Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8df7f548-d860-38b8-aba9-a83069d5fcd3.roa
File:                     8df7f548-d860-38b8-aba9-a83069d5fcd3.roa (raw, json)
Hash identifier:          pVRq244FC4c3ZJIXDbVPOOFCrA0Eu5LBzri1kbiLvBY=
Subject key identifier:   63:DB:E8:B9:23:07:15:EB:7F:CA:88:07:56:E1:76:0A:79:B0:17:B3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A7BB0CD376B745572B1488180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8df7f548-d860-38b8-aba9-a83069d5fcd3.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     397243
IP address blocks:        204.74.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:cd:37:6b:74:55:72:b1:48:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=1dcd6414-33cf-4cf7-b401-947ddda036ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:83:45:91:93:f4:70:64:17:cf:26:fe:c3:
                    f2:31:49:d3:69:2f:a8:6b:b6:61:75:f7:a7:37:9e:
                    0c:4f:eb:a6:f1:75:b0:89:0f:7a:35:56:7e:38:04:
                    16:3e:32:cb:61:a3:b2:d4:73:20:11:90:50:c1:a0:
                    1a:62:69:e6:3f:a1:72:02:4a:ae:d1:08:84:a3:c9:
                    a3:a8:ad:5b:fa:a7:75:fd:cd:35:42:2e:80:a2:51:
                    4f:f5:74:7e:ce:be:1f:47:b1:32:56:ff:b9:8c:df:
                    f4:45:c0:12:9a:76:c7:ab:01:a3:45:5e:f9:31:95:
                    4a:ac:c6:be:ff:c6:cc:a1:9e:40:fe:1f:86:89:59:
                    52:6c:18:19:f6:18:02:7b:c8:96:59:e9:5f:f1:5d:
                    de:9c:e7:8c:36:2e:37:5f:d0:f8:2f:0e:ef:33:64:
                    03:2c:e7:6b:ae:42:48:2e:fa:59:aa:90:48:87:2e:
                    87:3e:0b:54:f3:58:94:d0:48:80:87:e7:c4:b5:9e:
                    64:28:39:65:64:a3:ed:25:3e:ab:29:b5:98:6a:a4:
                    d9:21:26:ab:84:72:1b:5f:49:90:31:17:d0:8e:55:
                    22:15:81:52:56:7b:dd:e4:8a:1c:0b:4d:51:c2:6f:
                    7d:68:f5:ae:67:27:c9:1a:b7:8c:e7:bc:42:a3:1a:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:E8:B9:23:07:15:EB:7F:CA:88:07:56:E1:76:0A:79:B0:17:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8df7f548-d860-38b8-aba9-a83069d5fcd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:77:4b:21:77:86:c1:d2:03:ad:40:9e:04:ff:cb:f1:52:2e:
         09:47:f0:a7:bc:4e:4d:fe:ad:80:32:67:94:ee:54:a9:21:18:
         3e:cf:76:02:1b:ef:03:4f:89:39:30:9b:f7:b9:51:67:b8:5e:
         a2:f4:f1:48:f8:52:f3:d8:55:21:f7:e1:61:17:ac:51:e6:e4:
         fe:db:df:aa:97:af:58:35:c3:f3:60:3b:d2:cb:f2:2a:d5:da:
         9c:ba:6e:a8:7c:8c:3b:31:91:1b:78:d7:dc:97:cf:a1:62:01:
         48:db:59:cc:26:49:6b:de:65:4c:59:a5:ea:e5:62:0b:bd:51:
         a4:99:82:82:86:6e:c9:fc:80:fd:9d:46:41:31:31:1c:4f:46:
         00:2d:eb:42:3c:77:c1:c3:d5:27:67:3f:e3:bc:f7:cc:ab:ab:
         aa:ef:b0:7b:a9:c3:4c:b0:27:32:bb:ea:a2:8f:7c:c7:05:03:
         55:bc:be:dc:53:b4:90:9b:ff:49:54:0b:9e:98:fd:46:cd:f3:
         bb:26:6b:a4:5d:e0:0f:9c:ee:ff:c5:3e:d3:25:34:85:22:6f:
         ac:73:5d:9b:b1:d0:db:49:78:19:69:34:a7:ca:a2:e9:39:66:
         03:44:a4:df:7d:14:90:4d:95:6f:43:33:6a:2d:ae:0b:35:a0:
         76:12:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:07 2025 by rpki-client