Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5646147-e191-3d89-8807-c5e396f7d37e.roa
File:                     b5646147-e191-3d89-8807-c5e396f7d37e.roa (raw, json)
Hash identifier:          skZDh88nUKk3Bvm1idbrutzlau+5InPhQa6AT0HPi7M=
Subject key identifier:   C3:5B:0E:14:D1:B7:66:6A:ED:6F:12:39:64:79:46:66:50:02:B6:CB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A682618A1889FE08542FEF870
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5646147-e191-3d89-8807-c5e396f7d37e.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397227
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:18:a1:88:9f:e0:85:42:fe:f8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d35f8f96-4acd-4150-b8b5-1e5daf352b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:46:49:d1:69:ec:a6:5a:b7:ff:74:d7:8d:
                    68:fd:d6:89:2f:03:d0:2c:52:e3:2d:85:b3:e9:2d:
                    10:4c:be:6e:70:21:77:8a:3c:d6:af:98:aa:0e:24:
                    8d:8d:8a:4b:2d:a3:86:00:68:ce:c7:20:eb:09:83:
                    51:90:bf:43:7f:e2:86:91:50:a2:b3:cd:bf:c1:87:
                    6b:6c:ac:62:1b:0f:4e:71:5a:ef:12:e2:e8:da:82:
                    2d:1c:04:37:af:9d:23:dc:15:95:18:a0:1c:5f:dc:
                    4c:44:7a:ba:e2:5d:55:f3:29:ac:a2:b5:ab:eb:ea:
                    51:93:ff:b8:62:31:a2:03:2a:dd:91:67:7d:6d:f3:
                    55:43:45:6c:72:63:ab:52:79:a9:07:12:ca:21:52:
                    10:9d:fa:d1:ec:57:13:ce:cb:a1:4e:f3:b8:05:8a:
                    a3:f4:ea:5f:1a:83:4a:3c:b8:d0:60:5b:dc:a3:da:
                    66:de:5c:91:b4:24:76:78:6b:42:6c:36:07:4f:88:
                    ac:a7:cb:d7:4f:fc:09:a4:a5:c2:b3:9a:12:51:d3:
                    63:d0:7f:84:dd:66:37:91:5c:40:fe:65:cd:91:2a:
                    2c:08:d5:39:90:c2:1d:c2:1c:e5:f0:2d:e0:c7:3c:
                    c5:96:e6:e0:0d:d6:43:bc:1e:f0:7d:24:c9:24:cd:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:0E:14:D1:B7:66:6A:ED:6F:12:39:64:79:46:66:50:02:B6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5646147-e191-3d89-8807-c5e396f7d37e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:13:63:68:cd:0b:ff:92:f1:04:20:da:d0:c3:85:6d:ec:02:
         cd:ba:d2:26:4e:e2:73:6c:ef:9b:d0:8a:de:d0:b5:db:64:50:
         96:5d:f2:a3:8e:62:d9:6a:d6:a9:e0:00:f6:0f:8b:13:a8:38:
         a0:2a:4b:2b:7a:0c:0c:2c:3f:95:87:21:d6:14:98:07:72:2b:
         83:a1:93:32:a5:a9:98:44:29:cf:7e:98:23:7a:b2:4e:24:1a:
         c7:d4:4c:8d:9a:c1:1d:de:54:82:c4:f5:c1:7f:da:7c:12:21:
         60:41:97:da:c0:b9:b1:8b:a5:2f:c5:0c:db:20:0d:d1:a3:b1:
         d6:03:71:e6:f5:6f:5c:72:d6:0d:9b:7b:63:8d:05:2c:89:12:
         20:e7:71:e5:a8:21:cd:58:a0:b0:58:2f:a7:4c:21:59:74:52:
         80:93:3a:93:dc:0d:65:8e:a7:4c:4d:58:9d:cb:74:75:8f:6c:
         3e:3f:b3:f6:5a:50:96:c4:2a:0b:f1:5b:c9:88:4b:39:58:64:
         00:33:ee:02:4c:40:ba:b4:8d:00:3d:a7:b1:e7:af:f4:5b:fc:
         e5:ca:85:b0:a0:32:c4:67:5c:34:de:d7:18:af:55:f6:65:15:
         24:5b:e4:d2:dd:3e:04:73:b2:1a:ed:94:f2:47:a5:d9:bb:c6:
         09:05:de:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhihiJ/ghUL++HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ZDM1ZjhmOTYtNGFjZC00MTUwLWI4YjUtMWU1ZGFmMzUyYjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpFGSdFp7KZat/90141o/daJLwPQLFLjLYWz
6S0QTL5ucCF3ijzWr5iqDiSNjYpLLaOGAGjOxyDrCYNRkL9Df+KGkVCis82/wYdr
bKxiGw9OcVrvEuLo2oItHAQ3r50j3BWVGKAcX9xMRHq64l1V8ymsorWr6+pRk/+4
YjGiAyrdkWd9bfNVQ0VscmOrUnmpBxLKIVIQnfrR7FcTzsuhTvO4BYqj9OpfGoNK
PLjQYFvco9pm3lyRtCR2eGtCbDYHT4isp8vXT/wJpKXCs5oSUdNj0H+E3WY3kVxA
/mXNkSosCNU5kMIdwhzl8C3gxzzFlubgDdZDvB7wfSTJJM243wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNbDhTRt2Zq7W8SOWR5RmZQArbLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjU2NDYxNDctZTE5MS0z
ZDg5LTg4MDctYzVlMzk2ZjdkMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcTY2jNC/+S8QQg2tDDhW3sAs260iZO4nNs75vQit7QtdtkUJZd8qOO
Ytlq1qngAPYPixOoOKAqSyt6DAwsP5WHIdYUmAdyK4OhkzKlqZhEKc9+mCN6sk4k
GsfUTI2awR3eVILE9cF/2nwSIWBBl9rAubGLpS/FDNsgDdGjsdYDceb1b1xy1g2b
e2ONBSyJEiDnceWoIc1YoLBYL6dMIVl0UoCTOpPcDWWOp0xNWJ3LdHWPbD4/s/Za
UJbEKgvxW8mISzlYZAAz7gJMQLq0jQA9p7Hnr/Rb/OXKhbCgMsRnXDTe1xivVfZl
FSRb5NLdPgRzshrtlPJHpdm7xgkF3to=
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:36 2025 by rpki-client