Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8df88d04-b34c-3ce3-8a1e-34a911ed46ae.roa
File:                     8df88d04-b34c-3ce3-8a1e-34a911ed46ae.roa (raw, json)
Hash identifier:          CVx93DwN5FX6UzlCJl2L4sgV6gCIELmgLotMtrS6J6k=
Subject key identifier:   6A:77:53:52:DF:E6:29:0C:64:CE:68:7C:A3:4F:C9:F8:6D:AC:E1:51
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C36FF402167378096757400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8df88d04-b34c-3ce3-8a1e-34a911ed46ae.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397228
IP address blocks:        204.74.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ff:40:21:67:37:80:96:75:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=8ce1b00c-2a9c-4abf-84ba-5477fc4c1dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:47:50:52:26:12:96:57:eb:7c:86:fa:10:
                    2e:8e:29:0a:0b:a7:7b:80:ed:fd:aa:fb:d4:b7:29:
                    06:ec:b9:b5:32:2f:e0:b5:e8:be:82:05:25:b3:e6:
                    91:00:fc:99:83:ef:61:b7:07:05:f8:9e:28:ed:0b:
                    1f:8c:2a:ab:b6:5d:0b:56:ce:29:c3:28:ac:8b:9b:
                    b1:33:ad:0c:7b:ef:a9:01:c6:b4:6d:2b:a9:1c:31:
                    6f:0d:b1:ce:67:08:d2:c9:98:f2:d8:a9:a9:be:37:
                    c4:cd:88:94:9c:f1:6f:f3:a2:3f:e7:a4:d4:ce:79:
                    88:46:7b:89:ff:37:5b:01:66:7d:26:3f:31:80:5c:
                    be:fb:3b:ee:05:77:95:81:18:08:74:c3:aa:55:94:
                    f6:2d:17:68:df:84:92:86:74:97:86:e9:da:96:0b:
                    25:c0:51:5e:ea:83:b4:83:f2:b1:40:55:c5:d0:28:
                    60:3b:cf:4e:ac:55:8b:b6:4a:07:c4:f2:65:55:4d:
                    93:d4:d1:9f:d3:9b:6f:8a:98:14:c0:08:01:f8:28:
                    db:79:2c:76:b8:06:65:af:d7:f2:cd:1a:f7:1b:fb:
                    ed:aa:cb:8b:d3:79:2d:4d:b9:bb:16:62:80:c6:3e:
                    56:e2:75:eb:2a:38:1c:a0:58:9d:5a:89:81:f0:37:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:77:53:52:DF:E6:29:0C:64:CE:68:7C:A3:4F:C9:F8:6D:AC:E1:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8df88d04-b34c-3ce3-8a1e-34a911ed46ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:04:34:83:66:ec:ff:40:5e:21:6e:05:46:58:3d:ee:d6:86:
         13:35:43:1e:dd:a2:8e:89:e1:64:e1:30:c4:e0:53:d5:26:2c:
         d6:e6:91:dd:63:64:6f:07:9e:6f:e7:ce:a6:60:bd:c6:fe:23:
         75:97:6a:54:29:f9:84:98:72:03:5f:a0:98:4a:0d:6e:07:7e:
         0a:48:93:9d:1f:56:3a:b7:87:a3:01:87:36:59:c9:99:35:ab:
         5e:09:3a:d3:45:bb:2b:55:97:52:42:59:62:51:f8:c9:98:f0:
         f5:a2:bc:05:e5:a1:3f:af:67:81:5c:ad:90:a3:f6:32:fc:6c:
         dd:a6:3c:01:6c:7a:5e:d2:41:24:5c:51:5f:b3:b9:aa:56:7f:
         15:c2:44:9a:a2:78:3a:1d:ea:5f:30:74:9c:94:1f:ec:0b:11:
         1b:e1:e1:62:1f:d4:c4:12:7c:8d:8b:49:37:28:49:40:37:c7:
         cd:fb:3b:91:fa:a4:40:75:bd:cf:59:b1:c1:15:7f:ad:44:79:
         ac:57:f0:28:2b:b8:33:e8:b2:8b:29:32:ea:3e:ce:34:c3:aa:
         1b:2f:3b:05:21:d4:d1:c5:91:82:46:54:74:aa:6d:57:7d:fd:
         8b:c0:47:23:13:55:8e:93:4c:15:70:a5:28:20:a7:47:c2:dc:
         08:8a:4b:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNv9AIWc3gJZ1dAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
OGNlMWIwMGMtMmE5Yy00YWJmLTg0YmEtNTQ3N2ZjNGMxZGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQRHUFImEpZX63yG+hAujikKC6d7gO39qvvU
tykG7Lm1Mi/gtei+ggUls+aRAPyZg+9htwcF+J4o7QsfjCqrtl0LVs4pwyisi5ux
M60Me++pAca0bSupHDFvDbHOZwjSyZjy2KmpvjfEzYiUnPFv86I/56TUznmIRnuJ
/zdbAWZ9Jj8xgFy++zvuBXeVgRgIdMOqVZT2LRdo34SShnSXhunalgslwFFe6oO0
g/KxQFXF0ChgO89OrFWLtkoHxPJlVU2T1NGf05tvipgUwAgB+CjbeSx2uAZlr9fy
zRr3G/vtqsuL03ktTbm7FmKAxj5W4nXrKjgcoFidWomB8DdVqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGp3U1Lf5ikMZM5ofKNPyfhtrOFRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGRmODhkMDQtYjM0Yy0z
Y2UzLThhMWUtMzRhOTExZWQ0NmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEENINm7P9AXiFuBUZYPe7WhhM1Qx7doo6J4WThMMTgU9UmLNbmkd1j
ZG8Hnm/nzqZgvcb+I3WXalQp+YSYcgNfoJhKDW4HfgpIk50fVjq3h6MBhzZZyZk1
q14JOtNFuytVl1JCWWJR+MmY8PWivAXloT+vZ4FcrZCj9jL8bN2mPAFsel7SQSRc
UV+zuapWfxXCRJqieDod6l8wdJyUH+wLERvh4WIf1MQSfI2LSTcoSUA3x837O5H6
pEB1vc9ZscEVf61EeaxX8CgruDPosospMuo+zjTDqhsvOwUh1NHFkYJGVHSqbVd9
/YvARyMTVY6TTBVwpSggp0fC3AiKSzQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:35 2025 by rpki-client