a:08:22:49:78:92:41:ce:
         b9:97:8d:9d:fb:22:6b:e0:f7:ca:61:fc:b7:b9:30:80:0b:f0:
         e0:5f:df:0b:35:b8:66:fc:06:93:82:cf:57:17:0c:ef:35:f6:
         97:4f:94:f9:7e:c3:5f:83:79:09:35:40:e5:18:a4:3b:f9:f9:
         04:b9:59:0e:ff:c5:c0:6d:71:b5:92:57:af:f3:bc:96:71:57:
         01:32:a7:2d:2f:d6:a9:25:e0:c9:6e:19:c0:71:16:ed:93:b4:
         94:05:17:f3:0e:d4:15:b0:7d:c2:eb:2a:59:45:7d:da:e3:00:
         15:59:a0:83:b7:be:19:2a:7b:50:76:32:f4:e2:79:b4:31:cb:
         cb:01:01:31:69:79:9d:ea:d3:89:29:23:e1:ff:50:cb:53:4f:
         d5:7d:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:48 2025 by rpki-client