Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17343c1e-06f6-39f0-876a-b3bd132567a9.roa
File:                     17343c1e-06f6-39f0-876a-b3bd132567a9.roa (raw, json)
Hash identifier:          DXAbu2Pxkr0D9qKo7XOkoL0AnX/qEUX7/+/r3k+/GcE=
Subject key identifier:   7E:B8:7D:A8:EB:FB:72:BB:71:18:6B:C1:67:F3:78:AC:B2:5E:13:4F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0C89DF7526343AB8B22C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17343c1e-06f6-39f0-876a-b3bd132567a9.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397231
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:c8:9d:f7:52:63:43:ab:8b:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=8bb55415-57e8-4c8e-b2d5-f3bd0561819b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:48:b9:ef:2a:88:e9:6c:00:50:da:9a:65:
                    19:17:10:b2:9b:8a:b2:8a:b3:bf:c8:3d:11:8a:f9:
                    6a:96:33:39:af:62:80:11:62:38:0f:39:aa:12:6f:
                    e6:99:e5:8e:c2:92:11:92:94:a1:83:e1:75:de:85:
                    4e:15:e1:ac:b4:c5:27:58:e3:0e:9b:60:ae:b9:52:
                    b0:18:cb:f3:af:eb:49:a5:b7:ed:c2:b1:b8:fb:10:
                    00:4a:fc:95:13:64:b8:51:77:a3:7f:ce:f5:48:18:
                    64:cc:5e:48:2e:40:cb:1b:5d:54:e2:be:bf:de:55:
                    d7:3e:65:88:2d:f8:bf:1c:e7:d4:85:47:fd:50:ed:
                    b5:03:0f:d8:dc:8e:a3:6c:25:2d:1d:6a:d3:2a:c0:
                    e4:19:0a:d7:7a:06:b3:52:e6:72:66:a8:ad:40:fb:
                    4d:f4:f2:66:41:06:91:2c:9c:4d:ce:15:f3:09:61:
                    e8:a2:30:72:37:b6:4b:56:77:1a:34:57:5e:7a:06:
                    fe:81:52:06:6a:58:e7:86:68:df:91:a1:4b:78:ec:
                    29:60:a7:f1:e2:f9:9b:3c:a8:fb:50:67:aa:4c:70:
                    d0:24:b8:f3:61:08:ee:70:ca:7a:48:61:4e:5e:fc:
                    fd:99:4f:c2:e4:42:54:a3:b8:e6:61:f8:c5:02:37:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B8:7D:A8:EB:FB:72:BB:71:18:6B:C1:67:F3:78:AC:B2:5E:13:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17343c1e-06f6-39f0-876a-b3bd132567a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:21:23:32:5f:7b:5f:28:a9:c2:1f:07:2f:92:f9:20:27:b3:
         53:45:88:bf:ad:84:d5:b1:d1:a8:5f:f0:3a:6a:a0:a8:0a:96:
         8e:bf:e3:36:67:55:0c:8b:f9:f6:b7:54:39:40:45:57:cb:ce:
         52:c1:45:f8:f2:3e:0f:23:a5:c7:77:e7:2a:a2:a3:cc:b0:2c:
         9a:8a:91:db:d4:4b:bb:09:dc:0c:97:d0:90:12:24:ef:02:83:
         db:85:b1:60:61:b7:0e:22:3a:27:a1:b3:91:f4:24:ca:e2:f5:
         b4:ec:d2:48:86:78:57:79:94:ed:77:51:a1:ac:1a:a2:5a:df:
         7b:0e:8f:50:12:6d:a1:c2:fd:4d:3e:2b:26:5f:b8:8d:ca:4f:
         6f:c2:4b:fa:bb:2e:98:e8:40:3f:5b:70:ce:d4:4e:11:34:98:
         dd:d9:40:80:2e:04:2b:08:f3:29:8c:5e:cd:36:8a:ae:a1:18:
         46:f3:6e:66:8a:2f:85:1f:20:51:f5:bb:57:52:e5:a9:23:6e:
         7c:4a:6b:28:ba:3e:55:54:80:ce:cf:12:bb:0d:b0:6e:f1:1e:
         ef:ff:b2:5e:ef:60:36:97:e0:0b:06:2d:20:35:ea:3d:ba:cd:
         0d:f0:39:e5:56:ff:99:1a:a0:ab:a6:71:9d:dc:c5:35:bd:a2:
         a6:c7:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:07 2025 by rpki-client