Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8216dee5-1347-3e05-a73f-48407ff6f475.roa
File:                     8216dee5-1347-3e05-a73f-48407ff6f475.roa (raw, json)
Hash identifier:          CqtldykSdDCcKV1Ut2e6iKE/UQEOI9G9k36AWeRkbaA=
Subject key identifier:   F7:DA:63:D7:F1:FC:E8:FB:31:8A:60:D8:C0:FF:C9:7B:D4:44:FC:9A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0C7BC6E52CEF98C412340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8216dee5-1347-3e05-a73f-48407ff6f475.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397216
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:c7:bc:6e:52:ce:f9:8c:41:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=8ee3a346-9879-4dfa-b9b8-6bc9213afa48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:c2:5c:93:14:22:4f:54:27:4d:2e:13:40:
                    bc:bc:e0:69:46:78:c0:d3:e3:a8:48:76:35:d6:1f:
                    0e:f6:35:ab:41:dd:ae:f4:f1:52:a2:52:dc:59:56:
                    92:a0:96:1b:5a:13:c1:1b:59:a3:33:3f:77:3e:5e:
                    9f:6c:f3:6d:c9:6f:95:98:a5:e0:51:fd:41:fe:b0:
                    af:7b:f3:26:27:db:55:08:37:7b:65:81:31:79:3c:
                    99:53:39:56:59:4a:1a:0e:68:92:f4:0a:c5:11:b8:
                    77:51:d4:ff:7b:62:df:5b:8e:2d:18:11:ee:af:a3:
                    25:57:f7:8f:0f:66:b8:7a:6c:3b:9f:77:fd:35:69:
                    3a:5c:76:a9:6d:82:b4:75:92:f6:18:c3:99:4f:7e:
                    35:b9:9f:2f:fd:2c:8c:84:57:58:e0:28:58:cc:61:
                    39:81:c7:18:f3:e3:bf:8f:a0:b8:36:e8:ba:21:e3:
                    d5:8a:3d:12:f3:f0:ac:86:72:ba:7a:83:d9:88:a0:
                    bb:96:69:b8:61:0f:d1:62:b6:98:8b:d5:69:14:33:
                    d3:c2:57:31:b2:61:a3:6c:24:dd:2a:73:26:5f:cd:
                    25:30:d8:18:1f:38:0c:b0:aa:89:93:83:48:82:ea:
                    dc:6c:16:11:08:8f:80:38:0b:e8:cf:35:72:5f:52:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DA:63:D7:F1:FC:E8:FB:31:8A:60:D8:C0:FF:C9:7B:D4:44:FC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8216dee5-1347-3e05-a73f-48407ff6f475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e4:dd:76:6b:d8:7a:27:e7:f5:d6:bb:8a:61:33:3b:02:ac:
         c5:4a:01:cf:b7:60:92:1b:23:a7:ca:fc:37:c0:5f:d9:f8:28:
         f2:98:77:3a:d0:6d:67:88:04:3e:73:ef:5e:4f:0b:4f:08:be:
         de:fa:5b:ed:ec:57:51:50:e4:9b:f4:71:d0:03:21:5f:7a:48:
         ab:93:9a:bd:93:d7:1e:a8:00:7f:d1:d0:a8:a4:91:5d:d9:cb:
         5e:b6:c1:4f:79:45:60:73:32:be:d6:e9:fd:f6:5e:d8:b1:e6:
         24:48:73:a9:dd:c2:1e:43:0c:ad:13:89:3a:3f:53:83:1e:a5:
         7b:76:44:6e:87:72:0b:7d:5d:7f:80:ca:e1:85:0d:11:85:fd:
         42:8d:85:cc:f4:f4:1d:c3:06:a0:26:cd:76:20:4f:ca:96:c6:
         57:3c:98:ae:ca:57:9c:1c:52:d1:4a:4c:d8:3f:51:d0:15:cc:
         bd:d6:f2:65:98:f3:b7:8d:ac:03:bf:0f:64:ef:1c:c0:d8:6d:
         46:c5:7b:50:b8:1a:85:cd:82:c3:81:4a:d5:ca:0c:8f:8b:a0:
         cc:cd:b8:3c:a3:3e:a1:6f:51:31:f8:b3:36:9a:90:3a:ec:38:
         8d:c8:ab:92:5c:27:2d:63:10:28:89:6b:57:5d:ec:5a:20:c2:
         5c:98:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:21 2025 by rpki-client