Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93b34ed2-d695-3b2e-9b6d-0fd543cd22fb.roa
File:                     93b34ed2-d695-3b2e-9b6d-0fd543cd22fb.roa (raw, json)
Hash identifier:          T2+AGpRQp+dR1yl8Mm4BS68Ot4Ymdiu6Tf7VGA7GZjE=
Subject key identifier:   35:9B:A6:87:AE:A4:CE:FF:4C:C0:62:45:74:62:5A:3B:D9:9C:6F:47
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A6826221A5B68BD7E767E7AC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93b34ed2-d695-3b2e-9b6d-0fd543cd22fb.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397241
IP address blocks:        204.74.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:22:1a:5b:68:bd:7e:76:7e:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=029e61c4-b293-46b5-95f2-c49a95c08f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:50:40:97:56:3a:76:26:2a:e3:cd:df:4f:
                    00:bb:2f:d3:2b:7f:51:b9:c1:b9:ca:61:cc:4c:a7:
                    68:42:c3:55:61:b5:93:58:ff:f8:3e:89:d3:88:74:
                    05:a8:d5:28:bf:40:d2:b0:a7:ca:ad:45:40:a3:42:
                    9d:48:e4:17:d7:19:5f:ec:ac:57:57:be:8d:c3:0a:
                    a3:e6:66:25:e4:73:c4:e8:b1:70:39:0e:c5:4b:48:
                    33:0b:11:8b:f2:e7:32:17:71:84:88:35:59:aa:77:
                    78:34:23:56:5e:49:85:4e:5d:40:c1:6d:60:69:fe:
                    9f:fb:ca:0e:2c:4f:9b:50:61:65:36:78:a2:b0:6b:
                    b2:64:94:93:81:f8:19:fe:18:5b:7c:dc:d9:fd:08:
                    50:8a:f4:55:9c:32:de:a6:9c:2b:b1:1f:cd:2d:3c:
                    8b:38:e6:47:cc:73:ee:14:48:97:eb:34:08:47:ee:
                    29:c0:40:1b:f6:e6:f8:49:91:b4:f7:43:ec:ce:6f:
                    a5:aa:06:2a:bc:ad:51:ee:3e:81:1c:6e:57:6d:29:
                    21:76:aa:b0:84:20:01:c4:dd:47:7e:5d:71:7f:d8:
                    f2:f7:8f:b5:f3:8a:17:a6:bf:c6:69:2d:2c:02:cc:
                    57:f9:6b:c7:e1:31:11:31:b9:12:91:f1:32:52:a4:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9B:A6:87:AE:A4:CE:FF:4C:C0:62:45:74:62:5A:3B:D9:9C:6F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/93b34ed2-d695-3b2e-9b6d-0fd543cd22fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3d:e2:0f:a8:31:cc:da:8f:1e:12:64:62:0d:8f:8e:a1:fd:
         e2:bb:a0:e1:67:ce:fc:22:10:85:8d:61:78:6e:e4:5d:38:b6:
         7a:06:a1:3a:7c:24:52:dd:50:3d:9b:8c:8c:3e:21:8d:46:6a:
         30:e5:ec:90:e0:1d:d4:98:43:bd:0d:ee:01:a7:4d:cb:45:8c:
         34:04:66:b3:2b:3e:80:c3:e0:a7:07:6b:91:53:1d:fb:56:d3:
         28:56:fe:2c:73:c2:a2:69:bb:12:89:ff:e8:6c:b6:47:eb:46:
         27:83:09:a7:79:25:01:ea:b1:07:de:24:3d:b7:4f:de:c1:f9:
         93:e5:01:41:dd:38:c4:58:31:46:18:aa:9e:96:f2:2a:80:61:
         ae:3b:e4:c2:4f:50:9f:dd:af:c9:6f:f4:96:c9:ec:58:6c:ac:
         99:35:ea:f2:2a:59:87:22:91:15:ad:b4:b0:1c:e4:26:1d:b0:
         77:19:52:d4:0a:98:90:2c:f0:4f:93:2a:da:ec:37:2a:80:7a:
         58:82:75:f8:44:85:96:7d:18:bd:f2:aa:1b:83:e7:6c:ca:86:
         06:35:ff:c4:87:50:22:9d:1b:75:68:d0:b3:88:94:91:ee:f1:
         a3:94:1b:db:12:ac:84:c5:bb:ca:52:cb:fa:3f:cc:b8:7e:89:
         6d:52:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:57 2025 by rpki-client