Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdb69a79-a808-383f-881f-d97def516126.roa
File:                     cdb69a79-a808-383f-881f-d97def516126.roa (raw, json)
Hash identifier:          m03fQ8GnneFrYgR96QOusx3E9yq1MYOpDe9WVLbi2bs=
Subject key identifier:   63:CD:6D:E6:E5:F4:FC:11:AB:E2:05:15:CB:F2:94:31:77:C1:EF:84
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B5C6CA14DAA42C43B475BE280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdb69a79-a808-383f-881f-d97def516126.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     397230
IP address blocks:        204.74.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:a1:4d:aa:42:c4:3b:47:5b:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=003101e0-23ff-4a4d-8c8c-d19e5ff826c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:86:ac:a5:be:dc:51:50:92:24:c1:4a:2c:
                    b1:ea:c9:c6:fc:a2:6f:53:46:74:38:50:f7:3e:a3:
                    d6:d5:83:2c:b3:6c:4d:94:e8:f2:75:87:01:c3:1e:
                    52:cc:7f:fb:7a:c7:8a:5b:c7:c0:4f:b9:82:fe:2d:
                    32:34:6f:8c:42:d3:fc:c6:18:7e:a6:a3:29:19:a7:
                    a4:a8:d3:8e:73:42:cd:8b:c1:77:4e:45:ae:52:7e:
                    56:ac:b4:ee:d8:22:22:ce:a6:a2:85:5d:66:de:f1:
                    c2:73:73:58:9e:56:78:ad:30:0d:ec:0d:9d:96:89:
                    64:d1:1b:03:b3:c7:03:18:2d:fa:da:fd:0c:d8:9a:
                    de:73:d8:1d:d9:69:a9:c6:a0:de:6a:54:94:a5:86:
                    5f:4b:2b:bc:bf:28:f1:f1:a1:ea:1e:25:fe:ed:a1:
                    69:50:7b:c6:13:e5:73:74:0c:69:b2:6e:b7:77:d9:
                    16:65:d7:1e:7e:27:33:bc:71:f4:ed:62:f1:8f:88:
                    4d:b7:22:9b:02:58:e2:c5:ec:ae:a0:3b:3b:18:78:
                    6e:91:33:db:21:1e:ea:b5:8e:8a:24:f4:c1:e3:0e:
                    83:83:28:e7:e2:54:7f:95:c9:5f:7c:13:6d:ad:e3:
                    b5:a3:3f:9e:4f:ab:a0:78:75:f2:eb:3b:c8:7e:36:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:6D:E6:E5:F4:FC:11:AB:E2:05:15:CB:F2:94:31:77:C1:EF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdb69a79-a808-383f-881f-d97def516126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:17:33:73:74:bb:2c:23:21:35:41:81:33:e2:f6:d4:61:
         ca:67:f9:47:ef:eb:b2:93:f8:39:d8:2c:11:e0:f4:06:d0:cb:
         7d:4e:29:65:1c:ab:45:e0:9d:5f:e7:4d:de:54:70:26:0e:ed:
         65:be:d4:85:15:e8:9c:de:85:cb:41:67:f1:5c:8b:3c:75:57:
         16:56:0a:51:54:a3:09:87:2d:9b:ad:a8:07:ec:41:d5:c1:13:
         50:d8:94:99:17:41:f8:6a:aa:e6:9b:3b:88:7f:a6:3c:36:93:
         92:54:86:d8:9c:3a:ab:46:bc:c1:9a:31:54:87:c6:0d:53:c7:
         36:39:88:0c:e0:9f:82:f6:56:6d:50:50:46:50:3b:9f:f7:4c:
         3f:54:79:b8:87:a0:a8:e0:ed:30:eb:d6:0a:d4:84:9b:a1:ba:
         31:b7:60:06:ae:11:fb:df:db:9a:d6:3f:8c:ee:87:3c:5a:3f:
         28:ad:72:9a:2c:bf:8b:41:4f:97:10:8a:4e:0e:9a:54:5d:88:
         05:c9:19:24:44:da:cc:a7:91:2b:10:4c:36:d5:a5:ce:44:9a:
         98:ea:c6:b6:2a:21:88:5b:e9:47:79:5e:73:72:9a:1a:4c:79:
         b3:88:ab:00:a6:32:35:a3:c2:7d:e8:52:fa:7d:f4:e8:06:92:
         95:30:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:25:08 2025 by rpki-client