Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b39160a-3cc3-3d98-b8a2-832045d1360b.roa
File:                     2b39160a-3cc3-3d98-b8a2-832045d1360b.roa (raw, json)
Hash identifier:          1Tjroz3oWgRRBMAuIhlCav44KRZtY7xqlkvywFbXdbk=
Subject key identifier:   4C:BF:DA:D2:77:EC:EF:00:98:D8:B5:9E:0C:42:7D:48:98:DB:D5:7F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A0C08464B4C40DD009BB047A8
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b39160a-3cc3-3d98-b8a2-832045d1360b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     399157
IP address blocks:        204.74.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:46:4b:4c:40:dd:00:9b:b0:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=d01e379c-193f-4520-8cc5-7e7cb85acf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:5e:d5:b4:71:74:2d:e6:4b:c4:d7:72:f3:
                    d2:ec:f7:4c:ae:9f:c7:80:97:96:c8:0c:af:b9:df:
                    78:f5:17:c9:68:cc:64:11:21:4d:32:33:cf:9e:37:
                    9a:4c:91:33:ea:47:3d:aa:3b:bf:ab:24:94:a8:b4:
                    a0:38:f8:33:2f:a2:28:1a:77:a7:9f:16:e3:59:37:
                    68:08:35:b6:20:cd:d8:43:71:95:f7:81:c9:ec:c7:
                    52:53:2e:c0:6f:5e:ce:41:e9:79:b2:b4:9b:20:1e:
                    0f:c3:fd:ea:a0:11:67:0f:e3:44:9b:26:1f:62:e2:
                    91:8e:8b:85:b5:a8:e8:f3:2c:d8:8d:88:9d:7d:42:
                    8c:02:88:2d:0b:f5:ad:4b:a7:d8:8c:cb:f7:bb:ea:
                    58:12:2b:38:11:37:4c:81:c7:ad:e3:27:28:24:b9:
                    fd:75:42:76:24:b0:11:f8:55:c1:ab:ab:e4:1a:7b:
                    4a:1c:ff:9a:91:7c:99:cb:12:b9:05:ae:7e:65:dc:
                    9f:b4:3a:be:09:c4:4e:e8:e7:ed:7d:d3:c7:0d:be:
                    06:b8:df:84:27:58:ed:e8:c4:90:5f:01:92:54:32:
                    67:7d:6f:a0:b7:24:2c:a2:1e:c0:fd:2e:d6:7c:21:
                    14:b4:bd:b2:7c:dd:35:f9:04:84:39:12:af:95:46:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BF:DA:D2:77:EC:EF:00:98:D8:B5:9E:0C:42:7D:48:98:DB:D5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b39160a-3cc3-3d98-b8a2-832045d1360b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:23:09:d5:34:a0:3a:04:6c:ee:5c:9f:70:a8:3f:39:06:f4:
         88:2b:59:3b:89:a1:81:59:35:ba:79:79:0e:13:44:40:0e:c8:
         2b:9f:fe:a0:85:a0:26:3c:6a:a9:19:91:b4:7b:2b:64:a3:23:
         09:29:0a:07:b6:5c:ed:0b:23:eb:0f:18:93:08:ad:12:02:12:
         4a:9a:84:02:b8:67:79:7d:6c:78:99:c0:7c:be:85:02:34:e7:
         3f:a8:16:c1:52:5c:11:9f:3a:cb:fb:d1:11:1f:e5:a7:b7:dc:
         2a:3d:44:8d:4e:91:1c:f9:34:b9:4a:45:f8:e9:7f:c1:67:2e:
         38:21:1d:84:40:b1:d9:69:26:ef:76:d9:96:4e:43:79:57:53:
         13:7d:73:6e:67:00:a9:ee:a5:3b:53:f6:b9:e9:2d:9d:c6:b4:
         fb:86:68:b3:6e:00:90:c5:82:f5:1c:78:3f:cd:1b:e9:a4:41:
         8e:cf:51:49:a4:ff:88:77:98:f9:b0:f9:c3:c5:f5:cc:36:3d:
         ce:1a:13:97:ca:d1:b2:cc:44:e9:ad:34:38:64:6c:2f:2d:06:
         71:ad:e0:68:14:a8:5d:b6:fa:c0:2f:35:c0:d5:da:77:0f:3e:
         b9:3f:49:18:06:78:3b:84:59:99:ad:12:d6:2f:89:1f:04:d0:
         f1:c6:2e:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCEZLTEDdAJuwR6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
ZDAxZTM3OWMtMTkzZi00NTIwLThjYzUtN2U3Y2I4NWFjZjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaJe1bRxdC3mS8TXcvPS7PdMrp/HgJeWyAyv
ud949RfJaMxkESFNMjPPnjeaTJEz6kc9qju/qySUqLSgOPgzL6IoGnennxbjWTdo
CDW2IM3YQ3GV94HJ7MdSUy7Ab17OQel5srSbIB4Pw/3qoBFnD+NEmyYfYuKRjouF
tajo8yzYjYidfUKMAogtC/WtS6fYjMv3u+pYEis4ETdMgcet4ycoJLn9dUJ2JLAR
+FXBq6vkGntKHP+akXyZyxK5Ba5+ZdyftDq+CcRO6OftfdPHDb4GuN+EJ1jt6MSQ
XwGSVDJnfW+gtyQsoh7A/S7WfCEUtL2yfN01+QSEORKvlUawMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEy/2tJ37O8AmNi1ngxCfUiY29V/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmIzOTE2MGEtM2NjMy0z
ZDk4LWI4YTItODMyMDQ1ZDEzNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEpoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0jCdU0oDoEbO5cn3CoPzkG9IgrWTuJoYFZNbp5eQ4TREAOyCuf/qCF
oCY8aqkZkbR7K2SjIwkpCge2XO0LI+sPGJMIrRICEkqahAK4Z3l9bHiZwHy+hQI0
5z+oFsFSXBGfOsv70REf5ae33Co9RI1OkRz5NLlKRfjpf8FnLjghHYRAsdlpJu92
2ZZOQ3lXUxN9c25nAKnupTtT9rnpLZ3GtPuGaLNuAJDFgvUceD/NG+mkQY7PUUmk
/4h3mPmw+cPF9cw2Pc4aE5fK0bLMROmtNDhkbC8tBnGt4GgUqF22+sAvNcDV2ncP
Prk/SRgGeDuEWZmtEtYviR8E0PHGLgk=
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:43:22 2025 by rpki-client