Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0d8dc8ee-8eb9-3535-9ad9-1ee1a7c7d226.roa
File:                     0d8dc8ee-8eb9-3535-9ad9-1ee1a7c7d226.roa (raw, json)
Hash identifier:          9QW+Wpljrnz1UShE5X6+uBbvRwDbpoSAs7UjsYIowC4=
Subject key identifier:   58:EA:8E:80:0E:A8:29:8D:E1:55:43:9D:63:08:B9:A4:46:E3:1B:0E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68263802F49E2EC942A4A580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0d8dc8ee-8eb9-3535-9ad9-1ee1a7c7d226.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397224
IP address blocks:        204.74.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:38:02:f4:9e:2e:c9:42:a4:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d9134d59-fe6d-4f9c-afae-e4ca899aea82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bf:b1:f6:d2:7e:b5:ba:6b:49:a9:3b:a0:c3:
                    b7:e0:71:f1:f1:e0:10:51:28:65:39:2f:34:08:ff:
                    b7:ec:f8:c7:c5:3c:5b:a2:bc:52:50:93:6c:5c:08:
                    12:93:80:f7:9e:1d:22:f3:7f:18:2c:e5:b9:c4:31:
                    d7:eb:a2:9d:b6:b4:7f:88:31:5c:a7:b2:4d:b5:db:
                    26:82:a9:61:11:46:4a:67:fb:b1:a5:f4:12:4f:cf:
                    2a:2c:43:cf:79:ac:92:8f:7b:fe:da:2a:8b:a2:29:
                    8e:5e:9a:87:4d:96:5e:b4:52:ca:d9:ac:f6:3f:a7:
                    dd:43:8f:1f:54:24:40:eb:92:f4:1a:23:26:0e:d8:
                    c6:d4:bf:3c:e7:30:a8:83:80:c4:92:40:a0:d5:0c:
                    70:72:e7:aa:d1:da:5a:15:bd:12:94:b0:bf:00:c0:
                    89:1c:e3:7b:a7:b5:65:79:2a:14:56:5e:8e:54:dd:
                    17:2b:c1:49:74:dd:5a:35:8a:07:e8:0a:da:76:c2:
                    48:f7:33:3f:90:09:a0:c3:70:7a:af:99:9c:9e:a3:
                    83:df:35:f1:8e:a2:63:d6:73:8f:b9:5c:c7:19:6b:
                    4b:ab:8e:ee:69:b2:2f:35:fe:17:14:a3:b4:a3:01:
                    53:5c:e0:5e:9e:7b:1d:a5:35:1d:92:c3:d3:ae:cd:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:8E:80:0E:A8:29:8D:E1:55:43:9D:63:08:B9:A4:46:E3:1B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0d8dc8ee-8eb9-3535-9ad9-1ee1a7c7d226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9d:e4:b8:3b:31:3d:d8:3a:0e:dc:bf:e8:76:23:9d:a0:20:
         9b:dd:5b:b0:86:71:59:af:92:63:fc:06:84:f5:ef:38:84:44:
         a0:15:0d:b3:42:12:e9:9f:21:ec:a5:15:83:2e:6f:17:5a:05:
         b5:e0:71:ed:a7:c3:f9:b7:d7:9a:40:d2:8e:14:be:c6:c4:2a:
         6c:00:f3:c8:18:4e:52:4f:6e:47:95:d5:50:77:eb:25:19:32:
         3e:93:ed:49:65:8f:2d:8f:58:ad:0c:e4:1a:d4:41:5d:90:13:
         03:1e:c9:3b:59:79:46:cd:f2:34:53:e5:f7:5c:49:02:bd:68:
         8e:2e:36:ed:9f:c0:f9:3b:9a:6a:36:d4:c2:c9:4f:1d:16:d3:
         2f:55:3e:e9:c4:27:1d:94:ac:7a:25:10:e8:37:32:28:1b:24:
         f0:45:4c:17:fc:66:ff:3a:f1:3e:ed:9a:c3:9b:e5:a9:ef:4c:
         3e:44:5d:a2:e6:b4:5b:19:b0:87:4c:b2:aa:6c:1e:df:f9:d7:
         8f:49:36:f1:23:43:fd:a0:17:6c:83:98:2a:de:10:ef:92:7d:
         f3:b6:3d:e0:e7:fe:57:ba:f2:6c:37:32:06:a4:21:0f:20:0f:
         1f:51:d0:3c:d0:38:a1:80:a9:37:10:49:17:77:b3:b1:20:16:
         fc:07:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:06:54 2025 by rpki-client