Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f73eab1-9ab5-37c8-83b2-9506a1957323.roa
File:                     4f73eab1-9ab5-37c8-83b2-9506a1957323.roa (raw, json)
Hash identifier:          yYHgxatdiE1BerZYqGLHPRu10zqANYztYsOrVZ4xITI=
Subject key identifier:   6A:D5:3E:B9:38:2C:CE:C0:89:A9:D9:EF:6E:91:01:98:A6:F5:C5:95
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68261CDF5D1185C9B0B7B100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f73eab1-9ab5-37c8-83b2-9506a1957323.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397238
IP address blocks:        204.69.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:1c:df:5d:11:85:c9:b0:b7:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=68c43320-0d30-464f-827a-590019bcae75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:88:e4:a3:c0:e2:80:a2:85:8f:58:f8:a1:
                    f6:20:0f:1c:1d:2d:7e:08:b7:29:34:f5:ee:e9:75:
                    f4:de:11:6d:f8:38:e2:c2:cf:38:3e:31:09:52:3b:
                    b3:ca:68:99:39:5d:51:18:be:9b:3a:e0:79:50:74:
                    56:79:77:e8:86:de:71:27:c0:46:28:3a:52:06:12:
                    f6:ca:8d:35:f1:87:a3:59:6c:b2:6e:0c:fd:ed:73:
                    ca:ea:9e:50:14:ef:49:ba:d8:07:64:e2:fb:4b:dd:
                    10:97:db:a9:10:d1:b3:54:11:d7:b1:3f:4f:ce:b8:
                    e7:39:1e:cf:3a:c9:c3:98:54:fb:f0:5a:95:96:45:
                    af:5e:ef:da:fd:12:c5:9c:0f:53:9e:c2:73:27:fe:
                    25:e5:2d:45:57:74:c1:88:1f:6c:44:47:38:e2:73:
                    11:ae:a6:64:1f:62:de:15:10:0e:3f:21:c4:df:1e:
                    dc:7d:3a:2a:d3:56:0b:72:55:e8:01:f7:06:33:6f:
                    6e:5a:12:07:97:51:4e:61:8b:d2:f8:cc:d9:6d:6c:
                    c8:6d:0c:cf:bf:87:ea:6a:3e:ba:f9:2a:25:d6:31:
                    de:8b:61:b3:93:5b:1a:5b:40:fd:05:07:fa:f7:fe:
                    da:96:8f:ba:7c:33:67:60:a8:34:2a:16:8c:86:e3:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D5:3E:B9:38:2C:CE:C0:89:A9:D9:EF:6E:91:01:98:A6:F5:C5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4f73eab1-9ab5-37c8-83b2-9506a1957323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:9e:7f:40:fd:95:20:33:6f:10:70:78:0f:35:19:44:34:
         1b:57:70:20:d8:36:4d:8f:9c:23:0d:9e:a0:23:43:d2:0f:90:
         16:46:7d:1c:b1:00:35:bf:a6:88:11:6e:47:26:0a:53:50:87:
         49:7d:fb:10:d7:21:63:ed:70:17:86:89:97:fc:9c:b1:59:90:
         9a:72:3f:c9:df:d5:8d:22:1f:95:8d:05:e8:76:48:bd:21:bf:
         c6:39:75:21:9e:ac:53:ee:fb:63:2d:09:f1:36:91:8c:94:08:
         26:9b:80:be:8b:0e:5a:cf:8d:76:7c:af:ad:68:75:bc:42:f9:
         30:e4:26:5a:63:c4:bf:e1:af:12:f0:0a:d4:39:57:2f:6b:84:
         e9:47:3a:ca:3d:d9:5d:0a:ef:ef:e9:fe:56:7c:a2:74:83:71:
         c6:3d:5b:0b:bb:23:62:1b:48:9a:19:8e:2b:e8:2c:5d:63:43:
         e2:4d:38:c6:a6:2f:30:fe:2f:af:d0:61:d2:02:b1:24:cc:f9:
         58:8e:fa:17:0c:2b:c9:96:a1:fd:a2:2a:c1:3b:37:bf:29:be:
         ca:11:36:63:ee:52:15:8c:f3:65:64:96:1c:f2:a5:35:1e:80:
         ed:ba:63:2b:2a:3a:00:e4:66:dc:97:13:6f:95:3f:e7:e4:aa:
         45:d3:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:45 2025 by rpki-client