Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fce5dff6-8bb2-3f40-8388-0105014f9b41.roa
File:                     fce5dff6-8bb2-3f40-8388-0105014f9b41.roa (raw, json)
Hash identifier:          J4Et6ZzlTIfrsg5bqnZNc0vm66z/LyJh1NZQHT1WxV0=
Subject key identifier:   F7:B0:D1:47:EF:EB:3E:D8:10:18:2C:FC:FF:C9:87:E7:DA:E4:C0:6F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A6826212FA69D3969F3F6CE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fce5dff6-8bb2-3f40-8388-0105014f9b41.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397224
IP address blocks:        204.74.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:21:2f:a6:9d:39:69:f3:f6:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=f2dcb285-e77b-444d-bff0-8855303c8ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:62:37:69:32:33:5e:93:d8:de:1a:2f:5b:
                    b4:07:fd:dd:c5:a3:82:50:74:0f:dd:b1:25:e7:49:
                    bb:1e:3f:bb:ef:b3:e0:2b:dc:53:04:c3:08:30:1e:
                    67:7b:60:e6:77:17:02:3c:98:f5:5e:59:1b:cc:26:
                    24:21:6d:95:f9:aa:9f:ae:3a:4c:27:7c:15:b6:56:
                    52:2f:4e:9e:97:31:6e:95:0f:c9:91:dd:99:f0:ea:
                    35:6d:f0:e1:49:1b:fb:40:3a:cd:23:7b:45:53:1e:
                    1d:39:2f:dc:83:c8:49:e8:9e:83:b6:24:e4:42:ca:
                    29:e7:86:67:42:d7:11:f0:bf:97:6a:b2:47:14:05:
                    a8:42:d6:f2:36:17:27:14:17:10:a7:2b:f7:71:94:
                    d7:8a:39:24:32:c1:b9:b6:f9:7e:42:db:8e:6e:56:
                    69:9f:d4:d1:3f:cb:53:ca:74:66:73:67:6f:1a:39:
                    f9:c0:f6:38:17:f3:93:01:fb:ff:ba:f8:22:28:c2:
                    06:5b:20:09:49:b1:21:41:c1:ec:37:e2:0b:79:db:
                    6c:84:4a:ec:4e:c0:24:37:e2:80:db:a8:d1:5c:c4:
                    ce:14:a4:88:48:57:83:c6:46:71:4c:e5:63:34:25:
                    25:44:e1:e2:67:9d:ec:95:7e:18:32:11:1e:e6:30:
                    89:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B0:D1:47:EF:EB:3E:D8:10:18:2C:FC:FF:C9:87:E7:DA:E4:C0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fce5dff6-8bb2-3f40-8388-0105014f9b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:18:aa:d7:8f:1b:6d:7d:35:95:fd:6c:cb:3b:a4:ad:8f:31:
         bc:9c:33:4e:83:ea:aa:4e:a8:e5:ed:74:12:12:65:d6:9e:39:
         1c:74:ff:36:4c:94:92:6e:cd:8f:3d:aa:f9:91:58:1c:51:55:
         5d:e6:8f:74:84:38:58:b4:d9:64:be:76:7f:fc:f9:43:6a:f1:
         46:8e:a2:ed:de:99:82:82:20:db:88:b2:e9:79:c7:a1:58:7a:
         ba:f1:dd:3b:43:89:61:f0:cd:ad:46:64:2a:0f:72:4e:11:88:
         54:50:2c:55:b1:8d:52:5a:10:ed:73:9e:2a:34:ab:c5:09:74:
         41:16:ac:fc:44:60:16:ad:60:10:93:98:96:49:b4:d6:91:73:
         c4:ed:8d:48:37:12:ff:c0:fd:6a:84:80:15:5a:bb:dc:bf:00:
         65:24:e3:53:67:56:22:22:f0:09:a7:1c:2c:f3:af:ec:47:d5:
         e1:78:81:17:d9:eb:15:b8:4a:c5:bc:e3:52:de:c8:e3:44:ed:
         c9:4b:3d:e0:a4:83:45:a2:d8:87:66:46:7e:94:c7:c8:65:73:
         5f:4c:74:95:ce:6c:6d:f9:7c:f6:9e:ef:a0:a7:66:16:d8:53:
         f5:fc:04:34:a7:1a:36:f4:28:be:b8:63:7f:04:da:3c:60:c2:
         b1:e7:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:07:26 2025 by rpki-client