Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/745454c2-460b-3f95-a148-3f39e9f289a2.roa
File:                     745454c2-460b-3f95-a148-3f39e9f289a2.roa (raw, json)
Hash identifier:          6KdcoLFKH0v6oX+QXj8guo53FNN6St1h4n+coB05x0I=
Subject key identifier:   CC:18:0B:AB:61:AB:2C:3B:8B:F4:41:96:C0:35:64:B9:57:27:9F:34
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CA104782565F9152B5880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/745454c2-460b-3f95-a148-3f39e9f289a2.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397226
IP address blocks:        204.74.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:a1:04:78:25:65:f9:15:2b:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=50e3f301-dfbe-485c-bf32-af1293a7793a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:03:70:84:68:7a:c5:3d:2f:bd:4a:40:3d:
                    e5:ec:44:92:d9:4b:bc:c0:1d:d3:d4:ef:31:22:24:
                    77:c1:ca:83:98:31:81:5d:21:d3:99:7d:db:a0:43:
                    bc:d2:87:39:c4:d0:80:d5:6b:7d:97:79:0b:23:38:
                    08:1c:6e:79:4c:4f:6c:c2:74:22:44:60:b3:7f:45:
                    23:2a:a9:ef:57:a2:84:e2:24:2d:17:44:ad:63:64:
                    63:c2:ec:3e:6d:fa:cc:16:f0:63:1c:2a:89:67:5a:
                    05:c2:80:ca:a8:46:d7:4b:05:b3:a2:85:29:c0:7b:
                    12:83:08:c7:34:1f:7c:97:a7:50:ab:0d:ca:41:86:
                    00:e5:be:7a:6e:72:7b:52:52:87:cc:a7:4c:9b:ed:
                    f8:45:f7:2a:2a:0c:9f:b4:01:eb:f9:cb:29:70:67:
                    b1:8f:6c:bb:c5:6d:5f:a5:a2:bd:d9:7b:af:1d:91:
                    9d:67:a1:40:fd:c1:41:a3:d9:19:69:44:68:41:87:
                    ed:b8:64:97:dd:63:da:7e:3d:eb:a1:d7:1e:64:63:
                    3e:d3:ef:34:2e:a5:17:e2:7b:e9:9d:2c:35:51:e2:
                    09:9b:ea:45:3a:57:68:66:2a:fa:51:50:bf:38:4c:
                    f9:02:ab:7a:32:b6:0a:67:64:76:47:9e:ef:8d:6e:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:18:0B:AB:61:AB:2C:3B:8B:F4:41:96:C0:35:64:B9:57:27:9F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/745454c2-460b-3f95-a148-3f39e9f289a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:1e:10:dc:9e:f8:fd:c6:98:af:49:80:6d:46:d7:44:9d:
         d1:1e:88:b4:d6:6b:d7:93:34:af:c8:68:69:02:43:12:1a:0c:
         ed:81:ca:37:ab:dc:13:da:eb:ed:0b:46:48:0e:28:60:a1:e1:
         c5:31:bb:d9:d6:42:5a:82:2d:32:a5:73:d6:96:67:6c:5e:9a:
         74:fd:bc:19:8f:73:23:d7:0c:99:d7:96:e3:0e:81:61:20:f9:
         d1:27:db:4f:90:f8:30:f7:fa:62:f8:57:1f:39:a6:12:10:cf:
         2c:78:17:74:98:c0:f6:f9:77:3a:dc:2c:78:1b:3e:f5:d1:0f:
         c2:e0:47:99:7c:13:cd:a0:07:9b:8c:1a:9c:93:5d:85:46:0b:
         df:8b:ee:7b:fd:32:dc:d1:fd:c1:56:e0:3f:70:6e:fd:80:42:
         51:bb:3c:6f:80:a7:a7:25:4b:20:ec:1f:17:6e:54:a2:be:ce:
         36:6a:43:9a:1f:e8:4d:dd:34:c6:79:d1:14:dc:c8:6b:c8:18:
         c6:5c:02:5f:70:27:78:12:e8:6a:a3:c0:e9:2f:a1:3a:42:c8:
         aa:7e:cb:0c:76:cf:46:d7:f6:de:aa:c6:c2:00:6e:3c:11:15:
         9f:3f:31:6f:91:1c:2c:a5:79:e6:1e:b6:57:c8:df:66:d8:ea:
         f8:7d:b9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:53:12 2025 by rpki-client