Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ab2eb4-2132-3624-9639-a34f276e8f46.roa
File:                     74ab2eb4-2132-3624-9639-a34f276e8f46.roa (raw, json)
Hash identifier:          rRgjoqwy2w4CCpCVxLDKYqLjj2mEx7HZdzh28ZUM5GI=
Subject key identifier:   90:D1:38:CE:02:BF:86:97:00:28:46:4D:B0:F0:52:7D:D9:B4:5F:01
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C8D06766456016DC213E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ab2eb4-2132-3624-9639-a34f276e8f46.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397242
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:8d:06:76:64:56:01:6d:c2:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=e3296712-9e44-4abb-aede-395a7d1bb2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:e1:02:4d:23:e9:e9:fe:59:32:f6:de:1c:
                    9d:bc:e9:94:b6:73:de:a1:f8:db:f0:f5:39:80:4d:
                    14:ed:1f:90:88:96:5d:9c:dc:e4:f8:f1:97:f6:4a:
                    f3:e0:32:54:61:f4:c6:de:8c:70:08:25:64:5b:42:
                    a9:43:2a:ae:38:66:45:a6:9b:ff:b1:f3:64:c4:25:
                    5a:41:b9:73:70:91:cd:2d:9b:fb:c2:6f:f8:dd:7b:
                    a6:28:cc:27:bf:e8:3d:11:f3:78:e2:b6:ec:21:3f:
                    c9:b1:4e:9e:f4:7c:61:cc:c9:5a:7f:67:09:99:a5:
                    9c:7e:b1:d0:e7:f3:db:34:4e:1b:a9:e6:03:eb:f2:
                    1e:ea:dc:6e:7c:c9:ab:03:46:5d:39:1e:b5:be:64:
                    d0:1d:02:79:75:d8:bd:e5:44:95:f3:01:94:c3:d2:
                    ac:6a:10:9f:08:dc:a1:a0:88:1c:75:24:f5:55:22:
                    30:e3:b7:75:2b:ff:14:9b:57:7d:2e:26:70:f1:ea:
                    0a:a8:29:cf:c9:ab:df:52:74:b4:a9:70:d5:28:0a:
                    ba:92:fc:0c:31:6b:e9:36:c3:2d:5b:63:76:85:08:
                    8d:6c:72:95:10:cf:87:26:64:8a:d2:f2:88:04:22:
                    94:ac:4d:2f:03:3a:f4:34:85:92:8c:e8:0f:22:fc:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D1:38:CE:02:BF:86:97:00:28:46:4D:B0:F0:52:7D:D9:B4:5F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/74ab2eb4-2132-3624-9639-a34f276e8f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:34:3a:fb:08:ee:8f:9c:c2:b5:51:c9:89:2d:e5:9d:06:85:
         ca:7d:fc:4f:3a:15:e5:cb:49:79:21:eb:c0:b8:f7:ba:02:94:
         b5:f3:c7:96:55:cd:33:5a:d7:69:5a:10:9e:15:19:6f:a8:b7:
         25:ff:dd:13:e3:bf:ff:b5:83:c4:80:44:e7:2b:70:d5:a3:7f:
         5d:aa:89:ae:f4:61:57:12:b6:d2:be:fa:49:7b:31:25:25:48:
         8b:ce:65:93:62:e3:9b:38:c4:9a:31:21:7a:3a:06:fd:e2:e2:
         09:fb:b6:0d:13:78:2d:47:a5:d6:c1:d1:c3:8c:1a:5c:93:b2:
         04:40:a9:67:3b:6e:ad:dc:d6:b3:4b:11:5a:72:66:7b:bd:ec:
         2c:b9:65:84:c6:9b:14:44:7b:e9:f8:47:b7:93:65:ea:9b:61:
         27:71:3d:3b:0d:a3:23:40:cb:cd:dc:be:08:b0:b0:7e:a6:79:
         d4:77:a9:2f:c9:0d:8d:bd:7a:df:0b:66:11:d8:d0:0f:63:96:
         11:69:38:85:a9:ee:38:14:e7:ff:30:f8:7d:66:84:18:8f:4f:
         46:07:f7:a3:10:19:8e:56:7f:a9:42:4d:3d:a8:fc:43:61:0c:
         60:0f:75:18:f3:ad:df:0d:15:1b:d2:ee:cc:c8:90:95:c2:0b:
         35:7f:85:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:33:24 2025 by rpki-client