Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca60c512-918a-32ad-a158-f982639cd9c5.roa
File:                     ca60c512-918a-32ad-a158-f982639cd9c5.roa (raw, json)
Hash identifier:          MBw5cMeiyq252jrw+98WLihJwkilkQjUSy9WPRtWGAg=
Subject key identifier:   E5:4A:CF:B9:F4:2F:15:CA:CF:29:F6:8D:28:68:B7:FF:89:7F:FE:70
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E200D41D517A5F6752CA00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca60c512-918a-32ad-a158-f982639cd9c5.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397236
IP address blocks:        204.74.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:00:d4:1d:51:7a:5f:67:52:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=4e59de30-f25f-4ca6-b3bf-2c723de01f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d7:87:13:26:96:76:10:f2:16:5d:80:7d:37:
                    3f:c2:33:1e:6e:2e:25:d2:32:43:92:5e:12:ba:16:
                    8e:79:9e:4b:25:3f:60:b4:da:ce:60:fc:65:38:ec:
                    12:32:bc:9e:f5:5d:0e:56:7c:ba:77:aa:0e:80:2d:
                    cf:7b:9f:04:36:fd:00:74:c1:5e:69:eb:dd:fe:83:
                    5a:71:b3:8c:38:57:2e:66:b0:ba:1a:55:48:d8:3d:
                    32:fe:4a:35:64:f0:be:94:c5:25:21:ba:be:5b:e6:
                    43:a7:09:7f:04:bf:4d:cd:3c:76:5b:84:d1:09:6e:
                    57:69:02:bb:0a:73:f5:25:bb:33:7e:05:e3:dd:50:
                    c1:86:1e:2a:f0:7e:42:dc:11:57:3b:47:c6:11:84:
                    cb:60:0e:ba:36:07:5f:73:da:ce:68:8c:4d:bf:b1:
                    c6:e3:d9:03:89:d7:ee:74:00:ec:20:eb:83:d5:79:
                    69:46:57:e0:df:2f:b5:be:dd:30:28:dc:6b:66:a9:
                    b5:d1:8c:a7:6c:3e:eb:ad:d6:2c:38:67:98:9c:13:
                    e3:75:f4:8d:41:0b:94:56:94:a9:e5:d0:79:50:e8:
                    74:9b:31:3c:87:30:7d:e7:5b:15:48:49:92:94:d1:
                    ee:6f:1c:80:9d:b1:2a:e0:8f:01:8c:71:9b:58:a7:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:CF:B9:F4:2F:15:CA:CF:29:F6:8D:28:68:B7:FF:89:7F:FE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ca60c512-918a-32ad-a158-f982639cd9c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ba:85:69:59:ac:db:32:49:7a:86:da:81:2d:46:59:c5:21:
         34:1a:b9:9d:47:c2:55:5d:23:da:25:68:66:b6:04:21:39:2a:
         cc:1b:6b:b0:95:b4:bd:5e:af:26:70:36:9e:f9:b7:a8:64:96:
         31:54:89:12:ca:3c:ac:2b:b2:4e:bf:65:09:85:cc:0d:f9:34:
         87:97:0b:0b:09:4e:63:0b:41:08:79:4b:db:ad:77:16:59:5c:
         ba:90:89:5d:93:b5:ed:7d:66:11:1b:7e:97:9a:47:36:e3:9f:
         8b:9a:81:33:c2:e3:b9:60:97:1f:f6:50:52:03:ce:43:99:8b:
         0a:38:5b:f5:04:0f:e6:a1:80:b8:ff:32:3b:4d:fe:eb:e8:57:
         57:51:72:52:b4:97:1c:94:53:47:22:c1:98:33:7c:0a:d3:b5:
         0f:bd:c0:a7:d9:21:1e:45:ab:61:16:cf:c3:5a:71:e2:0b:47:
         30:39:1a:df:b5:60:bc:80:7d:de:ad:5a:41:75:a9:48:72:18:
         9d:0e:e2:ca:5f:25:dc:fc:09:24:76:81:4e:db:95:1d:35:57:
         fc:cd:a9:5a:df:8c:38:04:bd:2a:65:14:07:93:27:df:05:9f:
         3b:3c:e3:04:60:27:17:f3:e0:f5:fc:1c:0e:e5:43:f3:b6:e5:
         43:21:5f:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gDUHVF6X2dSygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NGU1OWRlMzAtZjI1Zi00Y2E2LWIzYmYtMmM3MjNkZTAxZjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgteHEyaWdhDyFl2AfTc/wjMebi4l0jJDkl4S
uhaOeZ5LJT9gtNrOYPxlOOwSMrye9V0OVny6d6oOgC3Pe58ENv0AdMFeaevd/oNa
cbOMOFcuZrC6GlVI2D0y/ko1ZPC+lMUlIbq+W+ZDpwl/BL9NzTx2W4TRCW5XaQK7
CnP1JbszfgXj3VDBhh4q8H5C3BFXO0fGEYTLYA66Ngdfc9rOaIxNv7HG49kDidfu
dADsIOuD1XlpRlfg3y+1vt0wKNxrZqm10YynbD7rrdYsOGeYnBPjdfSNQQuUVpSp
5dB5UOh0mzE8hzB951sVSEmSlNHubxyAnbEq4I8BjHGbWKfxDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOVKz7n0LxXKzyn2jShot/+Jf/5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2E2MGM1MTItOTE4YS0z
MmFkLWExNTgtZjk4MjYzOWNkOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB66hWlZrNsySXqG2oEtRlnFITQauZ1HwlVdI9olaGa2BCE5Kswba7CV
tL1eryZwNp75t6hkljFUiRLKPKwrsk6/ZQmFzA35NIeXCwsJTmMLQQh5S9utdxZZ
XLqQiV2Tte19ZhEbfpeaRzbjn4uagTPC47lglx/2UFIDzkOZiwo4W/UED+ahgLj/
MjtN/uvoV1dRclK0lxyUU0ciwZgzfArTtQ+9wKfZIR5Fq2EWz8NaceILRzA5Gt+1
YLyAfd6tWkF1qUhyGJ0O4spfJdz8CSR2gU7blR01V/zNqVrfjDgEvSplFAeTJ98F
nzs84wRgJxfz4PX8HA7lQ/O25UMhX2o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:28:14 2025 by rpki-client