Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9ca4a53-5b72-3d5b-a667-f24aa5ece294.roa
File:                     f9ca4a53-5b72-3d5b-a667-f24aa5ece294.roa (raw, json)
Hash identifier:          ACt0Y4lykc++e6JfXd5ljm3LGfAqrajN6FdlQcDCu+8=
Subject key identifier:   13:7B:82:5E:26:B2:18:57:11:AC:12:E7:80:27:34:67:93:14:11:17
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C3701DF339307E1613346C6
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9ca4a53-5b72-3d5b-a667-f24aa5ece294.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397238
IP address blocks:        204.74.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:01:df:33:93:07:e1:61:33:46:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=2ed5b2ff-26e6-4b3c-8ef8-a28e2e0c2fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:ce:01:cd:cf:bb:7b:00:0b:c2:3e:b0:78:
                    c4:90:8b:50:57:d5:6a:9b:32:8a:b2:1c:a4:a4:b9:
                    97:9a:07:70:dc:35:b0:86:52:4e:ef:12:28:b7:7d:
                    ef:49:b6:dc:fd:06:6f:f5:48:7e:e8:10:fe:55:dd:
                    91:c9:20:1c:3f:db:2b:a1:8d:34:d7:a2:da:5e:c0:
                    72:e8:16:d7:85:44:4a:56:5a:e6:74:62:f4:64:fe:
                    61:e5:19:4b:b9:80:74:75:a5:ca:27:c6:20:d7:e7:
                    f3:ac:5c:d4:06:bf:a1:89:82:86:19:71:2a:7a:7a:
                    14:81:2f:42:29:9b:b7:ab:0c:c7:a9:2e:41:5b:0f:
                    d1:b1:fb:52:68:54:de:77:60:c4:df:2f:6f:ab:42:
                    b1:24:82:de:7c:cc:6e:b2:fc:61:54:ac:b6:d7:64:
                    a4:b0:42:56:df:cc:f8:fe:65:eb:ca:02:d8:39:be:
                    c4:b9:e3:0f:91:20:1a:cb:d5:98:b5:94:33:46:a6:
                    94:3e:bc:d2:a6:44:63:6a:7d:e0:75:96:02:18:9a:
                    6c:85:b7:86:41:fa:ca:ea:05:15:3c:02:d2:e0:dc:
                    0e:ee:03:2e:d8:4f:d4:84:8e:f2:c5:15:8d:8e:ab:
                    b6:e3:cd:93:42:60:fb:5c:08:5d:bb:b3:ee:89:2f:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:82:5E:26:B2:18:57:11:AC:12:E7:80:27:34:67:93:14:11:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9ca4a53-5b72-3d5b-a667-f24aa5ece294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:58:53:ef:c4:30:fc:82:62:64:bf:b5:0e:6e:dd:b2:ff:
         97:c8:65:e3:41:53:e3:f4:84:d0:c2:a6:c9:d2:2c:b8:db:5e:
         f5:38:b2:fe:da:e0:ee:66:4d:20:bc:6a:1b:0c:2d:b4:76:6f:
         a9:06:6f:11:97:bc:c1:52:74:56:6d:4b:88:7d:5e:99:ab:e9:
         cb:ea:b4:33:ad:a2:be:5e:1b:55:8f:46:e6:42:32:17:80:8a:
         fa:d0:e6:37:bf:1a:40:67:95:8a:a4:b8:2c:b3:47:c8:07:42:
         1f:df:95:72:74:f5:5e:56:af:b8:3e:b1:6b:6c:bb:d6:22:86:
         24:c4:76:22:39:90:25:ec:b9:73:c4:12:85:14:52:c3:06:d2:
         c6:b7:cd:86:53:50:5b:32:c8:15:14:ac:a7:73:41:c6:6f:7b:
         95:ba:ea:fd:6a:fe:18:7d:d7:38:6c:1a:28:55:8c:aa:0a:67:
         73:4e:13:92:3c:db:00:df:6d:4a:fc:a0:1b:7f:5c:8a:3d:c1:
         85:75:a7:9b:fa:04:b2:5b:45:b3:d9:d3:69:19:96:6d:c3:bd:
         11:ae:04:38:85:4a:03:3a:6f:85:f2:b0:ec:19:e9:ed:6e:b2:
         d2:6e:a1:8a:8b:6a:45:bc:b6:a5:b3:da:ce:79:f5:ac:d4:c0:
         bd:66:55:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwHfM5MH4WEzRsYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MmVkNWIyZmYtMjZlNi00YjNjLThlZjgtYTI4ZTJlMGMyZmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD3OAc3Pu3sAC8I+sHjEkItQV9VqmzKKshyk
pLmXmgdw3DWwhlJO7xIot33vSbbc/QZv9Uh+6BD+Vd2RySAcP9sroY0016LaXsBy
6BbXhURKVlrmdGL0ZP5h5RlLuYB0daXKJ8Yg1+fzrFzUBr+hiYKGGXEqenoUgS9C
KZu3qwzHqS5BWw/RsftSaFTed2DE3y9vq0KxJILefMxusvxhVKy212SksEJW38z4
/mXrygLYOb7EueMPkSAay9WYtZQzRqaUPrzSpkRjan3gdZYCGJpshbeGQfrK6gUV
PALS4NwO7gMu2E/UhI7yxRWNjqu2482TQmD7XAhdu7PuiS8IHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBN7gl4mshhXEawS54AnNGeTFBEXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjljYTRhNTMtNWI3Mi0z
ZDViLWE2NjctZjI0YWE1ZWNlMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIS4WFPvxDD8gmJkv7UObt2y/5fIZeNBU+P0hNDCpsnSLLjbXvU4sv7a
4O5mTSC8ahsMLbR2b6kGbxGXvMFSdFZtS4h9Xpmr6cvqtDOtor5eG1WPRuZCMheA
ivrQ5je/GkBnlYqkuCyzR8gHQh/flXJ09V5Wr7g+sWtsu9YihiTEdiI5kCXsuXPE
EoUUUsMG0sa3zYZTUFsyyBUUrKdzQcZve5W66v1q/hh91zhsGihVjKoKZ3NOE5I8
2wDfbUr8oBt/XIo9wYV1p5v6BLJbRbPZ02kZlm3DvRGuBDiFSgM6b4XysOwZ6e1u
stJuoYqLakW8tqWz2s559azUwL1mVdY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:43 2025 by rpki-client