Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b10a58ef-0369-3f8c-b5b1-6d93c6caf2e3.roa
File:                     b10a58ef-0369-3f8c-b5b1-6d93c6caf2e3.roa (raw, json)
Hash identifier:          muxyR/0zdbEvtbI56JYOW6+LMtTaRQBvdmkpniooC1Y=
Subject key identifier:   C0:68:53:E0:95:81:12:5D:55:41:DF:6F:30:EB:43:CE:8F:50:25:A0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A682618BA7F02560A47FE2C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b10a58ef-0369-3f8c-b5b1-6d93c6caf2e3.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397229
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:18:ba:7f:02:56:0a:47:fe:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d321e9d9-f8e7-4081-b2fc-47f9d88d4755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:e1:d6:c8:5a:f3:f6:8e:ac:d5:16:51:a4:
                    2d:d9:07:c2:c2:75:04:c8:d8:cb:97:fe:00:fb:6e:
                    5e:36:0d:d8:5c:5c:a9:aa:75:6a:57:63:e4:2d:c9:
                    5a:07:30:eb:f1:76:77:15:ad:81:72:aa:39:84:33:
                    ba:ff:7a:69:ae:2b:85:be:bb:5b:ee:46:c8:32:a3:
                    90:45:af:69:5f:c7:d1:ca:0a:19:b3:cb:6c:fd:00:
                    84:80:5f:31:34:b0:37:43:77:b3:8c:fd:e8:c8:86:
                    5f:2a:9f:ef:c8:c8:c3:85:dd:42:1b:e9:7a:5b:e6:
                    90:70:ff:00:1b:ed:2a:36:d5:b0:42:32:99:be:cf:
                    13:b0:17:82:08:e4:a2:df:1a:87:1b:50:2b:cf:cc:
                    8a:50:51:88:7f:19:2b:10:ba:a2:f4:58:ec:69:ec:
                    13:64:2c:a1:81:08:2e:b9:b3:8d:ba:6b:f9:94:a9:
                    6a:dc:17:83:2a:55:f7:d3:76:8e:12:ef:b6:3c:af:
                    18:3e:b3:3c:e3:c2:d0:e8:11:8a:69:37:9c:53:d1:
                    b3:d1:4a:df:4b:40:6b:c4:f8:b6:9f:2c:80:da:7a:
                    f8:ef:c7:98:2e:1e:14:3f:cc:6b:2e:11:6a:77:15:
                    d0:5e:83:03:33:5b:ae:48:f0:fd:95:94:c7:06:99:
                    b2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:68:53:E0:95:81:12:5D:55:41:DF:6F:30:EB:43:CE:8F:50:25:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b10a58ef-0369-3f8c-b5b1-6d93c6caf2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:39:68:d2:32:4c:a9:92:4f:8e:41:40:41:41:8f:57:97:
         45:48:fb:6c:ce:5f:be:0c:ff:19:96:2f:5f:b2:05:87:35:19:
         fd:76:72:08:d7:dd:d9:58:af:b3:35:89:47:c1:8f:ab:43:f4:
         21:c6:94:27:bd:e6:ca:29:b8:45:66:c6:46:81:a6:0f:92:ed:
         81:85:b6:d5:33:db:18:9a:cb:63:5d:83:71:7a:90:90:a7:c8:
         2b:34:6a:65:77:0b:24:ec:f6:29:16:49:d5:f5:06:93:27:e8:
         7a:0a:9a:62:5c:d9:f5:fb:49:45:6c:f7:8d:49:fe:97:a5:f7:
         77:44:fe:17:4f:49:d7:70:47:7c:59:ac:f8:9e:87:d0:dc:6e:
         b4:a2:77:89:24:37:fd:40:43:3d:fd:e3:a3:5a:3b:9c:96:88:
         4c:43:69:b3:9f:64:57:5f:79:df:ca:07:e8:c0:00:b5:d0:2f:
         d8:ca:0e:5d:5b:e4:14:6a:be:ec:ae:74:78:a7:8c:26:10:41:
         76:c8:36:39:ec:57:30:48:77:26:ec:8d:ae:d0:06:15:70:4a:
         2e:f4:69:d2:4e:85:82:fd:85:27:e6:a4:76:5a:ab:63:e4:3b:
         e5:96:aa:35:6d:bb:4d:7a:b7:98:b4:87:db:2f:7a:74:60:04:
         75:41:c1:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhi6fwJWCkf+LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ZDMyMWU5ZDktZjhlNy00MDgxLWIyZmMtNDdmOWQ4OGQ0NzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYHh1sha8/aOrNUWUaQt2QfCwnUEyNjLl/4A
+25eNg3YXFypqnVqV2PkLclaBzDr8XZ3Fa2Bcqo5hDO6/3ppriuFvrtb7kbIMqOQ
Ra9pX8fRygoZs8ts/QCEgF8xNLA3Q3ezjP3oyIZfKp/vyMjDhd1CG+l6W+aQcP8A
G+0qNtWwQjKZvs8TsBeCCOSi3xqHG1Arz8yKUFGIfxkrELqi9FjsaewTZCyhgQgu
ubONumv5lKlq3BeDKlX303aOEu+2PK8YPrM848LQ6BGKaTecU9Gz0UrfS0BrxPi2
nyyA2nr478eYLh4UP8xrLhFqdxXQXoMDM1uuSPD9lZTHBpmyrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBoU+CVgRJdVUHfbzDrQ86PUCWgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjEwYTU4ZWYtMDM2OS0z
ZjhjLWI1YjEtNmQ5M2M2Y2FmMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxsOWjSMkypkk+OQUBBQY9Xl0VI+2zOX74M/xmWL1+yBYc1Gf12cgjX
3dlYr7M1iUfBj6tD9CHGlCe95sopuEVmxkaBpg+S7YGFttUz2xiay2Ndg3F6kJCn
yCs0amV3CyTs9ikWSdX1BpMn6HoKmmJc2fX7SUVs941J/pel93dE/hdPSddwR3xZ
rPieh9DcbrSid4kkN/1AQz3946NaO5yWiExDabOfZFdfed/KB+jAALXQL9jKDl1b
5BRqvuyudHinjCYQQXbINjnsVzBIdybsja7QBhVwSi70adJOhYL9hSfmpHZaq2Pk
O+WWqjVtu016t5i0h9svenRgBHVBwc8=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:31 2025 by rpki-client