Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab525159-0906-3338-9a22-4a88ad2ea617.roa
File:                     ab525159-0906-3338-9a22-4a88ad2ea617.roa (raw, json)
Hash identifier:          YKjmjZauofYDMmfgz0yRESrE7GZumsDAf3NUy6REmc0=
Subject key identifier:   9D:68:36:2E:B8:E5:E8:FA:D2:06:23:0E:F1:F4:61:73:60:0D:A4:00
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A682618126ECD182E3D655200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab525159-0906-3338-9a22-4a88ad2ea617.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397217
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:18:12:6e:cd:18:2e:3d:65:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=ce5fd4a7-0ec5-4a55-a798-dc38d0cf453f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:00:c0:a0:8b:57:20:3e:6c:09:ec:51:fa:
                    c1:c5:15:a1:a9:05:85:03:57:c0:32:d9:2f:59:45:
                    d7:d0:b6:f1:f7:12:02:2e:3f:6f:19:a1:ad:3e:be:
                    29:fa:9e:65:62:6e:96:9f:4a:09:d1:6f:ac:e9:09:
                    67:f7:be:d0:44:db:6a:e1:53:dc:a1:dc:d9:5f:cb:
                    b5:b3:b6:4a:91:8a:46:d8:a0:b3:3a:1c:4c:de:27:
                    47:67:dc:a3:34:82:35:85:3b:bb:b3:2b:48:c4:f9:
                    a6:af:23:f5:46:0e:27:58:90:1c:f1:e8:50:e4:62:
                    2b:2b:af:1c:7e:7e:90:2b:a6:70:c0:f1:20:f6:cc:
                    65:51:df:26:26:30:1d:78:da:1f:c2:10:e2:15:34:
                    5c:62:e1:86:74:e6:c7:5a:f3:e3:99:66:79:06:c7:
                    59:74:5e:e5:87:1c:10:0f:dd:99:de:e2:e4:58:16:
                    ce:7b:59:a1:9f:7a:a6:b4:8b:41:e7:9e:93:a2:a7:
                    c3:58:a0:ec:36:91:6d:3c:66:f9:9c:1c:13:58:7e:
                    a0:f1:06:50:7c:19:7b:68:9b:9e:df:ba:e4:06:8d:
                    4a:99:da:ac:62:6b:cf:80:88:8c:ed:7a:40:82:b1:
                    7a:77:c2:e3:b0:90:d2:75:b4:cd:08:d5:11:c4:c8:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:36:2E:B8:E5:E8:FA:D2:06:23:0E:F1:F4:61:73:60:0D:A4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab525159-0906-3338-9a22-4a88ad2ea617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f4:82:2f:a9:01:bd:6b:a4:41:2a:e6:25:a9:b0:4b:23:55:
         d7:ab:0e:ce:3b:a2:34:95:14:c8:33:06:41:21:cb:a6:74:29:
         65:3d:86:ff:2e:04:41:11:28:02:3f:7a:8c:cd:31:aa:d2:5c:
         6d:a1:28:70:59:7d:8d:d4:2d:5c:2e:2a:61:b3:88:f3:a3:e0:
         98:fe:71:7a:c3:b5:df:43:1a:f4:3d:43:82:7f:fb:0e:f6:6f:
         88:24:4b:a9:5c:8b:33:40:d9:73:1a:5d:47:be:8b:a8:83:83:
         55:70:2a:a8:6c:85:f3:57:6f:83:6c:2e:ca:64:f6:38:fd:3e:
         b3:92:ab:c2:d0:d8:af:6e:38:e0:6d:25:31:c2:4a:23:9d:6f:
         51:6d:c8:2d:23:c7:e3:db:24:15:04:6b:6f:7b:45:00:73:69:
         0c:05:cd:84:55:87:de:d8:62:ea:af:21:c0:0a:dd:43:fe:af:
         bb:e3:6d:11:fc:24:0b:3b:ba:46:69:8c:a9:e0:af:b3:b4:bf:
         69:fe:f4:fb:24:02:fd:34:ac:4f:ee:bc:f1:15:de:b3:14:fb:
         11:3e:55:d4:ec:03:30:ba:0d:69:17:71:25:c6:b5:70:1f:83:
         91:27:f5:b3:b4:0d:4b:cc:29:c6:72:9a:d7:89:d5:62:cd:d8:
         47:43:40:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhgSbs0YLj1lUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
Y2U1ZmQ0YTctMGVjNS00YTU1LWE3OTgtZGMzOGQwY2Y0NTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPMAwKCLVyA+bAnsUfrBxRWhqQWFA1fAMtkv
WUXX0Lbx9xICLj9vGaGtPr4p+p5lYm6Wn0oJ0W+s6Qln977QRNtq4VPcodzZX8u1
s7ZKkYpG2KCzOhxM3idHZ9yjNII1hTu7sytIxPmmryP1Rg4nWJAc8ehQ5GIrK68c
fn6QK6ZwwPEg9sxlUd8mJjAdeNofwhDiFTRcYuGGdObHWvPjmWZ5BsdZdF7lhxwQ
D92Z3uLkWBbOe1mhn3qmtItB556ToqfDWKDsNpFtPGb5nBwTWH6g8QZQfBl7aJue
37rkBo1KmdqsYmvPgIiM7XpAgrF6d8LjsJDSdbTNCNURxMhWAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1oNi645ej60gYjDvH0YXNgDaQAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWI1MjUxNTktMDkwNi0z
MzM4LTlhMjItNGE4OGFkMmVhNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGj0gi+pAb1rpEEq5iWpsEsjVderDs47ojSVFMgzBkEhy6Z0KWU9hv8u
BEERKAI/eozNMarSXG2hKHBZfY3ULVwuKmGziPOj4Jj+cXrDtd9DGvQ9Q4J/+w72
b4gkS6lcizNA2XMaXUe+i6iDg1VwKqhshfNXb4NsLspk9jj9PrOSq8LQ2K9uOOBt
JTHCSiOdb1FtyC0jx+PbJBUEa297RQBzaQwFzYRVh97YYuqvIcAK3UP+r7vjbRH8
JAs7ukZpjKngr7O0v2n+9PskAv00rE/uvPEV3rMU+xE+VdTsAzC6DWkXcSXGtXAf
g5En9bO0DUvMKcZymteJ1WLN2EdDQFg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:05 2025 by rpki-client