Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/6337b31d-0a61-34b0-9a1e-0110dca7c617.roa
File:                     6337b31d-0a61-34b0-9a1e-0110dca7c617.roa (raw, json)
Hash identifier:          hjfCCo2eQbT19q9744xoNHu+5AddjIG5loH1SYJgdZE=
Subject key identifier:   86:B0:C7:D9:F3:AD:B7:F5:DC:87:59:92:12:55:FA:83:D8:A5:45:4F
Certificate issuer:       /CN=39bc904e-c316-4e84-92fb-2339457361b2
Certificate serial:       010D0C9F4328584B4D11D468038940A181D11C00
Authority key identifier: 6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/6337b31d-0a61-34b0-9a1e-0110dca7c617.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     40102
IP address blocks:        160.253.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d4:68:03:89:40:a1:81:d1:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39bc904e-c316-4e84-92fb-2339457361b2
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=b4edc6e7-5b6a-407a-9609-b95d17fe0f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:d2:84:a6:50:f1:f6:59:ca:c1:77:9c:93:
                    12:34:29:1e:b0:aa:16:f0:08:f6:d6:18:1f:9f:92:
                    21:f8:8d:c6:1b:7c:32:5b:9e:7d:8b:f0:9f:11:a7:
                    17:19:a7:de:1d:a3:b8:39:0d:76:b7:5a:89:24:f5:
                    8b:29:07:c6:d2:76:24:e0:af:49:72:56:cf:79:8b:
                    f1:83:70:df:26:c1:c6:5f:44:ed:76:0e:ce:22:88:
                    18:05:e2:c1:2b:d7:b8:cc:ed:76:5a:b9:c1:e5:57:
                    6d:8f:4b:c8:c7:cb:34:07:3c:9b:55:2c:22:44:be:
                    60:07:5f:2c:5d:05:c2:a2:ff:51:99:93:72:c7:33:
                    dd:8f:ea:f6:eb:ee:5f:1f:99:35:64:3b:10:8f:25:
                    08:6b:b0:8d:90:34:c5:29:2f:33:10:45:c3:2b:1c:
                    cc:af:9c:d3:25:d1:90:3e:b1:48:df:13:70:69:ae:
                    35:e6:2d:a0:30:78:5f:a2:35:b9:b9:c5:2f:b4:5d:
                    59:4d:25:b4:0e:4c:6e:af:98:26:6a:4e:62:3e:79:
                    57:36:d6:29:32:3b:f9:48:dc:36:5f:9c:eb:5b:f2:
                    e7:4c:04:03:e7:f1:e0:fa:21:ae:e4:12:42:1b:d4:
                    9e:0b:c3:09:77:dc:27:64:9d:5a:d1:9f:71:37:4a:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B0:C7:D9:F3:AD:B7:F5:DC:87:59:92:12:55:FA:83:D8:A5:45:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/6337b31d-0a61-34b0-9a1e-0110dca7c617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2/39bc904e-c316-4e84-92fb-2339457361b2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:F3:74:64:84:3E:5A:9E:67:40:83:A9:E8:53:A4:32:38:AE:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/39bc904e-c316-4e84-92fb-2339457361b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f2:ad:f4:96:c5:28:fb:04:d3:a6:3b:60:33:0e:79:6e:fc:
         f2:69:19:a9:6a:08:0c:7a:8f:43:3c:7f:dc:e1:34:9e:f4:7d:
         4c:50:e0:23:b9:59:50:1f:c2:08:12:22:0c:65:86:99:7e:91:
         58:40:d9:a8:f9:83:e0:5b:c0:b7:43:b3:b9:dc:74:c8:85:01:
         9d:3c:ba:48:16:41:09:e7:46:8e:bc:18:c9:eb:f7:cd:8d:f6:
         d5:66:af:4d:57:90:a1:12:a1:77:14:70:9e:66:bd:10:5e:28:
         e3:0b:61:7e:ad:5a:f0:7d:3c:c1:48:eb:d3:00:25:36:59:f5:
         03:2f:0c:98:ef:43:02:86:0c:9f:ed:1d:7f:cd:ec:2f:cc:de:
         bd:15:8e:fb:fc:9b:90:48:ca:50:52:7a:2a:9c:bc:41:bc:3c:
         f6:38:3c:1a:55:0a:c4:54:ae:21:58:60:77:c6:10:ba:9a:4c:
         f0:e1:45:18:6b:92:72:09:f1:80:a9:26:35:f7:b9:83:81:32:
         ef:51:13:d3:28:24:af:26:57:cb:3e:83:9e:cd:17:04:c1:50:
         c9:71:cf:b4:d3:07:36:cc:3e:27:8c:11:3a:2a:5d:a0:69:19:
         62:a1:8f:a5:62:b1:f1:23:c8:03:2e:89:8a:70:f6:f4:d0:83:
         02:a8:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:08 2025 by rpki-client