Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83e68b28-f8fa-339c-ac67-4bb48983aea8.roa
File:                     83e68b28-f8fa-339c-ac67-4bb48983aea8.roa (raw, json)
Hash identifier:          +GiCYODc+VHUBR/tJLXVriMl01/E/ANWGBAE6ylINX8=
Subject key identifier:   57:92:F7:4F:5F:78:A0:9E:88:F9:29:29:65:FE:58:D0:7A:5D:47:F8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1D9426DA7A74843F8A900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83e68b28-f8fa-339c-ac67-4bb48983aea8.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397243
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:d9:42:6d:a7:a7:48:43:f8:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=2950efda-e7c5-4f70-aebc-75cbd211d666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:bb:89:58:3d:a3:52:b2:19:7c:50:37:a7:
                    a1:5a:60:a6:93:67:6f:62:3f:32:21:cd:d4:2b:f9:
                    bc:5c:b7:12:3e:5c:6b:65:1e:7c:01:01:bb:24:36:
                    6f:9b:17:65:4a:b3:6b:18:b2:44:90:af:63:ee:4e:
                    97:b4:8a:a6:cc:87:66:cf:53:95:c5:c4:ed:98:c2:
                    2d:ed:62:1a:05:b3:cf:82:59:ce:bc:30:ef:2a:7e:
                    44:12:1c:f0:91:ea:0c:69:2b:d2:d1:58:57:34:48:
                    9b:e2:fe:44:8b:d7:df:da:24:9a:d5:f0:a5:12:87:
                    1e:79:2c:e2:2a:a0:42:79:4c:47:dc:60:f5:ed:35:
                    8c:5b:cb:ba:ae:82:8f:e9:b4:9b:bd:34:6b:37:a7:
                    ee:9a:cb:7a:ab:0e:25:08:e4:cd:23:b1:01:d1:c7:
                    de:ca:3d:7f:ec:fc:65:f7:5b:d8:3c:a3:a7:97:38:
                    03:0c:1e:57:27:18:66:58:8e:b3:f3:67:70:9f:f8:
                    df:05:57:3a:af:20:0b:a7:a6:7f:58:2c:e0:3c:5c:
                    06:79:74:be:4a:06:70:6d:ac:11:b8:49:b1:83:28:
                    f8:09:60:4b:e0:64:26:f1:d1:c3:f3:5f:30:f2:6f:
                    e2:8a:93:37:b0:dd:6a:4e:f0:13:2d:bf:11:24:a7:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:92:F7:4F:5F:78:A0:9E:88:F9:29:29:65:FE:58:D0:7A:5D:47:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/83e68b28-f8fa-339c-ac67-4bb48983aea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:b9:03:03:99:e0:49:96:fe:84:c9:68:2b:44:9c:28:dd:
         24:44:86:75:f1:ed:07:27:e2:e7:f4:47:bb:32:0c:8a:bf:e4:
         ba:6d:e2:fa:25:26:e1:14:1e:b4:de:28:f9:1f:3c:43:25:60:
         c7:29:f7:60:c6:7d:05:65:58:85:64:f9:29:91:e3:fa:3f:b8:
         ff:aa:05:89:23:bb:78:8b:a0:2c:b7:b3:3c:59:2c:3c:cb:8e:
         31:7e:74:af:74:f6:43:4a:02:02:63:c6:93:d2:ff:ad:f4:5f:
         55:bc:a0:c9:72:c0:f4:09:dc:b6:89:d5:e1:4d:7b:96:1f:f5:
         a6:22:52:66:23:0d:0a:dd:25:63:9e:b7:32:06:05:90:dc:85:
         de:1b:79:1c:d9:a1:2b:f1:d9:df:58:fb:67:e1:6a:63:23:11:
         6a:1b:e9:e0:10:39:11:f6:2d:77:58:42:7f:c3:50:f6:3d:82:
         cf:72:d9:4b:11:99:8f:a8:73:92:c7:e5:18:8d:28:50:8a:85:
         7a:36:e8:c3:29:62:c1:ea:4a:3e:8b:44:26:25:af:1b:7e:bb:
         87:08:bd:e0:b4:61:ac:25:82:76:1f:e5:24:b8:20:19:13:5f:
         2e:ac:e2:bc:3b:d4:c0:7e:77:1e:89:94:31:76:a3:fc:2e:60:
         a3:b8:28:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dlCbaenSEP4qQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
Mjk1MGVmZGEtZTdjNS00ZjcwLWFlYmMtNzVjYmQyMTFkNjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zq7iVg9o1KyGXxQN6ehWmCmk2dvYj8yIc3U
K/m8XLcSPlxrZR58AQG7JDZvmxdlSrNrGLJEkK9j7k6XtIqmzIdmz1OVxcTtmMIt
7WIaBbPPglnOvDDvKn5EEhzwkeoMaSvS0VhXNEib4v5Ei9ff2iSa1fClEoceeSzi
KqBCeUxH3GD17TWMW8u6roKP6bSbvTRrN6fumst6qw4lCOTNI7EB0cfeyj1/7Pxl
91vYPKOnlzgDDB5XJxhmWI6z82dwn/jfBVc6ryALp6Z/WCzgPFwGeXS+SgZwbawR
uEmxgyj4CWBL4GQm8dHD818w8m/iipM3sN1qTvATLb8RJKewVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFeS909feKCeiPkpKWX+WNB6XUf4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODNlNjhiMjgtZjhmYS0z
MzljLWFjNjctNGJiNDg5ODNhZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+euQMDmeBJlv6EyWgrRJwo3SREhnXx7Qcn4uf0R7syDIq/5Lpt4vol
JuEUHrTeKPkfPEMlYMcp92DGfQVlWIVk+SmR4/o/uP+qBYkju3iLoCy3szxZLDzL
jjF+dK909kNKAgJjxpPS/630X1W8oMlywPQJ3LaJ1eFNe5Yf9aYiUmYjDQrdJWOe
tzIGBZDchd4beRzZoSvx2d9Y+2fhamMjEWob6eAQORH2LXdYQn/DUPY9gs9y2UsR
mY+oc5LH5RiNKFCKhXo26MMpYsHqSj6LRCYlrxt+u4cIveC0YawlgnYf5SS4IBkT
Xy6s4rw71MB+dx6JlDF2o/wuYKO4KDQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:05 2025 by rpki-client