Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ce75b21-7ac9-3984-9d48-12cea03d0e12.roa
File:                     4ce75b21-7ac9-3984-9d48-12cea03d0e12.roa (raw, json)
Hash identifier:          lcl9D6qU+6hi7d1QQTsVu+eWO8rx96KU86ZGMI/KmCY=
Subject key identifier:   81:E7:01:D8:78:17:AE:F6:D1:5C:8A:D5:83:DF:3F:43:74:D8:C7:8E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1F0F853513BB9C7AB5140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ce75b21-7ac9-3984-9d48-12cea03d0e12.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397233
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:f0:f8:53:51:3b:b9:c7:ab:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=dce4d66b-1898-4c03-8834-6758057a55bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:a9:71:3d:cb:07:2b:49:e4:f8:f9:4a:28:
                    75:0b:a0:f6:c5:fa:13:b8:03:5c:28:c9:9a:b9:60:
                    9d:27:74:86:8d:e9:63:58:e4:c5:d8:18:ab:61:2d:
                    5d:59:6c:4a:68:43:45:d7:67:55:dd:33:39:70:8d:
                    6f:cd:e0:29:8d:c0:9a:46:d2:ba:55:52:fb:34:7b:
                    1e:b6:de:d5:3f:c8:fa:b8:87:6d:63:79:b3:54:39:
                    c4:65:88:cc:3d:ba:f7:64:68:13:83:57:a6:70:db:
                    87:2b:c1:28:24:5a:d9:85:1f:76:41:e0:00:e7:92:
                    19:9c:49:25:6a:c1:77:e0:15:e5:db:0f:83:f0:70:
                    9b:b7:0b:2b:e4:a7:76:57:a8:f2:7c:04:c3:27:a7:
                    a3:20:db:2c:73:8d:b9:48:ac:0f:43:64:03:76:60:
                    25:a1:f3:46:5d:59:6a:a5:6d:08:cb:b6:a4:de:4f:
                    da:63:15:60:ef:27:fd:6e:0b:ed:10:8c:a8:46:14:
                    0b:ea:fa:a3:ff:a9:6d:a5:c1:db:f9:f9:3b:40:d4:
                    e1:e9:7b:2b:b7:52:d0:f1:f9:74:b9:6b:9b:1e:d2:
                    48:27:9e:9b:51:62:22:0d:8f:99:62:e0:7c:6c:ad:
                    8a:6e:d8:c1:2f:31:a6:27:09:ee:a5:36:ab:b2:97:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E7:01:D8:78:17:AE:F6:D1:5C:8A:D5:83:DF:3F:43:74:D8:C7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4ce75b21-7ac9-3984-9d48-12cea03d0e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4f:60:fa:55:0f:67:19:d0:0d:eb:ab:cb:8f:5b:1d:ef:0d:
         77:cb:b9:aa:3f:58:60:1e:af:7f:6b:e5:56:81:ef:63:7e:1c:
         c8:41:69:c8:76:b3:7a:25:7f:b2:31:84:b7:5b:25:65:0a:4b:
         cb:29:eb:d9:2c:9a:96:d5:2b:6a:e5:d3:81:bd:ab:eb:31:2a:
         94:fd:59:03:eb:79:28:b5:0d:1b:0f:c9:02:26:6b:46:73:23:
         be:7f:79:47:47:12:e6:a0:bd:65:78:a2:9d:4a:56:b8:cf:d1:
         1e:50:30:c5:78:ca:81:21:1f:6f:1f:eb:29:35:c9:10:6f:1e:
         b1:e4:d7:5e:60:1e:d4:e7:ae:c3:97:c0:9f:7d:58:f5:f9:e6:
         7a:0c:27:e2:1e:e1:78:a1:9b:ad:e4:66:a9:c9:0e:16:bf:cd:
         f0:0d:bf:62:90:4d:41:19:03:37:08:d0:f5:df:f5:22:36:e8:
         6f:a0:bf:17:b5:96:76:21:3c:35:9e:dd:2a:a7:8f:b9:08:02:
         00:ec:ff:5a:d4:db:26:d8:2c:d4:ce:ad:a8:14:52:c5:65:8e:
         ea:43:39:ad:7d:3b:13:cb:d4:cf:29:d2:14:1f:2b:15:55:2c:
         b1:c4:19:33:64:37:b3:ab:25:91:0c:cd:d3:50:f1:d5:2f:6f:
         8d:0b:3c:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fD4U1E7ucerUUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZGNlNGQ2NmItMTg5OC00YzAzLTg4MzQtNjc1ODA1N2E1NWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkWpcT3LBytJ5Pj5Sih1C6D2xfoTuANcKMma
uWCdJ3SGjeljWOTF2BirYS1dWWxKaENF12dV3TM5cI1vzeApjcCaRtK6VVL7NHse
tt7VP8j6uIdtY3mzVDnEZYjMPbr3ZGgTg1emcNuHK8EoJFrZhR92QeAA55IZnEkl
asF34BXl2w+D8HCbtwsr5Kd2V6jyfATDJ6ejINssc425SKwPQ2QDdmAlofNGXVlq
pW0Iy7ak3k/aYxVg7yf9bgvtEIyoRhQL6vqj/6ltpcHb+fk7QNTh6Xsrt1LQ8fl0
uWubHtJIJ56bUWIiDY+ZYuB8bK2KbtjBLzGmJwnupTarspdZBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIHnAdh4F6720VyK1YPfP0N02MeOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGNlNzViMjEtN2FjOS0z
OTg0LTlkNDgtMTJjZWEwM2QwZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANPYPpVD2cZ0A3rq8uPWx3vDXfLuao/WGAer39r5VaB72N+HMhBach2
s3olf7IxhLdbJWUKS8sp69ksmpbVK2rl04G9q+sxKpT9WQPreSi1DRsPyQIma0Zz
I75/eUdHEuagvWV4op1KVrjP0R5QMMV4yoEhH28f6yk1yRBvHrHk115gHtTnrsOX
wJ99WPX55noMJ+Ie4Xihm63kZqnJDha/zfANv2KQTUEZAzcI0PXf9SI26G+gvxe1
lnYhPDWe3Sqnj7kIAgDs/1rU2ybYLNTOragUUsVljupDOa19OxPL1M8p0hQfKxVV
LLHEGTNkN7OrJZEMzdNQ8dUvb40LPNk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:45 2025 by rpki-client