Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/126a5f4a-ad19-3a6d-8443-7bf060ef7133.roa
File:                     126a5f4a-ad19-3a6d-8443-7bf060ef7133.roa (raw, json)
Hash identifier:          AqMM2x7ZvC5gVjIipyAAqit9BYzHBRBIOorDs0lfL4Y=
Subject key identifier:   1C:15:C7:A6:E3:CD:04:3B:32:30:BD:AC:8A:DE:3E:65:DA:B0:8A:6F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0CC4ED9534D79C2934280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/126a5f4a-ad19-3a6d-8443-7bf060ef7133.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397228
IP address blocks:        204.74.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:cc:4e:d9:53:4d:79:c2:93:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=e64cb506-00ae-4b8e-a17c-64c0ae0799a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:f1:db:ae:4a:e2:85:92:09:95:72:7c:70:
                    33:9a:dd:11:06:a4:ba:54:97:39:af:ce:6c:2e:5a:
                    9e:c9:61:3f:62:64:5c:9d:44:e4:1a:03:78:47:35:
                    14:e2:88:0a:0a:b8:60:42:f6:71:01:55:4c:0c:55:
                    2d:5f:52:8c:21:d1:40:8e:ae:e6:d5:c0:e7:a8:3a:
                    22:93:65:8c:bb:91:b8:04:5c:ab:30:b9:d1:c6:d3:
                    3f:5f:ad:26:80:11:e1:23:49:81:32:39:a2:12:ad:
                    43:0e:17:98:83:3e:29:a6:fc:24:61:4f:32:c9:c5:
                    ff:75:87:83:7a:a2:3f:58:21:d3:49:ae:31:07:4f:
                    af:2a:aa:b7:a5:8e:74:c1:d1:9f:5f:2a:bc:79:47:
                    b6:a1:83:2e:44:f4:88:14:84:5a:07:ae:bb:37:6e:
                    ed:6f:5a:a7:b5:a0:be:79:1f:36:e5:e1:c1:97:83:
                    25:aa:7f:92:d3:44:8e:1b:da:12:51:c5:4d:3d:b4:
                    b8:ef:26:b2:d8:16:45:cc:37:f9:35:64:23:42:a0:
                    82:50:73:3f:ed:3b:6f:a5:ff:d9:8d:0b:5a:05:8d:
                    c4:ac:12:40:81:31:64:d8:79:d9:24:ca:90:2a:96:
                    e1:c8:51:99:f8:7a:ad:cc:0d:36:08:b1:93:f5:72:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:15:C7:A6:E3:CD:04:3B:32:30:BD:AC:8A:DE:3E:65:DA:B0:8A:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/126a5f4a-ad19-3a6d-8443-7bf060ef7133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:c1:37:c0:04:be:16:6b:a3:46:b7:73:4e:af:9d:24:48:
         ec:15:96:27:c8:15:4b:0b:46:62:64:bb:45:e1:43:65:fd:3e:
         56:1b:d2:ad:a8:3e:6e:a6:8f:c7:fb:f5:98:fd:72:c9:5d:d6:
         b1:f8:82:b2:b4:69:00:2f:8f:76:e2:42:74:06:ca:59:40:4f:
         ad:a5:f8:c0:46:e0:eb:58:d1:78:bd:14:58:c2:2f:db:67:92:
         1e:b9:fd:0a:e5:ec:a6:8e:dd:dc:3b:0f:a9:de:db:e4:de:e1:
         7f:9b:68:99:47:5e:d1:29:6c:f7:cc:4b:fb:d8:ed:27:35:b3:
         6e:50:6e:e6:f0:b9:c7:35:af:fc:03:bc:34:8d:d9:b8:4e:3c:
         bb:e1:54:ef:d3:50:3d:18:b5:30:43:76:70:02:f5:18:9f:7b:
         b0:1d:5c:c3:96:56:5e:a1:a1:b3:9d:43:ee:54:4e:73:a8:1c:
         16:21:97:1a:f3:d5:43:b4:75:46:95:0c:85:67:07:3d:22:56:
         bf:93:c4:e7:30:a7:bb:f7:71:5c:e3:c2:84:bf:70:ab:2f:5e:
         61:70:bc:a5:47:e7:3d:44:33:b8:c6:59:11:ac:74:77:0b:88:
         7e:91:7e:af:b9:2b:a8:b9:42:2c:6b:08:51:6b:b2:a2:ed:ac:
         44:f8:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:23 2025 by rpki-client