Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de9222bd-8e79-375d-930b-853b22abeb40.roa
File:                     de9222bd-8e79-375d-930b-853b22abeb40.roa (raw, json)
Hash identifier:          Udi+1yF4VMytlbKccooktHwXioDlN4141IIh3p1F818=
Subject key identifier:   D3:83:1C:FC:AF:5F:0A:24:A3:90:46:0D:C6:F6:DC:0A:A8:29:72:B8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A4F05D4E0962677287B6D2E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de9222bd-8e79-375d-930b-853b22abeb40.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397238
IP address blocks:        204.74.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d4:e0:96:26:77:28:7b:6d:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=cf592fd8-f4d0-47e5-9a77-5dfb2f5229dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:c7:34:83:51:c2:b0:b4:c2:23:06:1f:fb:
                    13:67:83:b2:1a:81:07:de:14:54:68:88:19:e9:4b:
                    8b:ff:ce:d6:c2:ac:aa:8a:15:94:f9:f3:b5:2a:c1:
                    ed:86:be:56:ea:86:08:5c:e7:d9:16:af:9a:9b:d1:
                    3d:f3:da:8d:8f:06:78:b3:0f:5b:95:e5:6d:f1:bc:
                    ae:81:1b:3b:ab:e2:be:3c:ac:bf:92:9a:c7:3c:0d:
                    17:5d:0a:53:0c:a0:4e:0b:1d:57:f9:a9:e6:77:a2:
                    7a:e3:35:a1:b2:81:4a:bf:6a:d6:cc:ae:0e:2a:d4:
                    66:0c:2b:22:ec:05:6a:9d:1a:46:4f:5b:af:68:79:
                    1e:53:0d:9e:09:84:82:ed:e9:0d:e0:0c:0c:70:25:
                    48:35:f2:25:7c:f0:98:7e:8b:f8:6b:02:c2:fa:64:
                    a2:0a:a7:c7:58:a0:4f:6d:05:0b:5c:c0:e7:3a:5e:
                    9c:2f:7f:0a:cc:be:fc:8b:22:3f:31:c5:3e:7a:a2:
                    24:13:c0:80:69:c5:63:0e:4f:24:27:76:b1:0a:2c:
                    63:64:ce:63:5a:70:8d:39:b2:48:61:3d:71:d3:1b:
                    ba:6c:62:63:66:6a:ce:04:7c:25:a5:3b:55:e4:8e:
                    bc:35:aa:ff:41:0d:ef:5e:ea:36:c2:26:f8:f4:8f:
                    33:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:83:1C:FC:AF:5F:0A:24:A3:90:46:0D:C6:F6:DC:0A:A8:29:72:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de9222bd-8e79-375d-930b-853b22abeb40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:2f:a1:0d:a2:a1:1a:86:cb:f1:a8:11:f0:81:01:59:6d:
         77:d1:bc:09:7a:eb:cc:5e:bc:f3:ee:08:98:cc:d9:82:52:8c:
         42:95:39:8f:66:91:a0:49:e0:6c:92:63:ba:d2:fd:14:08:f9:
         ac:34:13:7c:b8:ba:d3:8d:7a:15:a4:2e:cd:0a:88:ba:b4:e8:
         7a:0a:58:52:21:50:5a:20:b9:04:28:67:b1:f1:1f:3b:af:47:
         61:9c:f4:84:92:d9:a1:ab:aa:d7:3b:d6:d0:58:ef:ce:69:95:
         8d:66:48:cc:e1:66:68:ee:12:7b:7c:05:52:8f:67:92:db:f3:
         33:05:e3:5c:7a:59:30:b1:30:bb:c1:80:7e:ad:eb:9a:99:b5:
         54:97:bd:5b:f3:c7:f7:d5:83:25:c1:c4:46:ef:84:ba:23:a3:
         fc:5b:f9:c9:4e:57:f7:3c:06:2e:ee:00:3b:c7:71:88:bc:83:
         71:2f:76:5e:01:68:8b:8b:90:e8:f7:cf:75:b9:93:a9:c1:0f:
         ff:a2:cb:46:ee:17:00:a6:49:77:62:33:1c:78:63:56:a5:d3:
         d7:9a:b4:b3:38:b1:02:a7:4a:21:19:31:c7:1b:89:ed:7f:31:
         3f:b7:c0:b4:4e:cc:89:29:9b:2e:42:c6:e8:ab:93:42:00:f1:
         f2:12:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:50:47 2025 by rpki-client