Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c38fe621-769b-3e3c-891b-6340fe748a2d.roa
File:                     c38fe621-769b-3e3c-891b-6340fe748a2d.roa (raw, json)
Hash identifier:          N1h4ncewe2i2LGcNIBXkHw2CBFHFRsLs8TGMd7nBcic=
Subject key identifier:   00:9E:A2:C8:6B:8D:B0:7D:C6:C1:B2:7A:6D:FE:CE:DA:F9:C5:7F:C1
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A612B17B5BCCB42A0C59B3000
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c38fe621-769b-3e3c-891b-6340fe748a2d.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     13768
IP address blocks:        65.39.184.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:17:b5:bc:cb:42:a0:c5:9b:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=343869ff-d6b2-4c71-8b74-efbea3891c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:8e:8e:ac:4f:b8:1a:17:84:05:6b:c4:98:
                    e2:44:93:91:3b:ac:4f:00:f3:4d:e6:94:b7:fd:ac:
                    39:bc:4b:73:3e:f7:97:7e:65:31:6b:ca:9c:f9:0e:
                    02:c3:69:5e:d5:96:39:98:cf:cf:5e:31:50:e1:97:
                    95:eb:bb:ae:b2:16:aa:bb:09:7e:7d:04:d1:32:d0:
                    86:30:88:d4:cb:2a:f5:e9:5c:9f:78:72:0e:ed:21:
                    ad:02:0f:a5:36:7e:48:c4:9c:16:45:68:2e:13:94:
                    c6:86:ad:5e:da:49:f1:75:60:6b:b6:20:96:ea:d0:
                    88:7b:ce:65:31:47:23:94:a1:66:95:96:4a:c4:90:
                    97:f2:6f:a5:ee:e0:0d:af:1b:37:76:36:68:a8:c8:
                    d4:3d:03:80:8b:dc:71:da:a5:04:db:ab:4d:0a:66:
                    a6:7a:fa:a1:75:3e:20:03:47:ef:be:c8:7f:5e:ba:
                    82:b2:90:d9:ed:12:cf:9f:9f:53:0f:8c:13:84:7e:
                    c6:3f:71:99:11:ba:ba:44:00:bc:09:e2:ce:05:4c:
                    56:04:3a:85:9e:f4:f3:c2:58:ea:0b:9d:a1:b8:af:
                    6a:ad:c9:52:8d:6c:ae:42:10:1c:7a:ac:8c:52:24:
                    eb:98:3d:bb:4e:b2:2a:05:ea:85:66:19:e7:5a:4a:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9E:A2:C8:6B:8D:B0:7D:C6:C1:B2:7A:6D:FE:CE:DA:F9:C5:7F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c38fe621-769b-3e3c-891b-6340fe748a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.184.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:da:bf:db:36:ed:7b:86:f3:dc:69:30:9f:07:a3:1c:71:7f:
         e0:99:11:fb:f9:1c:8f:1e:0e:ad:08:1c:14:74:1f:7a:43:08:
         36:b1:fc:5d:1d:32:6f:8f:09:a7:8a:7a:8d:3c:6c:27:12:29:
         32:2b:fc:42:07:f4:d5:78:87:f2:fd:46:59:ca:dc:14:a6:0a:
         0e:54:da:d7:b9:1a:fd:fc:55:fc:04:11:71:bb:8e:ad:f1:8c:
         e8:49:94:da:57:5a:d7:fb:52:b6:c7:26:2b:59:3a:79:89:3f:
         6b:62:71:6c:87:0f:c4:be:bb:2e:be:00:8b:80:25:4d:40:ca:
         09:fa:2d:3a:41:b6:35:4d:4e:04:69:b1:4c:38:1b:9d:0b:b3:
         d9:7b:f9:00:5f:59:e8:5f:76:0e:00:32:7d:6e:f9:77:ed:8f:
         4e:cf:55:73:7f:41:b8:86:28:da:3d:0b:b7:3d:02:cb:ee:19:
         93:13:3b:cd:e4:61:eb:77:67:2e:f8:97:ea:a8:a6:81:70:41:
         61:15:d9:6a:d9:1b:7a:aa:2f:fd:08:fc:4c:ed:76:bd:6c:3d:
         d1:ac:c2:cf:42:74:91:9b:2a:5b:ab:b7:f2:39:bd:c9:2b:63:
         fa:f1:16:d0:99:69:4c:75:61:60:d4:25:0d:3b:e1:a5:f2:a4:
         77:b4:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:27:30 2025 by rpki-client