Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4623e3b6-0080-3f61-9559-9ab68148acfa.roa
File:                     4623e3b6-0080-3f61-9559-9ab68148acfa.roa (raw, json)
Hash identifier:          eMlmr8K2xeoNvbCjfsnoVuvoC0Z0DaHF223bY26iD1w=
Subject key identifier:   6C:5D:4F:D8:08:EC:26:7F:4F:32:A7:B5:FA:04:54:D7:F6:82:D0:D3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1DE3E88DD5F0D9BBA0100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4623e3b6-0080-3f61-9559-9ab68148acfa.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397214
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:de:3e:88:dd:5f:0d:9b:ba:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=fe230ee2-8f08-4c0f-82f6-2035d174c3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:97:ab:ae:1c:77:ea:48:b0:32:e5:69:04:
                    83:85:4d:5a:65:64:8d:96:b0:74:b6:be:77:69:da:
                    5c:8b:88:52:d4:ab:60:54:82:4e:5e:6a:24:85:cd:
                    06:09:9f:4f:4d:b5:a0:fc:2d:52:49:b1:68:51:0c:
                    5e:67:0e:6d:97:a2:e2:65:0a:fb:50:95:3a:cd:68:
                    d3:2b:9d:1d:e2:f0:79:14:ff:c2:a0:f5:d4:82:70:
                    45:bb:2e:54:ec:5d:f3:fd:e3:30:70:21:73:a0:5c:
                    7c:9d:d0:0d:01:ab:f9:17:ee:67:13:35:b1:4c:7e:
                    af:11:e4:6d:42:ed:ac:bb:cf:1c:3a:fb:7f:4d:ee:
                    d4:01:1a:da:5e:e9:a7:76:48:84:4d:da:66:dd:95:
                    ea:49:7b:25:95:b9:0b:84:79:57:7c:2b:e6:40:86:
                    7b:94:fe:dd:d1:18:0c:a2:4a:36:c2:d5:c6:f3:35:
                    b3:fd:e4:aa:44:80:41:eb:dc:ed:c7:a0:f0:0f:7a:
                    6e:7e:30:66:ed:dc:4d:2c:ea:b0:e4:ff:bb:c9:ca:
                    ad:68:ae:b9:07:97:d1:3b:a2:f5:34:7a:c8:ea:38:
                    ee:30:6d:50:66:ce:92:8a:6d:be:73:8f:e5:46:b4:
                    57:5f:c7:fa:6b:94:dc:07:7c:65:72:27:10:e2:3a:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5D:4F:D8:08:EC:26:7F:4F:32:A7:B5:FA:04:54:D7:F6:82:D0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4623e3b6-0080-3f61-9559-9ab68148acfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6d:d8:de:5f:a0:de:80:c4:af:ec:be:f0:5a:6d:54:56:a8:
         9d:2f:ba:6e:2a:ba:37:7e:7f:6f:b9:d5:49:9f:57:ba:01:5e:
         14:b2:ad:54:07:e3:a4:e9:e1:65:a0:93:32:01:43:b4:1b:55:
         f1:f1:83:fd:98:12:e8:5f:55:a4:94:bd:3b:c0:99:2d:d7:76:
         37:bd:e2:82:b1:b4:bc:2d:3f:43:8f:f6:70:16:54:6a:39:a4:
         18:6a:84:69:39:72:98:22:7a:1a:a6:5e:76:7a:9a:d1:c4:c7:
         d8:10:c0:dd:fc:71:08:38:19:ab:81:e9:5c:74:b8:eb:e3:1c:
         7b:c7:5a:a6:1d:58:39:a1:a2:42:dc:cd:c2:1a:7a:3d:4f:ef:
         48:03:30:de:f0:2b:f2:66:c4:d7:c5:fb:1f:4d:23:3b:e9:4f:
         65:5d:fe:9a:cc:39:ac:d3:96:86:27:be:eb:0b:52:c0:7b:33:
         2e:8a:d9:1c:71:e6:bb:03:d1:20:b6:9c:14:5e:0b:da:42:95:
         82:99:8e:e0:a1:b3:50:2a:29:f7:63:06:ca:6f:6e:58:a9:f5:
         73:35:ec:87:2e:5f:19:64:50:97:27:66:c5:3f:a3:38:4e:19:
         01:ff:ec:e2:e5:26:01:3a:29:cb:40:2a:a5:92:f6:e8:45:26:
         06:ae:81:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4d4+iN1fDZu6AQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZmUyMzBlZTItOGYwOC00YzBmLTgyZjYtMjAzNWQxNzRjM2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5aXq64cd+pIsDLlaQSDhU1aZWSNlrB0tr53
adpci4hS1KtgVIJOXmokhc0GCZ9PTbWg/C1SSbFoUQxeZw5tl6LiZQr7UJU6zWjT
K50d4vB5FP/CoPXUgnBFuy5U7F3z/eMwcCFzoFx8ndANAav5F+5nEzWxTH6vEeRt
Qu2su88cOvt/Te7UARraXumndkiETdpm3ZXqSXsllbkLhHlXfCvmQIZ7lP7d0RgM
oko2wtXG8zWz/eSqRIBB69ztx6DwD3pufjBm7dxNLOqw5P+7ycqtaK65B5fRO6L1
NHrI6jjuMG1QZs6Sim2+c4/lRrRXX8f6a5TcB3xlcicQ4jqJ5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxdT9gI7CZ/TzKntfoEVNf2gtDTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDYyM2UzYjYtMDA4MC0z
ZjYxLTk1NTktOWFiNjgxNDhhY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlt2N5foN6AxK/svvBabVRWqJ0vum4qujd+f2+51UmfV7oBXhSyrVQH
46Tp4WWgkzIBQ7QbVfHxg/2YEuhfVaSUvTvAmS3Xdje94oKxtLwtP0OP9nAWVGo5
pBhqhGk5cpgiehqmXnZ6mtHEx9gQwN38cQg4GauB6Vx0uOvjHHvHWqYdWDmhokLc
zcIaej1P70gDMN7wK/JmxNfF+x9NIzvpT2Vd/prMOazTloYnvusLUsB7My6K2Rxx
5rsD0SC2nBReC9pClYKZjuChs1AqKfdjBspvblip9XM17IcuXxlkUJcnZsU/ozhO
GQH/7OLlJgE6KctAKqWS9uhFJgaugS4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:20 2025 by rpki-client