Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/5c5a8b8d-db58-3153-8adf-8bece9b9cb75.roa
File:                     5c5a8b8d-db58-3153-8adf-8bece9b9cb75.roa (raw, json)
Hash identifier:          qZ16Svpbopl/5sXmhwleI2Mw70Q8NLbJvc/ipwRukoc=
Subject key identifier:   C3:9A:D1:7E:50:C7:8E:94:9E:F4:C5:07:C8:36:87:E4:90:BE:04:E1
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F43285849E7BA7446E56A1F95B1CFAC80
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/5c5a8b8d-db58-3153-8adf-8bece9b9cb75.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        161.38.57.0/24 maxlen: 24
                          161.38.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:74:46:e5:6a:1f:95:b1:cf:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=abf83a63-4159-42e3-b0ed-1a75fced506f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:16:20:b8:ae:17:42:01:c5:0b:f3:60:6f:
                    43:ab:0a:d5:30:18:07:73:39:b7:cf:bd:0f:62:14:
                    af:f4:79:e7:33:bb:ad:fe:9d:ae:7b:37:97:19:c6:
                    86:0c:14:b4:20:2b:e1:a3:d3:6d:93:b1:fb:da:32:
                    a0:39:d3:fc:9d:ae:62:6c:37:91:bf:6b:01:67:8f:
                    81:ca:de:14:2d:4e:65:a6:e6:58:a9:41:c4:a4:9f:
                    ba:02:21:91:85:c6:82:5f:78:3b:ab:33:ed:68:39:
                    42:b3:7b:62:99:07:c0:a4:53:67:1e:f7:6a:89:32:
                    df:80:b2:6e:47:82:b4:36:b4:83:8d:16:d1:8c:e0:
                    01:96:df:8b:6f:16:f9:18:af:04:4f:cf:03:fd:9a:
                    ed:f8:d4:ef:8c:f3:82:d8:46:9e:df:a3:97:bf:d6:
                    04:e6:63:39:7c:e8:9b:40:df:46:f5:48:fd:6f:e6:
                    fe:73:14:b8:ec:a3:eb:0c:d6:be:ce:c7:6d:70:00:
                    1f:85:d0:ea:20:09:fa:b4:04:8a:fa:3e:ec:2d:21:
                    3c:9f:e2:25:2c:08:e4:68:b4:f1:d8:6e:b7:f5:e8:
                    9a:10:ee:b6:7e:68:3a:8e:d2:ce:04:72:69:16:d4:
                    5a:f5:60:1c:fd:45:2f:62:70:89:70:28:22:c5:01:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:D1:7E:50:C7:8E:94:9E:F4:C5:07:C8:36:87:E4:90:BE:04:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/5c5a8b8d-db58-3153-8adf-8bece9b9cb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.57.0-161.38.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:69:ab:47:6e:7a:5e:06:0f:5a:eb:b0:5c:6b:52:6b:24:
         42:59:ba:b9:c6:aa:aa:05:f0:36:9a:2f:a8:ed:69:1c:77:a5:
         dc:32:9c:2e:16:a3:03:2c:0a:98:75:21:c1:4f:4f:7c:0f:d5:
         be:55:35:a0:de:87:21:8a:e1:6e:f4:d1:f3:ac:18:57:91:e5:
         4b:39:e0:68:f2:56:2e:b7:c1:d3:0d:da:45:fa:59:9f:3d:4c:
         7c:7d:16:2f:73:5a:33:b0:29:63:73:46:bb:d0:4c:cb:1f:cc:
         60:15:e8:da:b2:0d:7f:d2:c2:5d:88:04:4c:62:88:a3:c1:59:
         71:56:e1:d4:54:3e:7b:33:4e:df:a4:b6:99:f6:64:7a:52:2f:
         c5:dd:01:e4:0e:dd:47:65:74:59:08:24:fe:13:c6:92:09:0f:
         e1:38:5f:30:ad:03:56:31:a7:db:0d:c9:bf:27:30:55:16:33:
         83:e5:0e:8f:b9:b1:2f:c3:6b:11:c3:04:45:49:91:a4:1d:ff:
         2a:bb:d2:37:27:9a:68:49:66:de:5c:9c:6e:a7:0e:ef:27:45:
         6b:04:56:c1:43:ff:a2:41:8b:c3:fa:93:ab:e6:cf:19:4a:22:
         6c:1b:0c:55:7b:8f:64:be:88:19:f8:cf:4e:6d:51:3a:be:b5:
         86:d7:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:58 2025 by rpki-client