Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/045a08ea-3c11-324c-a67c-2111bf93aab8.roa
File:                     045a08ea-3c11-324c-a67c-2111bf93aab8.roa (raw, json)
Hash identifier:          fEKE49XDGCyIA3vsm8NKiopovk2Om/io3YjabgmAiC8=
Subject key identifier:   22:56:A5:A0:11:60:F0:62:B0:BE:B8:4C:83:E7:2D:80:6B:83:C2:73
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A682618210E6434B2BA61F530
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/045a08ea-3c11-324c-a67c-2111bf93aab8.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397218
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:18:21:0e:64:34:b2:ba:61:f5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=975a2f5c-7223-49c0-87f7-5809eb715ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:9e:e7:a6:50:ae:6b:7d:18:fb:ca:8c:de:
                    32:1d:69:20:c5:ee:7d:1d:02:b7:c3:4b:f3:f1:3f:
                    ab:c1:bc:01:62:a7:b8:08:27:4c:59:bf:07:96:51:
                    9f:0c:24:42:36:33:00:c0:1c:f1:50:98:ad:80:88:
                    26:ee:83:60:52:1d:81:83:cc:4e:c4:41:56:da:b9:
                    3f:ec:0c:04:cc:5f:61:68:74:12:48:a6:b8:4c:b0:
                    c9:4e:1a:38:d1:77:bc:ba:da:de:9f:27:72:22:45:
                    a4:3b:57:81:7b:55:4e:c9:27:e7:1f:7b:cb:10:90:
                    b5:7f:ad:db:f5:bf:e4:bf:34:34:fb:e9:05:27:44:
                    1f:c3:19:4e:a8:1a:84:65:e4:4b:df:ab:3d:ec:bc:
                    10:84:d8:72:51:4d:8e:4d:18:ca:62:e0:97:51:ee:
                    80:4f:8e:20:a2:be:b0:90:08:7a:97:31:2e:ba:e3:
                    1f:0e:8c:9d:38:63:ff:e2:d1:fb:c4:57:b2:67:01:
                    06:44:c7:3b:84:f6:bd:5d:7a:33:8f:31:b7:be:1d:
                    73:c2:5f:8e:ce:05:98:79:e2:1f:ca:32:9e:3b:89:
                    15:1d:14:69:4d:f8:2a:79:f8:12:8d:ea:56:aa:0d:
                    46:74:bb:30:73:5d:6f:a0:c5:b6:cb:8d:7d:16:70:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:56:A5:A0:11:60:F0:62:B0:BE:B8:4C:83:E7:2D:80:6B:83:C2:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/045a08ea-3c11-324c-a67c-2111bf93aab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:40:80:1a:3d:04:87:f2:b7:7d:15:89:bf:d1:a4:a9:12:a1:
         6a:d3:b3:f3:4f:a4:8f:a1:f2:72:86:45:2b:1b:75:68:02:5c:
         52:99:df:7b:19:33:a2:55:72:88:ff:c6:8a:71:66:e5:04:42:
         d6:6d:2e:e0:a1:77:ec:2b:df:e7:18:17:b4:a6:44:e9:11:b2:
         84:83:f2:47:ab:4f:7a:07:b9:d9:21:61:16:53:40:fe:4c:d9:
         49:a6:9f:d5:28:5e:d7:7f:f8:77:a5:1a:ac:41:ec:b3:3f:97:
         33:c0:ea:12:fa:54:cb:06:9f:ae:b8:c5:b8:1b:b2:07:45:b1:
         38:30:c9:cd:f6:2e:cd:07:31:86:12:29:dd:cb:ff:dc:76:29:
         d9:de:3a:fa:01:f9:25:31:d5:c4:e3:6e:ec:94:dc:5a:e8:51:
         6c:43:fd:a1:08:2e:05:6a:4d:28:2e:2d:83:fb:37:29:59:16:
         c9:d6:5a:37:5c:35:11:1a:d9:1f:dc:f4:d1:bb:c5:db:15:92:
         9f:66:2b:b1:e5:cd:04:bc:16:0a:a6:cc:48:03:1a:95:02:ad:
         c5:68:ae:dc:0a:6e:bf:85:48:eb:99:02:f4:cc:32:3f:57:ce:
         51:ab:aa:e9:da:67:72:ff:9b:e3:a0:96:55:a2:87:5d:e0:db:
         52:85:53:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhghDmQ0srph9TAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
OTc1YTJmNWMtNzIyMy00OWMwLTg3ZjctNTgwOWViNzE1YmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NCe56ZQrmt9GPvKjN4yHWkgxe59HQK3w0vz
8T+rwbwBYqe4CCdMWb8HllGfDCRCNjMAwBzxUJitgIgm7oNgUh2Bg8xOxEFW2rk/
7AwEzF9haHQSSKa4TLDJTho40Xe8utrenydyIkWkO1eBe1VOySfnH3vLEJC1f63b
9b/kvzQ0++kFJ0QfwxlOqBqEZeRL36s97LwQhNhyUU2OTRjKYuCXUe6AT44gor6w
kAh6lzEuuuMfDoydOGP/4tH7xFeyZwEGRMc7hPa9XXozjzG3vh1zwl+OzgWYeeIf
yjKeO4kVHRRpTfgqefgSjepWqg1GdLswc11voMW2y419FnAZrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJWpaARYPBisL64TIPnLYBrg8JzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDQ1YTA4ZWEtM2MxMS0z
MjRjLWE2N2MtMjExMWJmOTNhYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNAgBo9BIfyt30Vib/RpKkSoWrTs/NPpI+h8nKGRSsbdWgCXFKZ33sZ
M6JVcoj/xopxZuUEQtZtLuChd+wr3+cYF7SmROkRsoSD8kerT3oHudkhYRZTQP5M
2Ummn9UoXtd/+HelGqxB7LM/lzPA6hL6VMsGn664xbgbsgdFsTgwyc32Ls0HMYYS
Kd3L/9x2KdneOvoB+SUx1cTjbuyU3FroUWxD/aEILgVqTSguLYP7NylZFsnWWjdc
NREa2R/c9NG7xdsVkp9mK7HlzQS8FgqmzEgDGpUCrcVortwKbr+FSOuZAvTMMj9X
zlGrqunaZ3L/m+OgllWih13g21KFUxo=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:10 2025 by rpki-client