Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8067c395-5ae6-3d26-a202-1dc4106d2bec.roa
File:                     8067c395-5ae6-3d26-a202-1dc4106d2bec.roa (raw, json)
Hash identifier:          C85oQzjkKyiQaci9B0kjsY5IWzM4IRfzQQ7X4RkmZB4=
Subject key identifier:   54:08:D6:BE:EA:D9:16:E3:0D:A5:5A:09:AC:48:D8:A7:96:BE:12:73
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C8C5E69690527A7516360
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8067c395-5ae6-3d26-a202-1dc4106d2bec.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397233
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:8c:5e:69:69:05:27:a7:51:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=ccd15699-d53f-47fa-9b71-2ce86814bcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:fd:04:62:4b:e7:6a:bb:c5:e4:c7:c1:6d:
                    89:39:ec:8e:43:fc:fa:55:08:8d:d9:8c:ef:a6:37:
                    30:f1:12:63:a2:54:01:02:30:9b:0e:f3:9d:41:97:
                    b3:a3:e7:0c:df:59:71:fc:cd:00:e8:3f:76:0b:fb:
                    ab:2a:ce:e7:d5:bf:cc:35:b3:4e:e5:57:fd:8d:46:
                    3b:fc:19:cd:5d:20:8e:70:0a:ea:e5:f1:2b:d1:13:
                    d4:f6:44:5c:6f:74:5f:cd:2f:09:99:a8:48:fb:b1:
                    ac:b9:6e:85:7d:4e:16:9c:90:a8:47:eb:6e:6d:b9:
                    ff:66:7a:b7:07:23:73:d8:11:5f:f8:25:31:84:6f:
                    98:ea:c9:1a:e0:9d:5b:ef:fc:3f:df:7a:57:9c:8e:
                    23:7d:32:06:79:ee:2d:9b:99:0e:0e:b5:27:5b:53:
                    aa:e5:4b:3b:d3:9a:c4:36:d2:ef:5c:58:41:45:0f:
                    05:10:c4:9c:a0:8b:ed:6b:73:e2:d1:2b:d4:f3:8d:
                    52:fa:b1:99:8f:43:b7:f7:20:16:a1:6c:dd:8d:5b:
                    a5:5d:68:89:ab:6e:96:70:dd:49:e2:51:9d:9e:69:
                    11:62:a5:31:48:2a:bb:a6:63:f6:80:05:ea:d0:2d:
                    56:26:a6:72:19:94:ee:e1:ca:6c:3e:20:f1:50:55:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:08:D6:BE:EA:D9:16:E3:0D:A5:5A:09:AC:48:D8:A7:96:BE:12:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8067c395-5ae6-3d26-a202-1dc4106d2bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:a3:32:dd:9c:4e:fa:fe:97:5e:6d:12:da:71:af:a3:e7:
         40:f7:ff:f2:32:c8:7e:c6:f2:9e:ea:2a:49:e3:4b:dd:54:49:
         63:9d:ad:5d:29:8b:e5:a4:8e:a0:8e:49:22:88:59:dd:06:08:
         63:0a:ae:0e:e2:b1:05:87:3d:13:25:bf:72:3f:78:04:ff:bc:
         37:b7:36:d8:3a:6e:2b:7c:2f:34:ef:b9:4d:ef:df:28:96:4a:
         fa:e4:39:3d:0c:47:49:23:84:35:14:8b:59:b3:39:d5:14:3e:
         ae:29:c9:3e:62:be:69:5b:b1:06:2f:79:95:17:b4:f1:46:ad:
         d2:be:a6:d9:51:52:df:aa:26:6c:3d:89:c5:c8:99:79:b4:31:
         8b:65:4c:26:9e:52:60:c1:3b:66:e9:de:db:7e:56:d4:3c:fd:
         83:88:13:92:84:19:45:3a:f8:dd:ef:ee:92:d0:e7:a5:98:79:
         48:d9:bc:3a:c0:af:94:21:33:db:12:1c:c9:df:a2:03:ca:e2:
         85:63:3f:12:cc:c0:4e:45:27:1f:12:77:28:3d:75:c7:6a:85:
         0c:ab:fb:a3:2a:32:d1:60:45:72:b3:ce:3e:48:eb:f9:44:39:
         03:06:e9:20:9e:1e:e4:86:b1:0f:20:a7:60:f3:66:69:e3:f5:
         d8:ac:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:44 2025 by rpki-client