Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67cb4b4e-224c-373e-9440-c4129d5b5f7f.roa
File:                     67cb4b4e-224c-373e-9440-c4129d5b5f7f.roa (raw, json)
Hash identifier:          AplB83qq2O4olXf37Hh5w7+t0OtwVO4F+YfJkvRTl/o=
Subject key identifier:   B7:2C:CE:89:04:56:02:37:79:C4:33:47:BB:7F:AF:62:45:5B:1B:EB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C8DF58F90D706EFD87A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67cb4b4e-224c-373e-9440-c4129d5b5f7f.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397221
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:8d:f5:8f:90:d7:06:ef:d8:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=5c4e8c29-9f65-48c8-ad3f-21db820dd29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:12:ef:83:52:ba:c1:b3:d1:08:6a:85:0a:
                    4b:71:8f:c0:06:2a:56:92:2a:fa:4f:67:a7:8c:cf:
                    49:1b:a3:ee:8f:d8:18:8c:53:b2:a8:f4:bb:17:69:
                    a1:18:44:e0:3a:74:85:2c:b5:8c:d0:b6:82:3c:de:
                    45:76:28:83:a0:9d:35:98:0b:f0:9a:9e:2b:9f:e4:
                    82:df:b6:a7:c1:a8:b0:95:d1:71:a1:df:e9:2f:d3:
                    c8:17:64:f3:ab:fa:de:ee:68:03:66:2c:66:ae:bd:
                    29:d6:96:66:5d:f7:3e:57:ce:28:ec:fa:31:36:b5:
                    97:68:16:c2:59:02:55:d8:05:c6:87:57:48:0c:d1:
                    e1:b0:1f:a7:35:42:db:0a:cb:c5:0f:d4:f8:9b:72:
                    c5:8a:26:0a:9c:19:56:68:32:c1:d8:47:71:ea:d8:
                    4f:da:82:32:f6:33:49:28:04:ac:c7:cd:46:6c:cf:
                    d3:56:85:5c:26:e0:ca:37:26:56:fb:0d:94:3a:0e:
                    d6:55:7a:b6:7c:1a:b3:e4:3c:72:4b:12:82:0c:59:
                    95:93:16:5c:6d:7d:b9:2e:07:84:db:df:39:fe:d9:
                    39:66:c3:e4:c8:74:79:fa:fa:f0:22:2d:08:9e:30:
                    da:bf:95:d5:d1:c2:3d:98:c2:c0:d7:11:88:25:2b:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2C:CE:89:04:56:02:37:79:C4:33:47:BB:7F:AF:62:45:5B:1B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67cb4b4e-224c-373e-9440-c4129d5b5f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:86:77:d6:16:62:32:28:6a:81:41:eb:5f:a0:e4:02:76:c0:
         18:16:a3:e6:a5:68:3d:b3:e7:06:2a:1b:d6:e7:65:99:40:f0:
         7d:06:1c:fb:57:07:aa:1a:d0:5a:ac:d0:2b:b7:f3:21:7c:7d:
         72:9b:9f:42:50:e3:3e:5b:3c:d6:af:54:fe:73:71:f1:13:8f:
         62:94:2f:90:cf:d7:ec:10:bc:14:3d:19:e3:6f:57:01:03:7a:
         54:b5:62:81:cd:55:f7:a6:f3:de:3f:5b:2f:a5:d8:31:a2:46:
         ec:b0:eb:12:38:97:09:31:4f:91:e1:c4:3f:9a:27:b0:5c:50:
         6a:0c:75:d5:20:b4:6a:df:cd:19:df:2c:b0:07:85:5d:a0:49:
         ed:04:ea:7c:bc:7d:bd:5b:f8:35:0b:b5:01:8c:dc:ff:3e:48:
         79:20:a6:e8:09:2e:ff:97:1f:0e:a0:d3:16:a2:65:ed:5f:e7:
         a0:41:41:5a:6a:a0:92:c4:a5:a5:7c:a1:16:8e:e0:d1:c1:71:
         cd:8b:89:e6:8b:5a:60:34:02:5a:48:29:0d:ca:12:b3:aa:8e:
         e6:20:9d:85:82:fb:fe:50:8d:09:99:b8:4d:cc:21:e3:fe:8a:
         18:26:cc:60:18:2e:e7:95:ea:95:7e:ab:14:ac:a3:1d:df:72:
         60:88:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:06:52 2025 by rpki-client