Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af9be5dc-d984-38e5-aaf7-3b71f2ce3255.roa
File:                     af9be5dc-d984-38e5-aaf7-3b71f2ce3255.roa (raw, json)
Hash identifier:          ZXMIjQqmYsGHZ9zbDU0V7c1BvNb4onNlMoYygEMXROQ=
Subject key identifier:   AB:83:F2:49:38:4C:A3:24:83:B0:0D:79:A2:91:38:FB:BC:0A:DE:37
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6C86F07D338027E6848580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af9be5dc-d984-38e5-aaf7-3b71f2ce3255.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397227
IP address blocks:        204.74.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:86:f0:7d:33:80:27:e6:84:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=70f6a22f-d756-4023-820f-86dd932beeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:55:da:75:99:b5:4c:31:d3:fc:c2:4a:91:62:
                    b2:fd:d2:e3:f9:91:fb:eb:9d:41:2f:e6:dd:c5:eb:
                    48:39:f7:0c:87:04:a0:3e:5f:6e:db:32:c4:ee:2e:
                    3b:9f:2f:bc:ed:62:40:88:fe:64:8d:e6:de:5b:a7:
                    a6:e9:90:0c:7f:70:a1:c5:03:78:75:83:90:33:6c:
                    5d:a3:27:a8:f1:8f:b2:c3:bf:f0:ab:c9:95:fa:30:
                    d6:fd:d8:8c:68:e6:af:07:c2:a4:8a:08:d9:e5:11:
                    8b:91:cf:f7:57:25:9e:d1:8f:45:05:ae:65:72:0c:
                    e0:7b:53:43:12:3b:50:b0:bf:35:92:cd:9b:54:d3:
                    b9:39:97:c3:04:57:1a:50:9d:b5:67:66:39:51:0e:
                    ac:be:01:ec:99:7c:cb:fa:61:e2:6b:ec:c9:77:8d:
                    88:01:ec:c3:b0:46:00:56:d6:73:6e:79:57:0d:66:
                    22:69:05:55:54:5a:b5:f2:0e:7c:83:4f:79:83:ea:
                    79:3b:68:f5:1c:21:a1:31:d5:d8:a1:cc:7c:b4:10:
                    2e:e4:e9:14:d5:fe:de:94:d2:17:9b:ab:a1:f5:9c:
                    c1:44:f8:ff:cd:2d:41:10:51:55:da:1d:93:78:25:
                    78:23:05:e8:19:21:c4:5e:f7:3f:ae:07:91:b1:2d:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:83:F2:49:38:4C:A3:24:83:B0:0D:79:A2:91:38:FB:BC:0A:DE:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af9be5dc-d984-38e5-aaf7-3b71f2ce3255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:30:0c:4a:4f:62:4e:26:fc:a2:1a:a2:80:a1:6e:8a:1f:
         37:5f:1b:ee:3a:6f:38:ba:ca:4e:b6:3f:2f:7c:7d:4c:7f:19:
         e3:88:4b:e8:d4:8a:6d:02:66:21:34:b5:f4:ae:06:7a:97:25:
         14:f0:22:63:6d:3b:ea:e2:b8:41:00:57:ec:1d:eb:26:c4:ac:
         e9:cd:99:f8:d3:ac:4f:b7:f2:85:f4:90:2b:63:18:97:fd:6d:
         e3:4c:ad:05:92:53:da:0f:fa:4e:bc:56:83:4a:65:07:90:18:
         24:e7:2d:a7:c5:d6:3e:f3:9a:99:18:b2:78:69:2a:33:12:82:
         20:0d:b7:d0:17:2c:41:73:7f:63:e1:50:34:5b:dd:ff:db:0a:
         f9:05:7f:a8:01:90:91:ef:79:d7:7a:40:be:5e:42:db:83:f3:
         83:db:a3:50:94:07:05:56:84:9e:c5:b5:72:91:79:56:9d:39:
         32:79:71:23:29:5f:9e:38:16:9c:84:ba:c9:9c:d4:40:25:69:
         af:52:37:cf:1f:c2:c0:ca:ac:5e:50:db:5a:1f:0a:7c:45:52:
         c7:30:d7:41:c2:93:71:0c:a3:00:80:2d:74:0e:43:06:c4:ea:
         4c:c5:d7:7c:7d:08:d8:82:2d:00:7e:c8:c7:99:6e:20:23:3f:
         af:82:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:57 2025 by rpki-client