Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d697b2a0-51cc-36c0-94cb-a4e3b956d688.roa
File:                     d697b2a0-51cc-36c0-94cb-a4e3b956d688.roa (raw, json)
Hash identifier:          9TYc/x45DYd2WY21GF7HP97MDIxcmMgrK/Yybr3dHnU=
Subject key identifier:   CF:88:7B:0A:29:A1:FB:D8:F7:B4:14:F8:E9:0E:8D:AB:4F:D5:0F:10
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59FA2583CB05304D894C00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d697b2a0-51cc-36c0-94cb-a4e3b956d688.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397230
IP address blocks:        204.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:fa:25:83:cb:05:30:4d:89:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=62a5aa49-6e32-4a61-8344-6def0f14bf2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:66:bc:92:0d:c7:94:da:54:4d:b0:63:56:
                    36:f1:37:f1:71:fa:ef:18:c9:01:80:91:b5:12:3e:
                    72:f1:30:7c:12:57:e7:a3:12:c1:db:a8:66:60:c2:
                    c2:ab:db:0c:80:5a:d9:c1:6c:2d:a0:3e:5f:8c:78:
                    19:13:96:48:d9:81:b2:3a:4e:39:0b:99:5c:c4:33:
                    61:3b:95:1b:eb:3c:a9:d3:99:b7:d8:56:41:d3:43:
                    bb:2a:1d:0b:bc:6e:96:27:e5:89:bd:89:fb:cc:09:
                    73:01:10:c9:c1:d4:95:5d:d8:df:3c:f2:08:2b:53:
                    9b:34:22:c5:45:e3:aa:dc:0b:5a:a1:82:34:fa:a5:
                    fe:7a:92:77:1a:35:19:37:46:10:c8:86:de:d8:41:
                    57:28:0f:82:0e:a5:b8:02:a6:b5:3f:c5:58:cf:00:
                    29:7f:2f:32:8d:6e:61:8f:84:42:93:6d:f6:1a:67:
                    56:3c:45:40:4e:51:d6:27:da:eb:b6:51:cd:8c:cb:
                    83:2c:a5:17:58:ce:3e:18:1a:0f:47:02:61:89:3e:
                    e2:c4:ac:10:d7:c2:40:50:02:f6:4d:f9:7c:c2:04:
                    bd:93:f3:88:65:66:2b:cb:0e:ba:ab:d3:53:10:21:
                    3a:6b:73:62:f5:2f:3b:9b:44:1e:2e:df:58:c9:1a:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:88:7B:0A:29:A1:FB:D8:F7:B4:14:F8:E9:0E:8D:AB:4F:D5:0F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d697b2a0-51cc-36c0-94cb-a4e3b956d688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:31:f0:f3:e6:23:d9:5f:29:6c:2c:e0:3b:ac:f6:9b:4c:d9:
         a5:76:b2:9a:05:57:de:d8:ea:0a:cc:c0:66:30:9c:2c:5c:5d:
         cc:ee:fb:29:89:e1:9f:4f:dc:e9:c4:4a:47:02:19:64:d4:51:
         e1:5b:49:48:9a:47:05:e8:aa:2e:26:e0:d7:eb:86:8a:bb:cb:
         22:ec:ef:fa:cc:09:b3:9d:f5:e2:01:71:ce:6b:75:ba:bb:3c:
         04:6c:64:8d:33:45:28:da:96:71:df:72:94:be:61:82:a0:5e:
         bc:9e:d4:24:5a:22:be:d4:65:d1:74:fa:39:37:c4:a4:24:42:
         b0:dd:95:de:83:a2:76:33:22:58:b1:eb:dc:50:8e:12:2b:17:
         cd:74:ec:19:a0:32:33:65:8c:cb:e7:e0:e8:99:44:0c:71:93:
         52:1a:c7:c8:46:fb:c6:b6:c9:1b:88:c9:23:b2:21:2b:50:d3:
         65:f6:20:db:01:b5:d2:f7:ae:a1:a5:03:e9:5c:60:46:fa:66:
         07:95:71:16:a0:80:83:6c:5f:d0:49:f2:af:85:c9:cc:a3:8d:
         54:7f:a8:f1:84:cc:2d:5c:09:15:d0:cf:4b:17:bd:b7:80:cc:
         cc:b2:14:0c:a3:96:3f:71:f7:57:9e:d6:ab:00:eb:fa:f5:d0:
         9a:0b:70:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWfolg8sFME2JTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
NjJhNWFhNDktNmUzMi00YTYxLTgzNDQtNmRlZjBmMTRiZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1JmvJINx5TaVE2wY1Y28TfxcfrvGMkBgJG1
Ej5y8TB8ElfnoxLB26hmYMLCq9sMgFrZwWwtoD5fjHgZE5ZI2YGyOk45C5lcxDNh
O5Ub6zyp05m32FZB00O7Kh0LvG6WJ+WJvYn7zAlzARDJwdSVXdjfPPIIK1ObNCLF
ReOq3AtaoYI0+qX+epJ3GjUZN0YQyIbe2EFXKA+CDqW4Aqa1P8VYzwApfy8yjW5h
j4RCk232GmdWPEVATlHWJ9rrtlHNjMuDLKUXWM4+GBoPRwJhiT7ixKwQ18JAUAL2
Tfl8wgS9k/OIZWYryw66q9NTECE6a3Ni9S87m0QeLt9YyRquMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+IewopofvY97QU+OkOjatP1Q8QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDY5N2IyYTAtNTFjYy0z
NmMwLTk0Y2ItYTRlM2I5NTZkNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEptMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUx8PPmI9lfKWws4Dus9ptM2aV2spoFV97Y6grMwGYwnCxcXczu+ymJ
4Z9P3OnESkcCGWTUUeFbSUiaRwXoqi4m4Nfrhoq7yyLs7/rMCbOd9eIBcc5rdbq7
PARsZI0zRSjalnHfcpS+YYKgXrye1CRaIr7UZdF0+jk3xKQkQrDdld6DonYzIlix
69xQjhIrF8107BmgMjNljMvn4OiZRAxxk1Iax8hG+8a2yRuIySOyIStQ02X2INsB
tdL3rqGlA+lcYEb6ZgeVcRaggINsX9BJ8q+FycyjjVR/qPGEzC1cCRXQz0sXvbeA
zMyyFAyjlj9x91ee1qsA6/r10JoLcE4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:15 2025 by rpki-client