Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/3bf447c4-330f-3c13-bf0b-98001169c4f2.roa
File:                     3bf447c4-330f-3c13-bf0b-98001169c4f2.roa (raw, json)
Hash identifier:          35xvxlcFldMJJ1HyrzhAxwAEVb2liFvKKGJy/9Gm0YU=
Subject key identifier:   37:24:48:1B:2D:F2:B7:33:11:60:51:E9:1B:35:AE:A1:36:4D:D8:72
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584A76475B7761C834E1336EFF00
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/3bf447c4-330f-3c13-bf0b-98001169c4f2.roa
Signing time:             Wed 09 Jul 2025 14:29:55 +0000
ROA not before:           Wed 09 Jul 2025 14:29:55 +0000
ROA not after:            Tue 07 Oct 2025 14:29:55 +0000
asID:                     198100
IP address blocks:        216.238.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:47:5b:77:61:c8:34:e1:33:6e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jul  9 14:29:55 2025 GMT
            Not After : Oct  7 14:29:55 2025 GMT
        Subject: CN=bd8d2b23-619e-455c-8f80-8fdc247c4d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:a8:28:43:00:53:53:10:3b:59:7d:2c:fc:
                    d3:0a:e4:c9:15:f8:e9:84:97:ef:0c:17:31:cd:27:
                    1f:76:d5:7e:0f:83:af:40:22:aa:6e:da:00:f0:a7:
                    86:0d:f2:91:f7:6f:2e:f1:fc:58:b5:40:26:a7:f4:
                    9e:b3:9d:b8:b4:aa:58:0e:19:6e:15:33:b3:98:b3:
                    f8:c5:0a:dd:c1:49:71:59:0a:fa:41:61:2b:b4:61:
                    40:31:85:34:1b:78:19:f7:a4:8e:67:c5:c9:f3:99:
                    fc:29:17:20:d8:6c:50:df:a1:6a:1a:9c:ff:79:6c:
                    3d:a8:a5:82:2e:d3:b0:65:d3:9c:7d:6a:c5:d4:57:
                    1f:88:8c:82:6b:ea:79:f0:6f:61:89:4a:f4:95:b4:
                    cb:52:aa:86:c8:90:2e:4a:42:69:69:e1:34:25:41:
                    21:da:dc:1e:6f:c1:45:42:2b:ef:88:05:aa:f6:b9:
                    e9:c0:4c:7b:d3:e3:ea:62:9a:9f:29:4f:fa:83:ab:
                    cc:8d:36:3c:dc:33:f1:a8:70:3f:bb:c3:f9:13:05:
                    f2:4a:9e:6b:45:3e:a6:8f:b8:5b:44:ed:da:db:50:
                    ad:dc:77:cc:6f:b4:0f:63:70:4b:28:55:2e:31:8d:
                    50:31:73:11:3d:d8:41:b0:c0:ac:13:8b:c6:bd:82:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:48:1B:2D:F2:B7:33:11:60:51:E9:1B:35:AE:A1:36:4D:D8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/3bf447c4-330f-3c13-bf0b-98001169c4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:5b:b8:bf:6c:4d:7f:cf:e8:80:49:b2:4f:f9:ca:00:15:
         f7:13:0f:fa:bb:9c:72:38:06:28:0a:ea:ed:9c:fe:a8:1d:fc:
         fc:f8:f1:3f:44:16:33:50:c8:a6:1f:fe:ea:e1:d7:81:03:df:
         6f:4e:58:d3:6e:27:b1:45:a2:43:9b:02:b0:ac:10:8c:14:21:
         ee:cb:2c:e8:69:25:f9:c0:a7:bf:78:bb:b4:97:48:a0:9b:a8:
         79:08:c7:77:72:91:2c:69:10:9e:a0:be:01:6c:0d:62:8d:50:
         0c:df:8e:ff:ec:52:75:20:33:09:b4:7d:d6:f5:58:e8:43:be:
         c1:a0:b5:f8:85:b4:07:bb:66:33:e1:da:ae:84:7c:62:68:ed:
         1e:c1:c2:74:07:3f:89:f1:46:28:23:29:d4:42:c9:51:1b:b0:
         a7:08:31:26:27:b5:fd:3a:db:65:7a:47:5b:22:e4:6f:49:d2:
         31:e5:65:d9:3c:c4:2d:a5:dc:c3:c0:98:1b:40:7c:0b:fa:a6:
         ad:f8:43:9d:73:9e:3f:11:67:e7:91:47:84:d5:73:ee:47:68:
         56:11:27:00:3f:4d:14:be:3c:56:b9:ca:7c:2e:55:a6:92:b2:
         08:cd:d8:d2:bf:b3:ab:dd:5b:ef:ac:14:14:3f:6b:d1:c4:b4:
         d3:d5:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:01 2025 by rpki-client