Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8fc9fc35-cd2f-3d4c-bf24-9de7cfb026fd.roa
File:                     8fc9fc35-cd2f-3d4c-bf24-9de7cfb026fd.roa (raw, json)
Hash identifier:          aWPxAMHH4dpKKb2Vmrht1jG1eSFi06CRSl4BLK02Nwc=
Subject key identifier:   F7:FE:B7:51:8E:A8:58:B3:12:7B:F1:0F:F9:6E:4B:3F:56:FB:C1:7F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C8CE08A8DD1B1EF198C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8fc9fc35-cd2f-3d4c-bf24-9de7cfb026fd.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397240
IP address blocks:        204.74.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:8c:e0:8a:8d:d1:b1:ef:19:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=2d660bec-ef39-4bc7-a639-92f6e8ebcfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:40:8e:31:6c:e7:2d:85:2a:0b:52:b3:3f:
                    05:97:d8:51:d6:90:57:36:0b:d9:06:5d:aa:16:9e:
                    32:69:3d:fa:a0:2a:11:48:94:b2:ce:f7:6c:fd:8b:
                    1b:f9:81:d4:af:86:23:65:cf:44:d4:8a:b2:90:98:
                    f9:89:f8:c0:7f:12:0c:c2:66:9a:07:71:7a:a3:23:
                    ad:0b:9b:47:36:fe:b7:39:21:cc:80:5c:39:c0:b4:
                    8f:7e:8a:69:6d:82:ae:a9:71:d8:2f:01:19:9c:ed:
                    68:5c:5f:94:af:ff:a3:ff:2a:f6:d8:08:15:dc:7f:
                    29:af:68:6d:eb:a1:82:7b:50:ff:3b:1e:66:a3:91:
                    f7:a8:27:d7:ef:e7:ac:02:b2:54:38:50:9f:ee:8d:
                    e7:0c:0d:9e:df:e1:07:99:e2:26:1f:61:e2:79:52:
                    c8:05:3d:0c:1b:2e:b5:70:95:c0:44:ef:8e:41:a5:
                    92:e3:0a:1f:44:bc:5d:48:7b:7e:d3:6b:b7:0a:8b:
                    5c:27:db:5a:d0:f4:f0:d1:d9:5e:1c:30:c1:73:e2:
                    e9:7b:c9:d2:23:09:80:8b:85:cf:44:6c:83:19:83:
                    69:9a:d6:c4:60:96:d1:3b:e7:e2:75:5a:29:23:de:
                    f5:ea:51:ea:f4:0c:11:3f:18:6e:bb:90:94:39:f1:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FE:B7:51:8E:A8:58:B3:12:7B:F1:0F:F9:6E:4B:3F:56:FB:C1:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8fc9fc35-cd2f-3d4c-bf24-9de7cfb026fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:2b:d0:9e:28:03:a5:1e:1e:ee:e6:8c:dd:e3:f5:80:0f:
         f6:7a:94:c0:bc:91:28:94:0b:22:ef:0d:38:2e:aa:cb:72:1e:
         43:30:f4:a0:93:3c:9f:da:36:82:24:13:10:80:18:b2:95:89:
         fc:5e:7d:76:7c:cc:87:78:96:40:1d:66:a1:e3:16:b7:55:28:
         fc:95:08:b1:87:32:7c:10:44:ec:06:bc:d8:b7:cb:e5:3d:d8:
         26:0c:e9:e3:3a:b1:f3:93:3e:27:72:bc:62:89:32:d9:7f:a0:
         08:6f:c8:95:7d:d7:e8:03:62:94:c7:a3:cf:1f:b2:55:3e:b7:
         d1:c4:cf:b9:4c:bc:ca:4d:37:ca:14:5d:be:35:6e:cc:71:8f:
         71:a3:19:db:1e:5e:5e:16:f1:3f:59:45:4f:94:ae:0a:5d:90:
         6e:df:fa:11:5d:9e:30:d8:48:15:07:49:16:c4:b9:96:37:64:
         1f:0d:a0:d7:ad:eb:3b:50:e3:8a:5f:aa:9e:10:4b:3e:16:7a:
         6e:b0:35:0a:41:ae:64:7a:82:20:1d:4d:eb:54:ea:c1:64:4b:
         b0:31:25:af:58:67:a0:f6:56:cc:9e:a2:06:87:e2:61:71:7a:
         50:44:21:49:46:50:e5:57:8d:bc:18:e6:2f:46:8f:b1:8e:f8:
         21:e1:e9:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIzgio3Rse8ZjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
MmQ2NjBiZWMtZWYzOS00YmM3LWE2MzktOTJmNmU4ZWJjZmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbZAjjFs5y2FKgtSsz8Fl9hR1pBXNgvZBl2q
Fp4yaT36oCoRSJSyzvds/Ysb+YHUr4YjZc9E1IqykJj5ifjAfxIMwmaaB3F6oyOt
C5tHNv63OSHMgFw5wLSPfoppbYKuqXHYLwEZnO1oXF+Ur/+j/yr22AgV3H8pr2ht
66GCe1D/Ox5mo5H3qCfX7+esArJUOFCf7o3nDA2e3+EHmeImH2HieVLIBT0MGy61
cJXARO+OQaWS4wofRLxdSHt+02u3CotcJ9ta0PTw0dleHDDBc+Lpe8nSIwmAi4XP
RGyDGYNpmtbEYJbRO+fidVopI9716lHq9AwRPxhuu5CUOfGgaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPf+t1GOqFizEnvxD/luSz9W+8F/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGZjOWZjMzUtY2QyZi0z
ZDRjLWJmMjQtOWRlN2NmYjAyNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEplMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBdK9CeKAOlHh7u5ozd4/WAD/Z6lMC8kSiUCyLvDTguqstyHkMw9KCT
PJ/aNoIkExCAGLKVifxefXZ8zId4lkAdZqHjFrdVKPyVCLGHMnwQROwGvNi3y+U9
2CYM6eM6sfOTPidyvGKJMtl/oAhvyJV91+gDYpTHo88fslU+t9HEz7lMvMpNN8oU
Xb41bsxxj3GjGdseXl4W8T9ZRU+UrgpdkG7f+hFdnjDYSBUHSRbEuZY3ZB8NoNet
6ztQ44pfqp4QSz4Wem6wNQpBrmR6giAdTetU6sFkS7AxJa9YZ6D2VsyeogaH4mFx
elBEIUlGUOVXjbwY5i9Gj7GO+CHh6es=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:29 2025 by rpki-client