Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa
File:                     5c3108b3-4900-35c3-86a1-e25092452588.roa (raw, json)
Hash identifier:          9RYWQjXjyUPW1k8JeNA3pBfBD1UTI4nGCGG1R1hOKUo=
Subject key identifier:   02:01:3C:DC:92:85:B1:0D:D9:3C:99:FE:82:50:7C:54:48:02:6C:98
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE09688D0F3647612502780
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     931
IP address blocks:        170.39.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:96:88:d0:f3:64:76:12:50:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=9b819265-1243-444d-9c55-5d6753a517b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:6a:46:27:9f:fa:82:52:9e:6b:5c:c7:8d:
                    94:97:f6:c9:a0:ec:7b:a4:26:ca:cb:e9:5f:f7:cc:
                    0f:46:c4:0e:6a:5f:17:50:47:d1:4a:40:59:87:52:
                    db:d0:14:d9:85:f6:dc:30:ee:8b:45:08:98:9d:0c:
                    78:06:63:5b:9c:ed:f3:f8:29:c0:4e:c7:9f:49:80:
                    2f:2d:ec:a9:85:cc:98:35:1d:9f:d4:fe:fd:6e:18:
                    c0:e1:f1:db:be:ca:83:8a:6d:d5:55:4e:5e:31:71:
                    d3:32:ec:58:7e:d0:34:1f:6e:8a:ff:72:62:84:99:
                    b8:b2:c4:b7:3c:b5:26:40:0f:73:c6:c2:b1:d4:cb:
                    07:5f:d1:c0:f2:f6:32:3c:88:9f:9a:f3:18:48:e1:
                    28:74:50:0f:6a:22:d2:81:fd:55:66:4e:72:f4:e6:
                    79:b9:68:be:6a:72:3a:83:cf:bb:04:7b:13:fb:d4:
                    9c:1f:15:f4:db:4c:4a:ab:a8:db:e1:b0:b5:b7:2e:
                    93:d7:b3:fd:97:27:13:ed:22:9c:2a:3e:55:74:b6:
                    5e:fd:87:8f:99:53:f1:a5:fa:ab:33:c8:cd:0f:4a:
                    95:2d:ce:e6:50:9a:7d:04:5a:23:cb:ad:87:4e:71:
                    0c:5d:42:05:fe:db:5a:8e:47:85:fb:e7:03:f8:aa:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:01:3C:DC:92:85:B1:0D:D9:3C:99:FE:82:50:7C:54:48:02:6C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/5c3108b3-4900-35c3-86a1-e25092452588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0d:c0:a5:a4:46:49:28:bc:e8:66:24:26:2b:27:1d:3a:b6:
         a1:ee:1e:2a:6e:20:40:5c:0c:44:7e:86:ae:1f:a3:44:5f:5a:
         e5:0d:82:87:e4:6a:5c:52:57:57:1a:74:27:84:30:8f:c5:1e:
         cc:6c:21:51:ee:8c:c2:50:4e:02:37:18:c3:c9:7b:32:5f:60:
         56:dc:dc:d8:a8:85:df:c9:2d:55:62:0d:d2:39:53:37:12:c4:
         df:cc:74:39:f2:5d:5c:f1:0d:b1:ad:e4:6b:97:80:87:c9:10:
         02:f1:b3:2d:52:01:01:93:c7:5b:ad:2c:2b:75:aa:90:13:3e:
         17:95:8b:7f:64:f8:f5:39:45:cd:f2:bb:3d:51:08:01:28:f9:
         51:e7:b2:bc:74:83:02:74:cd:2b:fa:83:1b:1d:a7:26:91:03:
         c0:99:9e:a7:4c:25:bf:cc:7c:dc:19:5a:2c:f5:93:b4:c2:52:
         3e:0e:25:f5:b2:3b:6c:1b:ca:cc:37:9b:9e:8f:51:9e:62:fb:
         61:89:bc:36:4d:c8:1a:7d:ae:09:cb:8d:ed:ad:1e:13:90:ce:
         47:24:3e:a5:ec:6a:b4:89:0d:78:01:af:22:e2:49:96:90:99:
         b3:02:dc:87:14:9a:9c:21:23:ea:cd:f2:16:11:a3:c8:e6:a1:
         d7:28:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:13:24 2025 by rpki-client