Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a13afdf4-ce0e-33dd-9790-3d5f69bf27d9.roa
File:                     a13afdf4-ce0e-33dd-9790-3d5f69bf27d9.roa (raw, json)
Hash identifier:          H3fzqeQn+u7CnqQZ9Xqs69E611Ma43L9z0y/kLMWgZ4=
Subject key identifier:   D0:6E:AD:68:8B:5B:75:7C:78:4C:7D:F7:39:40:95:DB:AE:D4:25:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A7E7B79914A7DA9C33234F280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a13afdf4-ce0e-33dd-9790-3d5f69bf27d9.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        107.167.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:79:91:4a:7d:a9:c3:32:34:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=42739683-342b-41d9-97d6-808dfcedabf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:64:5f:bd:2f:31:08:a9:b3:eb:9d:7f:00:
                    87:56:c9:0c:e4:4d:c6:0a:70:19:cb:0c:b7:4f:05:
                    49:26:cc:eb:f2:6e:26:93:91:6c:bc:31:8b:71:db:
                    13:b3:4f:6f:01:a4:12:92:3c:f0:45:f5:22:45:fd:
                    83:00:9c:8e:26:76:8c:b7:72:0c:c1:10:9c:23:fe:
                    fd:11:2f:96:4e:15:43:de:75:fd:2f:64:10:84:67:
                    57:f2:4f:cf:b0:88:f5:63:18:70:9d:3f:99:77:b0:
                    18:55:74:c2:e0:c0:0d:98:b6:96:c9:42:47:da:b8:
                    2f:15:e5:6b:5b:9c:21:29:80:c3:01:35:de:d0:49:
                    5d:db:c9:a5:16:34:74:ce:f0:71:34:35:15:27:3b:
                    e0:aa:f2:e0:7b:d4:56:f6:b2:0a:57:a5:2f:89:f0:
                    5c:d9:66:cc:fc:86:6d:b8:da:d6:f2:52:80:c1:43:
                    73:c7:87:eb:96:02:c0:51:17:52:32:bd:a6:da:78:
                    6f:0c:ae:97:d6:8a:71:02:2d:9c:d1:99:fb:f6:ef:
                    c7:0e:fe:d7:20:ed:7f:4a:8f:3c:cb:9b:76:dd:9f:
                    f0:2d:ee:4b:b9:ba:ac:68:4a:f7:89:fc:bb:23:eb:
                    83:f9:20:f7:52:a5:8b:f2:60:a1:a2:b6:e3:4d:e4:
                    85:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:AD:68:8B:5B:75:7C:78:4C:7D:F7:39:40:95:DB:AE:D4:25:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a13afdf4-ce0e-33dd-9790-3d5f69bf27d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:d4:13:91:f9:46:11:18:31:c3:ee:e4:48:c4:e3:ad:f2:
         a9:16:f7:89:41:64:7c:ce:b4:03:b0:a9:2d:29:dc:ee:ac:c0:
         f3:79:9c:11:c6:41:e6:7c:db:73:38:9d:4a:12:18:c5:ba:54:
         e4:78:50:aa:3b:f0:af:a1:69:3e:5c:b3:c3:1e:c1:85:de:6e:
         ff:ba:c6:7c:f3:14:4a:47:71:37:98:9c:21:bc:95:65:4c:58:
         7e:e2:73:b6:41:35:fc:24:6d:36:85:86:29:c3:ba:04:5d:0f:
         55:1c:26:cc:b1:40:75:b3:9f:48:cd:e4:ab:61:0b:6d:71:b3:
         b1:89:1d:ea:25:d1:fb:9d:29:4f:02:b5:5a:bc:23:f3:88:48:
         b7:26:88:66:83:62:b6:c1:08:99:c5:72:91:d3:c6:d4:15:eb:
         68:06:75:d2:f6:67:36:cb:ee:5f:79:d4:26:8b:22:95:4a:cc:
         00:43:48:22:ea:2e:bc:80:4a:83:82:b7:dc:a2:df:34:de:79:
         09:5d:dc:06:f6:a0:0d:d4:84:e5:a5:d5:c6:0b:ae:99:0d:fe:
         38:8f:e8:4f:0d:01:50:82:78:96:23:5f:fd:19:8b:79:0c:87:
         a2:6c:17:4e:d3:d7:72:d7:29:37:86:ef:de:1d:ef:93:d4:4e:
         5c:78:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:33:45 2025 by rpki-client