Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0abe099-e984-3f1f-a8f5-e2f0a1fdc339.roa
File:                     f0abe099-e984-3f1f-a8f5-e2f0a1fdc339.roa (raw, json)
Hash identifier:          fjN3PR83+R0wfKYBTZx93/4I7A67Bt9mirhFPV1BgMs=
Subject key identifier:   06:4E:12:E6:83:38:DB:88:88:48:D5:04:EF:E4:32:7C:8F:41:2C:80
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68261E803BF11D0F881325C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0abe099-e984-3f1f-a8f5-e2f0a1fdc339.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397236
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:1e:80:3b:f1:1d:0f:88:13:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=cfd0f265-edd5-4412-9aa1-05949866c22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:2a:fe:86:99:57:2b:7a:f0:c3:4a:65:86:
                    2b:56:0e:27:a8:7e:39:93:9e:16:ba:62:0b:c3:db:
                    69:88:36:49:64:3e:c0:ea:55:80:8d:5f:7c:27:96:
                    39:72:dd:33:bd:65:76:bf:b1:7f:a6:f7:31:07:d4:
                    07:60:65:ac:b5:f9:c6:2c:68:41:0b:0d:02:7e:2f:
                    e3:e7:8d:00:59:ee:5e:a4:08:5c:08:8a:67:74:59:
                    61:65:a5:43:36:54:76:9a:f3:80:c1:da:ce:32:1b:
                    aa:24:c7:a0:38:2f:cc:8c:2e:22:5a:6b:f3:1a:99:
                    e5:05:0d:3e:fe:55:43:d3:cb:16:55:f6:47:f0:1a:
                    72:68:06:6c:b5:1c:12:2b:05:75:59:ec:c1:d2:4b:
                    a8:ae:a2:98:ef:a0:c0:08:76:cd:c3:58:14:ec:ef:
                    71:b8:bb:cc:5b:70:6f:f6:e6:f1:b6:2f:88:2f:b2:
                    33:7e:fa:da:d8:08:21:5d:76:ee:d7:86:2c:66:5b:
                    8e:20:55:d3:36:e8:bd:1a:58:99:98:86:a5:e9:c0:
                    83:6d:6a:51:9d:04:89:bd:9f:00:1e:41:5c:d0:1b:
                    fe:b1:10:46:23:bc:fc:24:36:cb:68:d1:38:e2:4d:
                    27:92:84:5f:1c:b2:e1:66:0d:c2:84:3a:f9:86:31:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4E:12:E6:83:38:DB:88:88:48:D5:04:EF:E4:32:7C:8F:41:2C:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0abe099-e984-3f1f-a8f5-e2f0a1fdc339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e6:18:a5:bb:fe:74:a1:97:c6:72:a7:78:df:07:6e:8c:7b:
         42:e3:2a:7e:1f:bd:85:8a:10:a3:a8:28:53:8a:9d:6f:34:ea:
         2e:7b:65:6c:f8:57:49:f8:e7:a3:f3:3c:98:d0:d9:55:d3:e4:
         54:f1:73:19:d7:a4:14:c8:56:1c:be:ff:d5:7f:87:ee:46:ef:
         30:7b:6d:7b:25:2f:35:4c:69:14:e7:b2:78:d3:de:56:66:8a:
         aa:cc:1b:00:01:11:5a:d7:f1:f2:4e:55:c5:e5:bc:dd:9a:6c:
         1f:bd:82:31:f2:a3:76:20:87:91:15:6a:1a:78:11:f6:77:b2:
         58:82:4f:d0:20:f2:71:81:b7:95:b7:22:42:2d:08:2e:3e:43:
         04:b0:78:e6:33:2f:7b:7d:ff:7c:7a:8c:06:3d:c8:f0:df:b9:
         21:1a:a6:4d:c5:7e:b6:fa:e6:02:1a:f4:74:08:0e:6e:5f:a5:
         fd:52:a8:27:8c:40:de:cc:91:36:60:12:e5:c8:a2:af:fa:b8:
         df:42:0f:a5:f4:8e:a6:20:50:62:6f:24:b0:16:cf:a5:57:c3:
         5e:70:ab:35:b2:21:82:a5:29:92:f3:da:00:ac:d3:86:02:db:
         c4:65:c0:f6:39:0d:24:07:d8:d8:3b:2c:5d:41:50:07:47:64:
         76:01:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:39 2025 by rpki-client