Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01c2f4cc-8247-3c75-ac46-58f035945b0c.roa
File:                     01c2f4cc-8247-3c75-ac46-58f035945b0c.roa (raw, json)
Hash identifier:          4ZgpsOo/kC+d3jRAbo58XzEiabGVCluN8gvbIS44hrY=
Subject key identifier:   9E:A5:81:C8:6C:E6:70:F3:85:36:C0:DA:51:FD:4B:51:68:D8:1D:A2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68262B0758FED6E99A3CE800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01c2f4cc-8247-3c75-ac46-58f035945b0c.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397215
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:2b:07:58:fe:d6:e9:9a:3c:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=8215f2e0-9391-417a-bab5-07c6d36c10c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:b8:a4:b2:e4:84:7d:2f:7e:09:f6:d3:c9:
                    22:c1:78:02:43:c8:de:ea:e6:35:3b:03:e9:45:b8:
                    be:78:17:85:c7:82:af:b1:c9:e3:5c:c1:d1:36:e3:
                    07:26:3d:b0:8f:2e:2f:07:b9:30:9c:fb:5e:d0:2e:
                    7b:f8:95:27:91:2d:bf:e6:68:cb:4e:e3:9d:1c:6c:
                    71:1b:20:8b:e1:31:c0:26:14:af:27:56:f6:89:d9:
                    fe:c2:a7:65:92:e1:be:d4:e1:21:fe:2b:09:09:61:
                    27:47:41:6d:fc:1f:72:80:1b:c7:f2:74:a0:b1:b8:
                    80:8f:51:fa:3c:31:fa:02:bd:12:05:ce:80:0a:58:
                    04:f9:3c:5b:4f:45:4f:e7:25:d0:75:78:70:51:d8:
                    4a:9e:3e:b5:26:c1:1a:17:06:52:9c:fe:7f:51:a2:
                    6a:31:8d:cf:b7:d5:6c:d6:a9:30:4d:64:83:73:3a:
                    0a:ac:c7:44:47:6a:dc:4d:76:79:c4:2a:30:13:c6:
                    9e:52:a3:a6:c1:5a:87:4f:66:d0:b5:18:55:c2:82:
                    fb:2c:2a:6d:30:00:45:35:3c:07:76:10:b6:c8:45:
                    64:fe:4b:41:03:25:32:f9:34:a7:b7:e4:be:de:d6:
                    95:13:84:e2:21:cc:65:25:2b:72:10:21:2e:79:ef:
                    fe:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A5:81:C8:6C:E6:70:F3:85:36:C0:DA:51:FD:4B:51:68:D8:1D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/01c2f4cc-8247-3c75-ac46-58f035945b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:ad:cb:d7:9c:ee:dd:7a:57:86:96:b9:1b:9a:fb:63:d9:
         c6:68:30:d0:cb:9a:c7:45:49:ac:17:d8:ca:6f:17:85:78:e2:
         1b:ba:8b:d6:26:72:55:b2:6a:b4:f5:20:43:ee:52:f5:7c:2a:
         68:b9:d8:e9:32:b6:09:1c:fd:52:81:4c:1c:14:fd:93:a8:65:
         74:b7:df:c9:ed:f4:28:04:d3:33:d3:1e:8f:49:6c:73:c0:52:
         c3:f5:d1:ca:3c:4a:00:15:32:f3:10:96:ba:c3:f3:29:e4:c5:
         0e:27:20:a3:23:80:39:a4:de:14:7a:30:5f:30:a0:59:9e:20:
         65:e3:b2:a4:29:88:23:e3:0f:59:f8:60:25:d5:ef:59:b1:63:
         ef:a7:64:62:9f:da:f5:e3:61:0e:a0:e0:a2:db:6b:18:6d:a7:
         5e:ff:53:7e:2e:2e:08:d1:29:42:13:dd:a4:bd:f9:de:ff:b2:
         10:77:7d:86:5c:30:0b:a1:90:7a:b5:02:2d:9c:49:1f:1a:fb:
         9d:d3:3f:8f:4f:76:80:23:71:e7:bd:a3:0a:00:63:67:f9:46:
         54:72:1f:1c:b1:13:3f:96:5d:c1:be:5e:7a:43:a3:1f:3d:98:
         d9:bc:21:98:41:12:20:a3:71:90:8f:5c:6a:26:0b:ac:03:5f:
         5c:62:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:08:40 2025 by rpki-client