Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/880bce0a-d800-34c6-b0c2-bf1f3cff0772.roa
File:                     880bce0a-d800-34c6-b0c2-bf1f3cff0772.roa (raw, json)
Hash identifier:          vFDuFk3C+D8tAm7T+NTNwol38Uey1BZMrcyLo72izUw=
Subject key identifier:   C8:71:1C:EA:B8:9C:F8:CD:48:66:BC:E3:EC:20:40:BE:DD:CF:32:A1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF486AF343E4C2C82F3100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/880bce0a-d800-34c6-b0c2-bf1f3cff0772.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397243
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:48:6a:f3:43:e4:c2:c8:2f:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=dd2e8fb6-a9ad-4d02-9a82-02af7367d498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:28:30:d3:6f:3e:72:2b:d3:ec:0e:3e:da:a0:
                    e9:0d:3a:06:55:83:67:59:ec:b1:66:b7:1a:2c:2d:
                    0c:b5:26:34:6b:fc:fc:4c:a2:0c:61:e0:e4:2d:80:
                    b8:b4:ba:f3:49:53:cf:4c:9e:fe:9c:ad:53:e7:dc:
                    fa:15:2b:19:1d:b2:76:69:5d:b5:78:92:30:2d:d0:
                    e7:40:ef:7a:7d:0f:47:fd:fc:57:92:8d:b4:30:cf:
                    02:2b:d6:aa:e1:21:8e:da:db:38:cd:ab:38:7b:2f:
                    25:d0:28:f8:98:e0:0c:21:5d:33:15:00:87:22:da:
                    bf:b1:1f:9d:1e:e1:cd:cd:c7:c4:8e:1c:6d:02:7f:
                    e0:8b:69:d0:4a:ad:63:f5:d1:78:9b:8b:20:25:f8:
                    8d:ab:58:b6:79:c6:ca:2b:dd:e8:2f:d4:3a:1e:6a:
                    a8:a6:a6:0e:17:17:3c:f1:a9:81:f3:46:84:ae:a1:
                    42:ca:e6:5a:c2:e0:b6:7d:f5:71:fa:db:4d:c9:39:
                    e6:99:87:6f:4a:fd:2a:d9:c6:c5:ea:7c:91:5b:ef:
                    ee:94:12:89:eb:04:dd:23:ea:f5:c2:1f:ec:ba:27:
                    3e:3b:a1:96:4a:a1:2e:a1:d0:3f:5a:ad:c6:86:de:
                    47:87:db:ff:cf:98:8d:95:23:d5:41:69:1b:1a:86:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:71:1C:EA:B8:9C:F8:CD:48:66:BC:E3:EC:20:40:BE:DD:CF:32:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/880bce0a-d800-34c6-b0c2-bf1f3cff0772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:51:f6:70:5a:c2:99:2d:bd:40:b0:e7:6c:77:fb:6a:b5:
         24:6b:e8:c5:60:13:61:e3:84:94:85:88:39:6a:bc:16:ef:3c:
         bd:f8:d8:25:58:8b:c9:f4:1d:99:20:39:63:76:f7:52:f7:2e:
         c0:26:07:5e:cb:40:d6:6d:0b:90:cd:09:37:2c:53:0e:73:ab:
         ce:19:e5:4a:98:d9:50:68:c2:f6:e8:41:4c:22:6e:04:42:29:
         76:20:a0:1b:e2:72:96:ac:a8:bb:a7:eb:4d:a4:84:c7:dd:6b:
         8b:0e:e1:88:e0:40:d2:d6:92:da:c9:d2:f4:1a:f6:5c:b1:54:
         d6:73:41:be:69:f7:54:5f:77:0a:ef:2e:aa:04:1f:b8:6e:24:
         f4:3e:76:b3:1f:f1:c2:f6:fa:4a:35:61:68:36:b3:01:ba:74:
         1e:28:ef:2f:c2:c6:86:8b:26:96:9c:5f:b4:bc:30:79:b7:56:
         58:c4:92:d5:c6:6d:da:d7:a7:73:58:7d:90:ef:12:3e:91:ee:
         2d:d4:6b:62:cd:04:dc:49:d1:0f:13:76:47:f5:1a:27:4e:77:
         2b:86:7e:e9:9e:e5:c9:79:f0:85:14:d1:f8:e5:60:c7:46:a1:
         93:3f:9d:31:2e:e0:35:ba:2c:80:aa:6e:11:f1:ab:4e:ca:ad:
         fb:ac:91:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz0hq80PkwsgvMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
ZGQyZThmYjYtYTlhZC00ZDAyLTlhODItMDJhZjczNjdkNDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7igw028+civT7A4+2qDpDToGVYNnWeyxZrca
LC0MtSY0a/z8TKIMYeDkLYC4tLrzSVPPTJ7+nK1T59z6FSsZHbJ2aV21eJIwLdDn
QO96fQ9H/fxXko20MM8CK9aq4SGO2ts4zas4ey8l0Cj4mOAMIV0zFQCHItq/sR+d
HuHNzcfEjhxtAn/gi2nQSq1j9dF4m4sgJfiNq1i2ecbKK93oL9Q6HmqopqYOFxc8
8amB80aErqFCyuZawuC2ffVx+ttNyTnmmYdvSv0q2cbF6nyRW+/ulBKJ6wTdI+r1
wh/suic+O6GWSqEuodA/Wq3Ght5Hh9v/z5iNlSPVQWkbGoZFnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhxHOq4nPjNSGa84+wgQL7dzzKhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODgwYmNlMGEtZDgwMC0z
NGM2LWIwYzItYmYxZjNjZmYwNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEW2UfZwWsKZLb1AsOdsd/tqtSRr6MVgE2HjhJSFiDlqvBbvPL342CVY
i8n0HZkgOWN291L3LsAmB17LQNZtC5DNCTcsUw5zq84Z5UqY2VBowvboQUwibgRC
KXYgoBvicpasqLun602khMfda4sO4YjgQNLWktrJ0vQa9lyxVNZzQb5p91Rfdwrv
LqoEH7huJPQ+drMf8cL2+ko1YWg2swG6dB4o7y/CxoaLJpacX7S8MHm3VljEktXG
bdrXp3NYfZDvEj6R7i3Ua2LNBNxJ0Q8Tdkf1GidOdyuGfume5cl58IUU0fjlYMdG
oZM/nTEu4DW6LICqbhHxq07KrfuskRw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:31:52 2025 by rpki-client