Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b167640-b86e-3ad3-9bdc-ad832277255a.roa
File:                     9b167640-b86e-3ad3-9bdc-ad832277255a.roa (raw, json)
Hash identifier:          YpD1B3XqMdyVJ0Ml7mBROQdo7NTifbzeCoyYwIseMOA=
Subject key identifier:   EA:91:F9:22:7C:C1:E3:5F:C0:C7:9D:26:58:79:C3:F8:26:C3:C0:58
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A4F05D48692795B738F2C5008
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b167640-b86e-3ad3-9bdc-ad832277255a.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397231
IP address blocks:        204.74.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d4:86:92:79:5b:73:8f:2c:50:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=03bbbdf3-9b04-4b28-8b4a-bdeb18120dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dc:f1:eb:1f:fc:f1:ce:5b:81:d0:b7:9b:d1:
                    93:07:98:e3:0d:0b:6f:d2:6f:86:62:85:ea:35:3f:
                    71:92:3e:bb:37:37:2f:95:bb:f8:d3:0b:ae:0a:bd:
                    81:b9:3c:06:36:b4:99:fd:78:fd:13:65:d3:05:c0:
                    1f:0d:fc:d2:c9:8f:97:de:03:4c:1e:9a:06:22:64:
                    cd:3d:d7:6e:ef:95:c1:89:87:c7:db:50:3b:0f:d8:
                    39:da:23:0a:75:c6:cd:d4:81:16:81:fe:0d:11:d4:
                    21:71:71:3f:e3:23:76:31:bf:8b:94:96:15:01:48:
                    59:98:22:95:e4:55:fd:9a:ae:22:97:8d:73:ef:9c:
                    35:aa:a2:7b:d9:b8:a5:64:26:72:83:de:c0:b2:30:
                    2c:a4:a4:e1:87:90:b5:9d:ab:53:fe:92:bd:5e:1a:
                    cc:3c:ca:ab:d9:ff:cc:7b:6f:e4:82:d2:9e:13:51:
                    fc:02:8c:9f:f9:66:bf:aa:33:25:92:46:e7:87:62:
                    e8:42:86:22:4b:71:ae:9c:35:5a:14:8f:26:43:78:
                    86:1c:3d:1c:64:8d:d0:30:80:a8:92:59:50:7b:dc:
                    cd:98:b9:df:a0:7c:08:db:14:b1:a8:d9:f3:9d:1f:
                    e2:3c:56:4f:67:81:16:68:e9:0d:4c:8f:fd:a4:11:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:91:F9:22:7C:C1:E3:5F:C0:C7:9D:26:58:79:C3:F8:26:C3:C0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b167640-b86e-3ad3-9bdc-ad832277255a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:04:54:1e:33:4e:13:49:9b:7a:39:ec:70:bd:94:c0:53:a1:
         79:1e:48:2c:a3:ae:ca:57:64:29:d8:6b:80:1b:79:07:94:aa:
         f1:83:37:39:30:ad:df:ec:f2:d5:17:85:40:9e:47:86:08:f4:
         98:82:65:31:6e:57:15:42:aa:d1:db:92:fd:c5:5a:16:f7:a7:
         b4:db:a1:de:6c:de:37:4e:4d:93:59:ef:f3:6c:44:a0:df:d5:
         a3:0a:68:b9:ba:77:b5:17:c4:a8:db:61:8d:af:97:e8:4f:2e:
         b0:95:61:1b:f4:2b:63:93:48:1c:13:9b:64:f1:c8:5f:5e:f4:
         77:8d:84:59:ef:ad:0a:0a:b8:cd:54:61:04:c9:a3:3f:d3:6d:
         51:ad:95:9c:be:a5:78:c5:46:2c:8b:ee:70:13:6f:84:11:87:
         6d:9e:40:d8:85:a5:b5:f9:3f:c0:63:9b:7e:1c:c7:88:52:be:
         98:f0:73:50:b6:05:ea:a6:93:68:b9:69:c7:e1:54:ca:85:a2:
         df:e1:0d:fe:34:18:48:48:d4:10:03:81:75:d5:0d:85:f8:b7:
         1d:d9:28:78:93:e6:6b:f1:ab:ec:c4:85:2c:4b:36:ad:71:7b:
         fb:6d:8b:a9:80:fb:ef:3c:4f:49:e9:9f:78:12:f5:ef:4f:71:
         49:4b:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:46:45 2025 by rpki-client