Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/765232e8-95be-3a0f-b6ee-29c039132e89.roa
File:                     765232e8-95be-3a0f-b6ee-29c039132e89.roa (raw, json)
Hash identifier:          S9CBDf/dBGImPUFwXi+g/3A8/N5+nydfmM0ylODF5rI=
Subject key identifier:   37:D1:37:F2:27:18:45:BF:60:11:EA:36:31:74:FA:7F:72:C9:4C:93
Certificate issuer:       /CN=5612fc31-f950-45ed-88e4-c18bd8b0d916
Certificate serial:       010D0C9F4328584A9A66366522DC18A6F0D579C0
Authority key identifier: 32:05:A7:8D:81:AE:52:08:38:44:66:F2:B3:6C:D4:6F:7E:AA:50:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/765232e8-95be-3a0f-b6ee-29c039132e89.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     198949
IP address blocks:        204.58.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:36:65:22:dc:18:a6:f0:d5:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5612fc31-f950-45ed-88e4-c18bd8b0d916
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=891ef4cd-bd05-4451-b8d1-7141d3fd6b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:3b:ce:dd:88:57:b3:7a:80:93:0b:09:98:
                    5b:7d:8e:f8:2a:ad:b1:56:90:d9:29:42:6d:2e:bf:
                    63:58:c1:6f:7c:f3:a7:fc:5e:6d:98:e2:40:8e:2d:
                    53:de:37:bf:ce:67:14:e5:cd:32:22:d8:ba:75:4a:
                    27:81:10:01:38:5e:e5:c7:0f:af:c0:39:10:b3:23:
                    8d:27:61:1c:78:40:89:94:54:b2:48:14:6a:da:6f:
                    5d:04:ae:32:d0:83:8e:a2:44:a1:df:4e:d0:6d:e7:
                    cc:2c:3d:d5:1b:cc:61:74:42:e2:83:ba:7f:89:c5:
                    3f:8e:08:73:3b:52:ae:44:71:6f:2a:db:6d:a1:b9:
                    7b:c8:35:f6:cf:c7:28:01:a6:59:1a:fc:8a:ef:66:
                    ba:34:b5:2e:0b:5b:0c:58:20:3a:23:23:2d:5c:8f:
                    70:f8:e0:38:16:f8:15:ac:9a:6a:1b:b2:13:76:b0:
                    21:64:77:87:aa:1a:4d:51:cb:9b:60:cf:c6:cc:0d:
                    13:d3:88:e6:5c:37:2e:58:4c:33:52:75:bb:ff:6b:
                    c5:f3:8c:c3:a2:3c:86:a4:01:20:f5:2b:76:0c:cf:
                    07:c3:b5:5e:8c:90:6c:de:22:1f:b4:b3:c1:2d:98:
                    58:9c:e4:4b:55:7b:12:ca:8f:36:48:65:f7:fc:58:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D1:37:F2:27:18:45:BF:60:11:EA:36:31:74:FA:7F:72:C9:4C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/765232e8-95be-3a0f-b6ee-29c039132e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916/5612fc31-f950-45ed-88e4-c18bd8b0d916.crl

            X509v3 Authority Key Identifier:
                keyid:32:05:A7:8D:81:AE:52:08:38:44:66:F2:B3:6C:D4:6F:7E:AA:50:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5612fc31-f950-45ed-88e4-c18bd8b0d916.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.58.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:2a:fd:b4:83:f4:b7:e9:9d:63:f0:8f:b5:ec:c5:8d:b7:
         4a:6e:a1:a4:41:e1:73:1d:b3:16:1d:27:9d:93:99:6d:a8:72:
         44:f7:81:7c:76:39:a2:fb:41:56:f6:09:0c:10:69:43:6a:6b:
         02:88:45:10:70:d0:a2:39:79:e4:c1:dd:e1:77:26:7a:41:83:
         63:a4:12:75:25:ff:a4:a0:01:35:38:d8:7a:ed:11:b3:a2:2d:
         ee:d4:9e:a8:2e:02:2b:0e:b3:49:9e:4c:26:5d:92:b8:cd:0c:
         89:b8:9e:05:8e:97:54:88:fd:d4:ab:75:a6:d0:0b:85:ec:74:
         5c:9c:eb:81:99:b0:5a:84:ab:57:11:f1:c3:c0:4c:df:a7:0c:
         4e:e2:55:4b:15:0c:72:5a:67:6e:8a:e9:26:39:36:5a:8c:b0:
         f0:a6:f7:75:ce:d1:a6:8a:c1:81:69:ea:28:eb:92:b6:fc:4e:
         24:1a:cd:f0:d9:cc:8e:6a:16:17:ec:74:4a:07:7e:bc:bd:2d:
         09:46:37:5a:ae:5a:83:fc:40:d9:b5:ce:01:f5:df:af:8e:e7:
         b3:c4:b0:a2:e6:62:b0:42:3f:79:a1:e4:31:d4:f3:45:80:da:
         19:73:06:49:44:17:1b:8e:75:40:36:78:64:e8:e4:df:0e:ef:
         ae:c0:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:33:08 2025 by rpki-client