Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010b0099-f8c6-38db-a10f-00a3df2a49fb.roa
File:                     010b0099-f8c6-38db-a10f-00a3df2a49fb.roa (raw, json)
Hash identifier:          b98CAFZAl6DnCp9uk+4yTlVbfQmSnrbawoL/nan0imA=
Subject key identifier:   81:E4:AA:8E:BA:8D:E5:8C:6F:D0:6B:0E:F1:A6:59:2F:9D:E9:5F:F1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68261BA244A49F88FF279280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010b0099-f8c6-38db-a10f-00a3df2a49fb.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397215
IP address blocks:        204.69.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:1b:a2:44:a4:9f:88:ff:27:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=26abbc4c-b2fa-4c2c-98ec-6169dc05e6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:0f:bd:80:9a:38:be:83:7c:54:7d:d0:95:
                    ed:60:3c:f6:0b:37:dc:be:8b:bf:4c:da:bc:1d:7d:
                    ec:7f:c3:f6:e8:f7:07:64:74:bc:d2:ee:15:c5:30:
                    8e:45:6a:f1:2e:bc:f5:79:97:11:ae:9c:a1:e7:ae:
                    78:0d:17:53:ee:8e:cc:d2:18:90:c4:40:92:5a:8c:
                    c1:86:cc:00:c4:0e:f8:8b:77:18:c4:67:7f:c4:47:
                    c9:4a:be:58:0b:89:e3:4d:87:43:a1:50:3c:8b:2d:
                    96:c9:85:21:ff:f7:d9:5a:5b:48:f0:a7:85:8a:a9:
                    fe:c9:d9:03:f0:0d:3c:a7:a8:e2:ef:c7:26:bd:7f:
                    a9:28:87:1d:92:b6:6a:51:6e:46:8a:f5:99:be:b0:
                    57:5c:74:b5:ed:70:8c:1d:37:9e:2e:fb:f8:48:9a:
                    3e:e1:65:ed:95:64:f9:bc:0c:21:62:58:71:c5:98:
                    10:61:ad:65:3c:b7:0f:40:14:9c:58:e5:2b:ee:e2:
                    cd:e6:a9:8f:cf:ea:bc:1d:e7:4f:37:f7:9e:c4:e7:
                    a1:18:f2:c5:9f:0c:29:0b:92:3a:16:83:d7:84:26:
                    62:d7:f1:fe:b4:66:1a:ac:b2:eb:3d:5d:e6:f5:da:
                    d3:8e:19:3f:5f:fe:ba:de:4c:19:26:0d:0f:1b:47:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E4:AA:8E:BA:8D:E5:8C:6F:D0:6B:0E:F1:A6:59:2F:9D:E9:5F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/010b0099-f8c6-38db-a10f-00a3df2a49fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8a:9a:13:3c:5d:56:65:0c:fd:4d:37:a3:08:7e:0a:4b:7e:
         3b:e6:1c:ad:fc:f2:ad:8a:bc:09:7b:04:09:18:84:3e:97:d7:
         65:ec:6e:10:74:a7:18:e5:42:1f:4a:d8:0e:31:4b:28:6b:eb:
         a9:32:0e:1d:97:c2:8d:04:18:87:84:b0:78:f2:d9:2b:dd:be:
         0a:ef:59:6b:03:79:ac:55:0b:06:2a:1f:32:19:4e:8e:86:f0:
         75:05:b7:a4:89:bb:48:86:96:06:ea:68:06:95:84:85:50:a0:
         e7:11:b8:7e:83:44:8b:93:ee:dd:34:48:bb:83:a8:87:ce:3a:
         87:bc:68:67:44:7b:76:28:2b:15:91:68:ff:cd:e0:ad:c7:5c:
         24:b3:bf:5f:db:0e:f6:4a:6d:4d:8d:34:0b:67:20:fa:e4:b9:
         57:bc:98:b1:19:70:b0:66:9d:71:c5:97:67:08:2e:80:0d:04:
         ad:b5:ff:35:fe:6a:1a:81:b4:e0:b9:1b:e7:ac:37:6e:f5:59:
         bf:e8:f2:c0:61:ab:48:62:41:64:1c:28:f3:67:78:ca:2b:80:
         9e:47:48:51:39:a8:0e:b5:98:53:bd:27:d5:e5:a2:27:31:76:
         47:31:70:50:89:56:58:07:35:31:0b:62:0b:4f:85:80:2d:d2:
         5f:8a:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:14 2025 by rpki-client