Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db03fae9-6028-37ce-b5cb-69e74c14ac03.roa
File:                     db03fae9-6028-37ce-b5cb-69e74c14ac03.roa (raw, json)
Hash identifier:          vDZy1HhnNpXJp7gRQ9X7Ims0GRT2oKNAEXugxp8SCJY=
Subject key identifier:   09:B1:AC:F8:99:FF:99:9C:B4:F4:1E:A6:28:B6:E2:91:DD:02:77:4B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0C4E8382A1CBB79584480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db03fae9-6028-37ce-b5cb-69e74c14ac03.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397234
IP address blocks:        204.74.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:c4:e8:38:2a:1c:bb:79:58:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=055183c1-660c-4a7f-b844-6ed99e78dd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:10:33:c3:80:82:db:f1:91:6f:b9:dd:6b:f9:
                    ea:2c:d9:42:36:ba:89:72:5e:94:06:7f:fb:28:d1:
                    b0:de:03:42:74:5c:07:86:94:60:8d:e2:0f:6c:0e:
                    82:ba:a6:5d:ea:92:7d:2d:5a:bb:4c:6f:a7:e3:81:
                    f8:b9:c9:94:5b:e1:34:3e:9d:57:37:2f:4b:29:2b:
                    f6:c0:94:aa:d5:45:bc:17:d9:d5:d9:1b:93:86:87:
                    3c:b4:f5:f0:bc:4b:00:4b:76:55:c8:cd:78:3a:d0:
                    ac:61:36:65:e0:c2:17:3d:21:f3:ed:86:7f:35:fd:
                    33:6a:00:b0:40:94:92:39:49:90:c5:1d:05:f7:4a:
                    53:b9:bf:16:6a:fd:6f:e3:3f:af:f8:f2:82:95:a2:
                    26:4e:81:e7:69:9a:ca:b1:c5:d6:c1:7e:39:2c:ea:
                    99:e9:e7:17:45:c4:7b:26:de:c5:72:34:09:0e:f0:
                    98:a3:ba:32:88:a9:8e:7d:89:76:c2:6a:1f:77:48:
                    5e:ef:08:8e:eb:6b:1a:5c:74:3d:3f:3e:ac:83:f0:
                    53:68:79:66:b4:6a:e2:b4:20:62:7e:4f:a8:a4:c0:
                    54:ad:4b:a8:aa:b2:39:9d:9f:7f:ec:6c:7e:36:6a:
                    06:ca:7b:7e:03:39:62:ad:06:d4:7d:d2:ef:6c:28:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B1:AC:F8:99:FF:99:9C:B4:F4:1E:A6:28:B6:E2:91:DD:02:77:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db03fae9-6028-37ce-b5cb-69e74c14ac03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:72:ef:2a:d0:58:ad:f5:fb:b2:fb:e7:bf:c3:b8:de:fd:39:
         65:bf:aa:ac:67:f6:f1:a8:da:9b:0a:ef:91:e2:3f:d8:51:de:
         b5:0e:34:c8:64:84:f1:6f:28:22:db:1b:cf:13:ed:d7:bb:8f:
         d7:1a:5b:33:0d:bd:52:99:bd:72:60:7f:b6:a4:62:89:48:1c:
         f0:da:65:96:7e:64:3e:b6:7f:8a:76:44:d3:2f:c1:90:db:11:
         0f:59:12:ac:7b:d1:1c:84:66:b0:47:5c:8c:f7:6d:6e:54:77:
         86:a3:4d:61:9b:2f:03:7c:d2:3b:5d:ec:db:84:93:3d:ed:ec:
         0e:a0:4d:3d:ea:01:2b:17:51:dd:88:f9:26:be:9f:87:5d:8e:
         bf:25:f8:c8:36:58:cb:d6:4a:e3:1e:87:04:33:b2:fc:ca:38:
         69:a1:17:0e:53:61:91:dd:ee:63:8c:74:a3:0c:d5:0e:44:57:
         7f:48:89:79:0e:12:03:9d:4f:95:96:c8:e0:f4:e2:52:24:73:
         a0:9c:33:1a:c5:b5:29:52:32:d4:73:38:fd:6c:c5:1d:98:52:
         bf:27:d0:2d:8a:99:3f:99:11:03:ae:fb:bc:51:69:6c:d7:81:
         59:16:24:e9:8a:fe:5a:a5:c0:20:04:5e:b8:a3:46:d1:e8:e0:
         48:b4:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:58 2025 by rpki-client