Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/598299c4-8652-3925-b443-52f1d725ebd6.roa
File:                     598299c4-8652-3925-b443-52f1d725ebd6.roa (raw, json)
Hash identifier:          9MP2AWKXaBiMesuD7tyPYKgY6+NMmrZnIZWOVkfn/Ts=
Subject key identifier:   EF:28:59:92:1C:E4:29:1F:BB:2D:46:BF:51:0F:F2:49:F0:D1:5E:C4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C36FF01C5057B09537FA300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/598299c4-8652-3925-b443-52f1d725ebd6.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397224
IP address blocks:        204.74.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ff:01:c5:05:7b:09:53:7f:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=7c06cd3a-757f-45ee-aa0c-7023edb3b00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:b5:b0:93:03:0e:33:88:a9:ee:a6:31:95:
                    49:cf:6f:e7:d3:a4:8c:ba:17:fa:34:05:18:d5:bf:
                    ad:5b:00:43:e2:e5:c6:3f:f7:ee:03:6b:92:ef:81:
                    7c:5b:8d:d8:5f:25:6d:53:72:a9:d7:b5:a2:bd:a9:
                    38:25:ec:e4:72:76:0b:e5:76:06:d6:ca:12:7e:ac:
                    c5:b4:9d:23:ab:a8:73:54:ac:87:b1:b2:74:21:80:
                    ee:a7:62:7d:a8:a9:d2:db:96:98:7c:b1:6d:1c:5b:
                    bb:f1:1d:d2:3f:90:3b:6c:55:08:4d:63:54:81:dd:
                    81:40:85:bc:5f:fa:38:64:36:dc:0c:fa:3a:3b:8f:
                    1b:24:6f:56:e4:9a:51:17:7c:fa:40:d0:4e:c8:49:
                    20:6f:bf:a0:cb:65:e3:c3:08:23:fc:8a:bd:a7:31:
                    da:2f:d2:4f:5c:b2:f6:1c:e3:51:79:56:72:2a:aa:
                    63:e0:d0:01:c2:09:45:fd:69:6f:8b:f2:67:b3:61:
                    57:4a:5e:56:9c:7f:dc:a2:17:ba:74:ad:a5:35:f5:
                    9d:74:6a:14:69:fd:9d:f3:18:01:93:eb:41:1f:af:
                    d1:3e:57:a9:fe:1b:c2:b8:f2:2b:7f:b1:3a:67:9a:
                    54:2c:0c:a3:e9:00:51:0c:d9:0f:06:11:1c:c1:49:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:28:59:92:1C:E4:29:1F:BB:2D:46:BF:51:0F:F2:49:F0:D1:5E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/598299c4-8652-3925-b443-52f1d725ebd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:95:e7:6f:d4:8b:1a:4e:d4:09:4e:12:e4:79:60:4f:ae:
         6b:6a:50:bf:ee:68:55:5b:c5:df:da:ad:fb:a6:23:e2:c0:49:
         81:2f:f9:ff:b6:dd:2e:bb:5f:65:69:20:61:e4:2b:b8:98:c4:
         d6:f5:d6:62:99:97:8b:03:02:bb:77:48:b7:af:25:54:46:5b:
         5a:d4:fe:67:18:55:0e:30:11:a7:91:06:97:a0:06:dc:d1:f5:
         4a:8d:78:15:54:2a:25:49:05:c8:d4:77:18:24:dc:2d:43:00:
         c6:8b:2e:1c:43:fd:c7:ac:23:ec:4f:2d:1e:ad:67:13:7c:8e:
         60:ed:67:11:7d:f3:e1:1f:91:ee:17:e0:bd:f4:fa:08:6b:63:
         73:28:c9:9f:28:87:6e:73:2b:02:53:44:ab:17:a7:ab:5e:fa:
         69:4c:5c:2c:49:70:2b:6a:56:d9:d6:72:5f:24:e1:e2:6f:88:
         b7:10:61:cd:bc:14:f4:d7:f9:03:fb:77:29:d4:d2:e3:9a:87:
         f5:5e:b0:c0:18:bf:ec:b9:e1:e8:00:f4:a8:d4:5a:eb:0f:ce:
         8c:e5:8a:3a:b9:2f:3c:96:c5:b5:bb:27:3c:93:8c:d9:5f:ac:
         be:46:3b:d8:d9:ce:38:cc:ce:99:09:72:70:70:9a:64:11:80:
         23:d5:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:12:49 2025 by rpki-client