Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b212751-5ce4-30e0-a54a-a8f2c75178ce.roa
File:                     8b212751-5ce4-30e0-a54a-a8f2c75178ce.roa (raw, json)
Hash identifier:          /skenbDM7MDiCmotlq9o0luEXmpa8EEoepkBYYEM/Rc=
Subject key identifier:   83:C2:53:87:DC:CC:98:4B:F5:90:BA:53:0C:F1:C0:7F:B0:D1:29:C0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E1DA61BDBD34DC9EA17780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b212751-5ce4-30e0-a54a-a8f2c75178ce.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397226
IP address blocks:        204.74.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:da:61:bd:bd:34:dc:9e:a1:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=585ae250-e5ab-4ba7-826e-b6942dd7cdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:57:2e:71:d0:fb:06:b1:68:2d:4e:7c:31:
                    70:ca:d5:b1:12:1a:ed:78:7b:ac:20:5c:64:18:88:
                    af:f9:3f:01:f8:89:e1:f7:a0:5c:3a:2a:57:07:fc:
                    63:2b:d6:38:32:df:86:5b:7a:85:3f:cc:c6:bb:49:
                    63:fc:44:90:63:bf:71:ca:1d:47:c1:f3:ce:3c:13:
                    9f:24:d9:3a:be:3a:94:09:8c:99:f4:73:38:eb:51:
                    aa:c8:2d:5b:0a:c2:4e:e3:71:ac:84:c1:db:08:98:
                    7b:26:d0:9d:3f:28:ee:f6:3e:8c:df:74:c2:e8:e1:
                    7d:1a:17:ad:80:4e:52:35:fb:4e:55:70:02:c6:f4:
                    78:2f:99:6d:40:c2:d1:94:ad:a0:3a:f5:fc:44:56:
                    df:25:76:cf:f7:70:80:5d:ed:d3:c5:82:b1:90:a9:
                    57:7a:42:97:2a:d4:15:0e:59:59:0f:2f:3b:59:13:
                    05:e5:e8:53:d8:e8:4f:36:c6:f3:3e:af:72:db:71:
                    4e:72:8c:e8:48:8a:25:fa:2d:20:7d:63:62:5c:c6:
                    d0:ab:6f:9b:6e:f7:50:7d:12:e3:c3:08:27:5d:88:
                    43:8d:de:fa:4b:e2:65:91:77:f4:c4:aa:c3:88:09:
                    15:26:3c:ba:5b:57:51:70:0c:5e:f1:c0:92:09:1b:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C2:53:87:DC:CC:98:4B:F5:90:BA:53:0C:F1:C0:7F:B0:D1:29:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b212751-5ce4-30e0-a54a-a8f2c75178ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9b:04:80:76:6c:a6:b6:f1:90:31:ec:14:48:dd:ba:e4:a8:
         b7:8b:34:a6:92:4b:e2:68:81:b9:0c:2b:4b:ff:24:14:ee:50:
         01:83:ac:c0:6a:20:d0:a7:bf:4d:1d:2c:8c:ac:ca:0f:27:ab:
         fd:4e:83:a9:ee:a4:4f:37:e1:ce:40:4d:ac:5c:eb:52:fd:70:
         38:bd:cb:e1:db:da:c8:c2:f4:89:5e:48:69:17:3f:ee:94:eb:
         ef:40:a4:73:08:22:39:d5:69:97:25:ef:bd:3e:fa:4d:a5:c7:
         23:f7:f4:ad:70:e6:f3:bf:de:10:ed:9d:53:d3:c8:d3:2a:31:
         28:0d:1b:c0:e3:21:fb:2e:38:cb:89:80:6f:3a:e2:e9:1f:81:
         df:f1:52:49:a4:99:c1:17:ff:48:69:b0:2c:87:c7:a9:bb:46:
         41:58:c6:b2:f1:dd:48:1e:1f:e1:fe:70:e6:8b:05:c7:27:36:
         e5:eb:14:ca:86:cb:9f:07:6e:b6:dd:5d:5a:33:dc:af:6c:e4:
         46:1b:2d:45:bc:2d:98:bd:82:fb:0c:0f:d3:c7:b0:da:f9:d4:
         22:88:3e:ff:29:aa:41:07:9d:24:6d:de:6e:e2:0d:4d:23:a6:
         43:bc:ad:17:ac:a6:66:10:63:0e:8a:bd:c9:45:9c:87:b2:c4:
         90:e0:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:35 2025 by rpki-client