Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cd064a6-f348-3d37-ba82-f5649e897e13.roa
File:                     7cd064a6-f348-3d37-ba82-f5649e897e13.roa (raw, json)
Hash identifier:          9JEoJHsJUXvxIK5miT6bJ9/x7EN1ToI0/44z+WroEpI=
Subject key identifier:   21:8A:A8:F0:A5:F3:5E:01:FD:D8:28:28:4D:90:65:FD:D1:8F:E4:0B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C370106ECD269DA77FB5600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cd064a6-f348-3d37-ba82-f5649e897e13.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397225
IP address blocks:        204.74.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:01:06:ec:d2:69:da:77:fb:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=d909496a-f85b-4c4a-a525-d47496863a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:67:9f:ba:4c:6f:cc:9b:43:01:df:ae:8b:
                    3a:a8:e0:a6:d5:fe:9c:f7:0f:99:81:c6:9e:08:f9:
                    52:3f:e9:e0:c7:7b:d7:35:96:d6:21:00:66:92:c9:
                    e9:0b:8b:04:f3:db:bc:df:4d:60:f0:8a:2e:be:79:
                    85:cd:f4:c4:41:47:e4:71:b5:d2:f8:43:e5:66:60:
                    2a:bc:02:d1:84:bc:64:93:6a:bc:cc:4f:07:ae:e7:
                    68:38:94:d4:8d:ba:ff:ae:61:82:1b:5e:29:ff:ca:
                    51:52:13:1e:6f:87:ab:a5:08:fa:f7:61:e5:51:f7:
                    51:5f:dc:09:c8:86:21:7b:d0:f2:f9:72:f7:77:3b:
                    4f:86:f4:6d:18:54:e0:6e:71:63:6b:57:88:8e:76:
                    ae:fa:df:56:03:d4:69:a3:ec:2f:28:01:97:f6:02:
                    00:03:fb:8b:cf:d1:12:1b:ec:6c:37:c6:97:dc:1b:
                    53:5c:2c:cf:5d:1f:4d:ef:31:6c:30:30:d4:1b:31:
                    a6:5b:fe:47:92:8c:de:46:4a:de:f0:ed:15:67:0b:
                    c9:7a:2c:7b:c5:28:36:7c:8b:ae:3f:2a:a3:e3:1c:
                    96:4d:68:28:aa:10:45:ab:45:7e:32:bd:7c:68:dc:
                    d8:d3:1c:95:47:96:8d:2f:44:78:a2:28:6b:b2:11:
                    ed:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8A:A8:F0:A5:F3:5E:01:FD:D8:28:28:4D:90:65:FD:D1:8F:E4:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cd064a6-f348-3d37-ba82-f5649e897e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:35:19:74:a3:ba:d5:d6:80:68:54:fa:d5:85:5c:e6:ab:7c:
         9a:64:77:fa:db:54:55:29:b5:08:ae:4b:89:c0:7f:6c:77:f3:
         28:4e:bf:57:6e:67:ee:c7:97:63:91:0c:9d:d1:a4:34:4f:6b:
         63:4c:d5:bb:71:27:57:ed:62:02:b1:2d:49:5e:a8:c1:59:aa:
         c3:a8:2c:4f:97:e3:b2:b3:31:ad:e0:74:4a:69:69:1a:76:6a:
         6e:4b:00:d7:e5:dd:2d:1e:ad:47:36:3f:1b:61:ae:e0:1c:24:
         05:d6:ea:87:14:8c:84:c1:66:c4:71:73:30:a1:db:05:b6:ff:
         68:4f:52:7e:c8:e9:d8:38:b5:e7:5c:42:25:28:90:2b:28:88:
         cf:77:d0:09:c1:a2:12:6d:3c:e2:c6:96:86:5e:1c:9b:93:e8:
         67:8c:b6:e9:71:38:63:2c:a8:9d:88:01:47:8d:28:26:b7:48:
         46:3f:3c:e7:a3:1c:32:ab:6e:1a:42:26:fd:16:eb:b9:c0:24:
         b2:a6:bc:4f:fe:02:52:21:72:59:20:4a:a0:f6:3d:28:06:34:
         e8:4e:88:fb:97:c4:fc:d8:7b:90:b4:34:80:da:e7:c3:e5:47:
         1c:30:e3:6a:62:9a:8c:89:c2:4d:5d:fb:fb:47:31:24:55:8c:
         64:fd:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:15:22 2025 by rpki-client