Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa
File:                     7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa (raw, json)
Hash identifier:          mINMws89oZtOGvmfG6gwOOkQVYwht2M5v+0PQTC0B9Y=
Subject key identifier:   61:FD:24:F7:62:E9:44:C4:AE:B0:6A:81:4C:9A:85:8B:56:D1:90:71
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C885EEC19A68AFDDF0640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397213
IP address blocks:        204.74.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:88:5e:ec:19:a6:8a:fd:df:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=cbe79718-92b4-4d0b-8011-e9d2cf84e137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:c3:d8:bf:60:c0:3e:c1:70:e7:10:ef:b5:
                    29:f6:b0:b6:93:a9:0a:ed:68:d1:7e:c8:b3:2c:c1:
                    5e:50:93:0f:c6:59:43:db:20:ca:5f:a0:08:36:36:
                    28:ef:3f:18:e3:c5:79:91:9c:92:ef:1a:61:38:76:
                    60:d1:3b:58:55:62:7d:95:01:1b:11:8f:e4:86:91:
                    e6:59:5a:17:75:c6:ba:d0:c5:f6:fb:e0:49:60:72:
                    15:01:eb:b7:7c:50:0b:35:2a:47:c0:cc:68:e4:9c:
                    ab:cd:eb:78:4a:6f:c4:33:78:fd:6f:bf:e0:12:b0:
                    7b:4f:82:ca:47:67:dd:11:4d:5c:83:8c:ca:e7:98:
                    31:a9:55:8e:c1:b9:14:78:27:bd:f7:34:b1:0b:44:
                    ad:4a:85:40:6b:b1:c4:8e:69:06:fd:6e:75:8c:61:
                    e3:e0:48:da:de:f6:72:9e:48:5e:99:a3:12:e5:6f:
                    fd:9d:f3:a2:d6:92:1b:7e:ac:41:f2:ba:ef:74:32:
                    9d:7f:af:8b:eb:78:96:c9:f8:26:3a:78:fe:c6:0e:
                    ca:6e:af:c7:82:f9:f5:b6:52:70:63:ad:e8:75:d7:
                    f2:a9:5c:59:ff:4a:89:72:85:74:b9:1d:33:7c:26:
                    aa:65:0e:4e:5e:52:20:b0:69:fd:ae:38:5c:43:74:
                    c6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FD:24:F7:62:E9:44:C4:AE:B0:6A:81:4C:9A:85:8B:56:D1:90:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa11734-49ea-3cc6-95ed-dde69f7e129a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f0:0a:8e:db:73:07:74:90:58:69:ce:a7:b7:8e:7a:3e:17:
         bc:38:35:2c:df:3f:16:2e:35:3e:07:ad:98:47:4c:c0:79:13:
         e3:87:b0:4e:b1:2b:1d:fa:a1:e8:21:72:e0:cf:8a:aa:3f:66:
         13:bb:d0:5e:50:db:d7:a5:90:c8:20:d1:90:27:1f:27:7c:94:
         e4:df:85:0a:7e:ca:38:f2:e2:79:da:96:ae:71:bc:28:73:7a:
         ab:c2:0a:f7:0a:ab:f4:4b:22:98:30:0c:53:2b:ab:4e:af:55:
         72:6f:42:07:b2:b6:30:47:87:cf:e2:26:22:22:7f:25:a5:d3:
         52:6c:cb:18:48:eb:03:fc:0e:75:d7:75:a1:1e:53:f7:b5:a9:
         9c:03:da:b3:16:a7:7c:0b:19:1f:1d:06:65:79:19:e4:0d:b2:
         33:d5:a0:95:25:3e:04:2b:1a:de:1d:e5:e7:96:b4:08:04:65:
         af:5b:e3:c5:53:20:66:45:51:ae:fe:ae:5c:5c:f3:d2:c0:9b:
         ae:ea:db:eb:5a:3d:9f:9a:42:da:2b:06:53:0f:38:3c:ad:65:
         14:b4:4b:33:a8:7c:83:6f:7e:56:70:3e:2d:81:bf:43:d8:65:
         01:82:c1:a9:57:82:6f:2e:36:70:15:aa:b9:2a:61:22:ba:3b:
         65:b7:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:25 2025 by rpki-client