Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/042e11b6-ab72-3241-afae-568e65211eb4.roa
File:                     042e11b6-ab72-3241-afae-568e65211eb4.roa (raw, json)
Hash identifier:          j5ytjf8h9CU3bWZFQwPuk0ldsKPBhUne/ryVcg91oU0=
Subject key identifier:   85:76:76:9A:CC:B4:60:CB:CA:A3:C5:F4:29:00:1B:CE:7E:1B:B3:66
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C36FFA945B9B79A2D4E8640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/042e11b6-ab72-3241-afae-568e65211eb4.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397234
IP address blocks:        204.74.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ff:a9:45:b9:b7:9a:2d:4e:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=ffa2a099-9a96-430f-8924-6662e51884f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:25:f5:84:36:85:7c:f0:ec:ce:80:6e:75:
                    b9:c0:42:ca:bc:3d:82:d1:89:41:93:8c:79:d0:c3:
                    ba:cf:3b:56:ee:c8:e2:f1:c7:a2:8e:68:a4:fa:d6:
                    be:bc:ee:82:2e:7e:e2:49:34:4c:b7:5b:e2:84:21:
                    b0:89:c7:e4:1c:bf:c1:88:f2:26:39:02:ed:26:42:
                    8b:57:a2:38:fb:ee:c4:84:2a:69:c7:48:41:09:be:
                    eb:41:17:b6:62:75:af:92:5b:00:8c:0b:92:0e:66:
                    cc:ab:27:1f:25:71:75:36:ad:69:59:7b:af:aa:2b:
                    b3:89:57:03:be:0a:f3:97:29:8d:7f:9c:45:e0:3b:
                    0f:ac:59:b7:a4:20:96:49:cb:a8:31:cd:06:53:fb:
                    69:45:72:9e:73:73:de:13:83:c7:81:f1:b3:e5:f2:
                    41:48:42:a9:bb:3e:43:85:0c:9f:c5:c6:3a:ca:d3:
                    21:65:f2:66:d9:33:d8:53:1a:57:29:fc:fd:50:c9:
                    a2:ad:91:91:d5:dc:d0:5f:93:41:83:22:49:e2:e5:
                    64:4c:ca:49:f4:a3:87:d7:77:ab:7c:aa:8f:42:b7:
                    35:19:d6:52:1e:ac:1f:52:57:bd:e1:69:d8:83:c7:
                    a1:45:5a:11:b1:43:3e:16:48:64:fc:bf:c7:83:15:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:76:76:9A:CC:B4:60:CB:CA:A3:C5:F4:29:00:1B:CE:7E:1B:B3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/042e11b6-ab72-3241-afae-568e65211eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e1:7e:50:94:32:34:f5:77:77:8e:83:4a:d7:74:e0:c5:19:
         e2:da:b4:ba:fd:0f:bb:08:b8:30:66:d8:8b:a2:41:32:cf:fa:
         f0:8f:08:f1:33:c7:ad:bc:f2:81:87:f2:04:c7:94:db:5f:0b:
         dc:9f:0e:a2:03:f7:fb:9d:bb:6e:cf:a3:b1:6a:82:ce:c3:f6:
         2f:aa:50:4d:e8:15:c0:4e:c8:d0:88:46:17:3f:c1:2b:76:82:
         cd:26:09:fb:6e:09:71:c3:5e:aa:cb:86:07:27:07:27:f3:d4:
         0b:8d:70:7b:92:5d:c4:31:1d:b4:f2:9f:6e:02:38:4d:0f:f7:
         50:b2:19:bb:97:2d:24:a1:b1:17:4d:e0:60:5d:ce:fd:8f:f0:
         ba:d9:bb:49:57:db:81:8d:7b:a3:47:cb:ae:5a:f4:7a:75:7d:
         be:25:30:a1:2c:e9:3b:1f:bd:d1:6a:e3:91:ac:5c:79:b6:a4:
         fe:9b:25:cd:ca:79:9f:02:79:47:a0:2c:f3:04:de:95:50:5d:
         16:b7:15:61:e6:0b:d4:34:4b:7c:74:e6:23:3f:c3:77:a0:81:
         46:8f:9d:f6:e6:1d:0b:99:b5:35:1c:dd:02:28:99:2e:cf:58:
         b9:95:e5:1b:d0:27:22:7f:db:43:d5:22:0d:95:19:e7:c7:87:
         b0:ba:db:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNv+pRbm3mi1OhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZmZhMmEwOTktOWE5Ni00MzBmLTg5MjQtNjY2MmU1MTg4NGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpol9YQ2hXzw7M6AbnW5wELKvD2C0YlBk4x5
0MO6zztW7sji8ceijmik+ta+vO6CLn7iSTRMt1vihCGwicfkHL/BiPImOQLtJkKL
V6I4++7EhCppx0hBCb7rQRe2YnWvklsAjAuSDmbMqycfJXF1Nq1pWXuvqiuziVcD
vgrzlymNf5xF4DsPrFm3pCCWScuoMc0GU/tpRXKec3PeE4PHgfGz5fJBSEKpuz5D
hQyfxcY6ytMhZfJm2TPYUxpXKfz9UMmirZGR1dzQX5NBgyJJ4uVkTMpJ9KOH13er
fKqPQrc1GdZSHqwfUle94WnYg8ehRVoRsUM+Fkhk/L/HgxWJUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIV2dprMtGDLyqPF9CkAG85+G7NmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDQyZTExYjYtYWI3Mi0z
MjQxLWFmYWUtNTY4ZTY1MjExZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAThflCUMjT1d3eOg0rXdODFGeLatLr9D7sIuDBm2IuiQTLP+vCPCPEz
x6288oGH8gTHlNtfC9yfDqID9/udu27Po7Fqgs7D9i+qUE3oFcBOyNCIRhc/wSt2
gs0mCftuCXHDXqrLhgcnByfz1AuNcHuSXcQxHbTyn24COE0P91CyGbuXLSShsRdN
4GBdzv2P8LrZu0lX24GNe6NHy65a9Hp1fb4lMKEs6TsfvdFq45GsXHm2pP6bJc3K
eZ8CeUegLPME3pVQXRa3FWHmC9Q0S3x05iM/w3eggUaPnfbmHQuZtTUc3QIomS7P
WLmV5RvQJyJ/20PVIg2VGefHh7C6278=
-----END CERTIFICATE-----
Generated at Sun Sep 14 13:17:44 2025 by rpki-client