Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df95919-da70-3e70-bd1b-b6fc3619e127.roa
File:                     3df95919-da70-3e70-bd1b-b6fc3619e127.roa (raw, json)
Hash identifier:          1/C8Lugj46RHAzCDmEzzOMgZTqEZQGN1r29tGvh+46o=
Subject key identifier:   AE:B3:25:C4:2F:26:B6:32:07:19:92:E6:C9:36:77:9D:AA:9F:DE:F9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68263827CE1BEFB4DE12BB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df95919-da70-3e70-bd1b-b6fc3619e127.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397227
IP address blocks:        204.74.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:38:27:ce:1b:ef:b4:de:12:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=1ee1cf7e-86ad-4f1e-9023-7b7044b49647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:5e:2e:26:f5:39:eb:72:09:6e:4f:bf:56:
                    bd:ae:c9:e0:ed:8b:0f:1e:a5:45:e2:b4:0e:d3:cc:
                    00:ff:42:4e:49:ae:b2:24:80:1e:aa:75:27:e8:64:
                    c6:44:4f:1a:47:ec:3e:9d:69:f6:c6:55:ef:54:3c:
                    a4:26:51:27:f2:5e:d1:cb:51:ba:17:57:60:a3:fb:
                    68:7b:18:98:86:0e:43:4d:7b:d9:9e:4c:4c:c3:c9:
                    f7:45:63:b6:7c:6f:5e:31:92:36:d1:fe:ee:e4:7c:
                    a7:db:34:76:1a:7f:e6:34:06:a6:d2:0b:e7:97:07:
                    d1:68:4c:58:89:1e:ad:7b:45:14:c3:43:2a:00:2c:
                    ae:1e:c0:a2:73:09:e6:67:20:84:9f:a7:c2:70:c1:
                    52:4b:0f:09:5f:bc:8f:00:d8:d5:7c:a5:61:1f:e4:
                    8f:fc:15:d8:5f:a3:56:05:fa:44:9c:ea:4f:8a:ab:
                    a5:e4:a2:cf:d5:c1:c1:91:fe:c5:1e:b0:ec:89:4d:
                    0e:a9:ed:6d:28:ba:4f:10:e8:fc:5e:72:49:ed:f8:
                    40:b7:2f:74:0e:8e:5b:62:b4:5b:67:f6:45:b8:8b:
                    c4:aa:da:bd:15:08:76:5d:eb:c9:69:34:d1:a1:bb:
                    30:60:e3:15:c1:33:c7:40:b9:e6:aa:7f:49:eb:46:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B3:25:C4:2F:26:B6:32:07:19:92:E6:C9:36:77:9D:AA:9F:DE:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df95919-da70-3e70-bd1b-b6fc3619e127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:6e:92:b9:14:3a:48:d2:c7:5d:3a:de:62:25:6e:2f:91:
         f5:7b:4a:25:12:0b:ca:34:24:de:e7:fa:7d:d9:a9:b2:36:e8:
         b7:9d:f6:3e:ec:b8:20:a7:7b:ee:95:82:f6:53:c7:1c:81:e8:
         d4:36:84:50:28:6e:bd:28:e5:32:4b:72:9d:03:8a:2c:05:6f:
         07:3d:b4:70:98:6a:5d:1d:3e:27:ed:21:64:c8:a5:60:64:5a:
         31:c2:d1:a5:2d:1b:22:6f:99:11:21:30:ce:69:9c:f8:46:2d:
         f8:90:75:26:10:a6:e4:64:4f:e1:a9:d0:24:a9:a5:be:d5:8d:
         d8:9d:a7:93:3b:44:41:12:c2:60:ad:05:cf:9e:90:4c:50:d9:
         3e:96:22:5a:0b:52:b1:cc:f4:a5:86:96:ad:d1:7b:b8:2f:a3:
         ac:81:70:d1:a3:2c:5f:c4:1b:68:c1:f6:2e:13:25:84:22:83:
         de:d2:79:18:b5:07:86:1b:12:e8:02:58:ff:a9:53:c5:93:8f:
         b8:43:fb:e0:49:a3:86:48:c7:08:4e:78:40:33:35:85:87:df:
         ad:63:4f:a7:03:9e:b9:9b:56:94:65:fb:f7:71:d1:ac:3c:36:
         e6:30:cb:49:7d:d9:33:09:53:8a:b1:bf:8b:f7:7b:b9:48:c0:
         0a:82:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:03:02 2025 by rpki-client