Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa
File:                     9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa (raw, json)
Hash identifier:          XQ/vCYk+ijQmdQTkUCWSBmKLccP5AkVJI0EfKdS4qO8=
Subject key identifier:   28:F5:E6:76:62:FC:CD:B6:2D:95:82:B8:9E:33:FB:07:4B:23:B7:CE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ACD60DD3CFA39C31208546400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa
Signing time:             Sat 09 Aug 2025 19:16:39 +0000
ROA not before:           Sat 09 Aug 2025 19:16:39 +0000
ROA not after:            Fri 07 Nov 2025 20:16:39 +0000
asID:                     31898
IP address blocks:        168.138.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cd:60:dd:3c:fa:39:c3:12:08:54:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  9 19:16:39 2025 GMT
            Not After : Nov  7 20:16:39 2025 GMT
        Subject: CN=e6a3c07d-d0fe-46e4-9c7a-b052ef016103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:2a:0f:3c:2d:58:c2:68:f7:14:bb:77:e3:
                    58:c2:01:2c:d1:a4:eb:71:30:f6:e5:47:cb:34:bf:
                    86:35:24:ca:fa:52:54:84:e0:bb:31:84:c5:59:98:
                    ce:23:ad:7f:ca:5d:40:77:61:d1:fb:96:95:91:d1:
                    eb:bb:11:bf:10:7f:7d:f8:d0:4d:81:bf:a1:3a:f7:
                    1c:98:03:8a:fc:9b:b8:4b:1c:a2:b2:6e:60:89:1a:
                    89:d8:07:10:9f:df:fb:94:3f:8b:77:19:f7:65:43:
                    59:15:77:d7:31:4f:ef:e1:51:50:c1:cc:2c:ed:57:
                    5e:d3:0f:e1:0e:b6:2b:32:91:d3:85:11:1c:8a:ff:
                    e3:bd:00:09:2e:76:2b:bf:0d:db:e1:26:fc:8b:44:
                    ef:61:e6:ea:64:29:e3:e7:42:40:23:a7:d5:07:c5:
                    b5:dc:a7:6b:d9:70:ef:45:f9:e0:94:5e:75:ed:6a:
                    8d:24:b4:91:b5:91:0f:51:fe:62:57:cf:f6:44:00:
                    2e:d2:7c:1d:31:de:f9:77:7e:7e:1c:0b:e6:d5:03:
                    15:bc:b2:91:8c:8d:92:6c:ad:09:a9:4c:b7:3d:e0:
                    a0:fb:ba:97:cd:ad:d0:24:48:e2:f1:0a:61:d9:14:
                    92:e6:2d:9b:e9:6d:56:77:1d:82:d6:ef:0e:d9:f5:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F5:E6:76:62:FC:CD:B6:2D:95:82:B8:9E:33:FB:07:4B:23:B7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9eb7b8e1-41cb-3fbe-8639-f169d466bc61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.138.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a6:e8:8b:25:a0:fc:ef:97:0b:9b:08:3d:c9:91:5d:bd:4a:
         25:7a:78:13:16:80:56:ab:10:77:22:9e:53:59:61:45:bc:ba:
         7f:ca:b5:32:bf:ed:f2:6a:31:19:d1:e0:17:26:04:59:93:00:
         7e:8b:2b:c4:7c:98:2f:63:86:6d:a0:24:c5:2d:18:1a:b9:fa:
         79:09:09:a2:47:05:5b:d3:f9:ea:93:38:80:5c:a2:20:b9:ce:
         db:08:05:03:dd:28:c0:3f:74:a2:02:95:c4:d5:63:91:44:d2:
         cd:cc:61:a1:59:c4:c7:39:04:b9:15:5f:05:36:90:2f:97:90:
         6d:10:0a:7e:ac:4a:a2:3b:3c:b5:ba:1b:fd:d7:42:4e:55:89:
         a0:2e:9d:b9:db:0e:c8:55:4e:e0:b5:a2:c8:e8:17:84:5d:e0:
         fb:1a:09:15:69:52:4d:64:d8:43:91:24:e3:54:72:ac:9e:b9:
         33:45:f5:7f:27:25:69:4b:89:79:50:39:fd:d5:a9:f6:fa:c7:
         36:f0:64:16:a9:b2:3b:29:0f:7e:60:cb:0b:9b:d9:5e:b0:21:
         01:05:2b:2a:b8:58:19:57:0f:c1:fa:4b:61:7a:79:3a:f0:41:
         75:38:c0:db:08:7a:b5:58:5c:d4:30:3a:bd:dc:18:72:42:77:
         b1:cc:d1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:44:31 2025 by rpki-client