Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41edb1d8-cc76-37e8-8214-f9cbe898854a.roa
File:                     41edb1d8-cc76-37e8-8214-f9cbe898854a.roa (raw, json)
Hash identifier:          WDV79hLkT5Pj5l7lZ0YuUjINH1zk1pam88n0ZLT9T+o=
Subject key identifier:   9E:76:1F:64:12:45:A0:B3:0F:99:D7:97:BE:18:16:47:9C:EB:D5:C2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1F12A320BEDCCC7C12800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41edb1d8-cc76-37e8-8214-f9cbe898854a.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397236
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:f1:2a:32:0b:ed:cc:c7:c1:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=427ddfb0-8e8f-40c0-a501-bf6514defd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:92:46:94:2a:a4:9c:0c:37:f8:0e:62:e4:f9:
                    5f:76:87:1d:82:f2:98:08:e3:a8:b7:a1:88:d4:f4:
                    18:6b:47:91:2e:fe:e3:21:f6:37:45:35:3a:a6:b6:
                    3b:36:0a:3b:7b:d9:6a:52:ec:2f:82:6d:1a:e3:81:
                    e8:e1:4a:48:21:6f:20:eb:bf:9c:a8:f3:9f:06:3f:
                    fd:3f:ad:6d:78:35:a8:d3:68:c1:a4:e4:cc:69:da:
                    71:87:7d:b2:d2:38:ec:7f:22:24:79:4a:7d:13:16:
                    da:fa:1c:5a:a5:99:e9:17:cb:d8:aa:c2:8d:3d:b5:
                    0c:37:43:0c:2c:0a:22:cb:a6:cb:e4:98:8a:72:1c:
                    a5:8f:06:da:1d:fb:ba:fd:2a:73:4c:38:d6:68:b8:
                    ed:3c:b8:e1:66:a6:04:61:7c:d7:43:ed:28:95:ff:
                    d7:4f:8b:18:b2:f1:83:09:63:ca:61:75:8b:14:e6:
                    02:44:a4:fd:8b:d6:b4:bc:c1:95:bc:cf:5f:e1:7d:
                    92:c9:e0:63:f4:ba:df:91:13:25:69:ea:6b:ff:a9:
                    81:fc:87:ea:d8:fe:45:37:71:26:ec:3a:88:e0:e1:
                    bb:62:00:62:a0:9d:10:f4:cf:67:84:10:fa:a3:18:
                    c3:90:fd:d3:a0:55:75:30:59:fb:65:78:54:f5:8f:
                    34:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:1F:64:12:45:A0:B3:0F:99:D7:97:BE:18:16:47:9C:EB:D5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/41edb1d8-cc76-37e8-8214-f9cbe898854a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:bd:f6:d2:bb:f1:9f:a5:c8:88:ca:12:f1:c1:47:cb:ad:
         83:d9:f3:f6:62:45:7e:46:68:6c:27:2c:fc:77:59:4f:db:95:
         f1:31:bb:4e:98:a3:6f:ae:f8:4b:16:b1:35:f1:df:7d:bd:17:
         69:13:50:7b:d3:49:04:0c:c6:2b:c7:f4:21:2f:75:82:47:fd:
         6d:8e:35:05:3f:0a:00:19:4e:3d:b5:71:f9:0d:5e:25:9f:cc:
         2f:43:27:b6:a5:f5:ef:e7:af:36:21:69:1c:64:dd:b9:e4:6b:
         b6:ca:5c:74:ea:38:ec:75:21:fb:5a:3e:d8:16:24:58:f5:ce:
         61:7d:5c:52:eb:a4:fa:14:b3:87:4e:ab:56:f8:9f:fc:63:4f:
         f7:42:97:83:aa:38:b3:49:2d:ab:24:e1:c6:00:c6:fe:16:b8:
         c2:76:a6:6a:02:81:cc:33:ae:ec:cd:01:f8:7d:d1:89:fb:fd:
         81:62:a3:3b:c3:83:c6:0b:a1:09:13:a0:5a:06:e4:6d:5d:82:
         8d:95:a9:83:77:a4:95:90:dc:a5:e3:6e:fd:4a:cd:d2:61:15:
         5b:19:b0:de:b6:6c:05:4f:81:37:63:40:62:e8:b5:00:76:3d:
         05:5b:be:b9:17:22:ef:62:30:6e:b1:18:7e:0b:e5:a9:a5:03:
         52:1b:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:25:54 2025 by rpki-client