Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0eb39db-4e0d-3a6d-a9c6-0e5d0c960527.roa
File:                     a0eb39db-4e0d-3a6d-a9c6-0e5d0c960527.roa (raw, json)
Hash identifier:          DMndEk3jSIDUoehlXVCW1n00EjT4cs7E7C5J/1+ykhw=
Subject key identifier:   25:ED:F4:A4:40:0D:62:F2:79:84:60:36:BB:46:EF:B7:46:D9:A0:58
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C8F46C0F4786A9F911E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0eb39db-4e0d-3a6d-a9c6-0e5d0c960527.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397240
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:8f:46:c0:f4:78:6a:9f:91:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=e047fcfe-7433-4aa5-a263-b193b787fbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:34:6a:cf:7e:2a:77:bd:46:a7:43:e2:4b:
                    6c:1f:17:32:5c:27:5a:63:18:79:37:f6:9c:de:06:
                    e4:36:f1:7c:df:b5:d2:55:3e:cf:26:dd:d3:45:34:
                    62:15:8a:af:73:38:da:3e:46:94:ed:39:65:36:20:
                    72:43:6f:9f:15:34:48:06:a2:ec:14:be:9e:0c:25:
                    7a:33:91:06:d7:39:14:dc:8a:0b:7a:63:1b:f8:8c:
                    99:68:c6:2b:11:6c:36:84:13:a7:87:d9:0a:43:06:
                    ae:39:85:7b:33:52:71:7b:82:08:c2:eb:5b:3b:21:
                    46:35:90:3b:6c:d3:4d:0b:23:bf:14:35:78:02:51:
                    84:d0:ae:22:43:a0:e0:5e:b1:eb:93:8e:3b:d6:92:
                    fc:f7:d8:62:c9:d0:a3:88:f8:f9:88:8b:a8:d5:65:
                    25:8a:c0:1f:d4:c0:c7:9b:b0:c8:91:2e:70:58:94:
                    f0:6f:09:7d:a8:4a:20:11:36:73:71:2a:9c:01:d8:
                    0d:ad:ef:e8:22:31:eb:85:79:0e:a1:7a:70:c6:c1:
                    c5:a3:72:4d:88:85:27:9a:61:bf:b0:df:3b:c7:ed:
                    64:d2:5e:c9:cb:1a:e4:bf:77:22:68:c8:d6:fc:e9:
                    ba:07:c4:3e:f0:a7:74:0b:8b:c1:79:d9:39:c9:f0:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:F4:A4:40:0D:62:F2:79:84:60:36:BB:46:EF:B7:46:D9:A0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0eb39db-4e0d-3a6d-a9c6-0e5d0c960527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:8d:1e:c2:2b:a7:7c:f2:0f:97:5e:fb:eb:bf:7c:5b:41:
         1b:10:b2:94:cd:d5:1c:ed:e9:c2:50:81:7f:30:c5:a5:30:73:
         98:4a:7f:0d:d5:22:71:01:e0:d0:78:12:47:cc:be:3d:c0:bb:
         dd:1a:b5:65:05:82:5d:a1:3e:b6:03:44:80:10:d3:60:e8:3e:
         08:29:f9:16:c6:30:79:13:cc:bb:cd:63:f9:73:93:a4:42:28:
         6a:8f:71:ed:3a:01:6e:02:89:aa:ef:ab:11:c1:39:f3:5f:3d:
         7f:1e:d3:2c:c7:81:7b:72:9b:16:4d:a2:4f:2e:a0:ab:be:bd:
         08:1b:61:eb:a6:0b:1c:d4:ef:a8:c2:21:2e:0d:80:74:5e:2b:
         ff:20:0e:97:6b:68:7f:fd:5b:d7:07:97:10:cb:f1:4c:c0:65:
         2c:71:50:b4:82:9b:47:f7:5c:fb:b7:7e:73:dc:bb:dc:8b:72:
         c5:13:31:8a:9d:a1:e0:22:f0:0f:2c:6a:b8:be:95:e9:c9:f6:
         cb:1f:d0:0e:a6:b4:d5:6f:34:f2:8b:a9:6e:83:72:18:03:2b:
         be:27:44:34:53:0e:f2:38:aa:68:78:09:2c:1b:66:8b:02:6a:
         31:c0:7a:e0:18:68:ac:13:b4:81:13:4b:ec:66:64:de:c7:0f:
         3c:67:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:42 2025 by rpki-client