Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/39aca870-b6a7-3cf1-a719-5bb99dfcb408.roa
File:                     39aca870-b6a7-3cf1-a719-5bb99dfcb408.roa (raw, json)
Hash identifier:          swS7LuStGW3uaygCWt+YdaBmf+Se7k/ODdpptppOjgk=
Subject key identifier:   C5:06:5A:7F:D4:F2:6D:00:FE:60:C2:77:56:E1:D2:8E:E8:DF:5E:AD
Certificate issuer:       /CN=3feec52d-ec77-4869-a96c-bed4aa519781
Certificate serial:       010D0C9F4328584B0A115F75D583E3824D03AA80
Authority key identifier: DA:6F:E9:A2:F5:75:58:68:74:D1:A7:22:FB:3C:06:33:80:E6:0A:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/39aca870-b6a7-3cf1-a719-5bb99dfcb408.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     36710
IP address blocks:        23.132.32.0/24 maxlen: 24
                          23.132.33.0/24 maxlen: 24
                          2620:138:6000::/48 maxlen: 48
                          2620:138:6001::/48 maxlen: 48
                          2620:138:6002::/48 maxlen: 48
                          2620:138:6003::/48 maxlen: 48
                          2620:138:6004::/48 maxlen: 48
                          2620:138:6005::/48 maxlen: 48
                          2620:138:6006::/48 maxlen: 48
                          2620:138:6007::/48 maxlen: 48
                          2620:138:6008::/48 maxlen: 48
                          2620:138:6009::/48 maxlen: 48
                          2620:138:600a::/48 maxlen: 48
                          2620:138:600b::/48 maxlen: 48
                          2620:138:600c::/48 maxlen: 48
                          2620:138:600d::/48 maxlen: 48
                          2620:138:600e::/48 maxlen: 48
                          2620:138:600f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5f:75:d5:83:e3:82:4d:03:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feec52d-ec77-4869-a96c-bed4aa519781
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=f825391b-7cd2-4440-b395-18bb86f2fdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:af:35:97:5d:a5:c4:cc:20:ac:cc:90:ca:6d:
                    59:32:d7:b4:43:7c:54:a4:56:a9:03:64:af:f4:72:
                    23:4e:f2:71:ae:a4:72:f0:18:e3:8e:c8:5c:de:1d:
                    40:d8:71:53:6d:17:e4:8e:ec:5d:ca:f8:0d:eb:cc:
                    dd:d1:dc:a8:ad:de:c2:15:03:be:93:a9:45:fc:b5:
                    ad:c7:87:f5:79:e3:24:c3:b2:ca:87:ad:fa:e9:46:
                    8c:1b:14:91:d1:4a:3b:98:28:90:b8:14:70:76:56:
                    6a:d9:3e:b4:db:16:27:20:aa:53:5c:eb:94:89:29:
                    d7:a1:6d:5c:45:e4:cd:2e:34:80:16:6b:2f:14:89:
                    fc:91:64:60:48:3e:29:65:e2:f2:de:6c:df:e3:7c:
                    59:b5:1c:88:2e:13:e9:94:05:84:7e:0c:b4:c2:83:
                    be:c1:0a:36:2f:1a:dd:05:16:53:6d:f4:2f:ba:0a:
                    3e:55:91:2f:69:5f:3c:6e:c3:8c:25:b4:7c:d9:97:
                    8e:de:32:05:43:3c:79:9a:53:09:9e:80:23:b4:f6:
                    76:68:92:16:5e:e4:3e:eb:67:14:c7:e0:d9:d7:0e:
                    a8:1d:37:c4:11:43:c1:a8:b4:7e:fe:08:6b:47:06:
                    17:eb:87:30:7f:8a:54:91:ff:96:c8:21:a2:f9:de:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:5A:7F:D4:F2:6D:00:FE:60:C2:77:56:E1:D2:8E:E8:DF:5E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/39aca870-b6a7-3cf1-a719-5bb99dfcb408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.crl

            X509v3 Authority Key Identifier:
                keyid:DA:6F:E9:A2:F5:75:58:68:74:D1:A7:22:FB:3C:06:33:80:E6:0A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.32.0/23
                IPv6:
                  2620:138:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:67:61:63:5c:2a:c5:c1:62:36:d6:e7:a8:41:4f:a4:da:71:
         77:88:14:17:35:d1:02:47:f4:bc:a5:27:84:f8:37:e5:db:26:
         5b:88:89:ab:ba:f7:37:4a:76:95:3f:0a:09:c8:54:45:e4:a4:
         e8:80:b5:1c:8e:fc:2c:df:96:c9:41:f8:0f:bb:f5:97:69:6d:
         d0:1f:85:ff:07:9a:6e:da:70:8a:67:34:20:f2:61:4d:69:14:
         8b:57:37:d3:b0:87:97:27:bb:5b:d7:90:e1:6c:8f:39:79:69:
         a9:f9:2f:b4:50:dd:28:d7:18:91:7d:a6:d2:42:05:b5:bf:57:
         b3:5b:f7:05:f6:61:8a:54:02:07:74:4c:f1:79:1f:1f:34:b2:
         5d:da:4a:db:71:08:0f:a0:6b:3c:7c:70:85:6f:11:88:08:46:
         eb:99:55:9d:db:03:96:bd:5c:d1:b4:7d:90:47:dc:de:2f:47:
         70:3b:b3:5d:87:c4:24:e7:f7:79:d6:f7:d0:a9:3d:e3:db:70:
         5c:9b:dd:14:3f:a1:0d:08:a0:ed:43:36:c5:9d:9e:48:c0:64:
         f3:6d:05:6d:38:e3:28:86:f2:d5:3e:84:03:3f:f7:3c:2e:da:
         ec:ef:b2:6b:b3:4c:d5:8e:e2:b3:70:09:55:e8:bb:4e:ec:2e:
         1d:92:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:43:53 2025 by rpki-client