Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0a1470eb-58cd-3e13-99e3-51d0d74b7058.roa
File:                     0a1470eb-58cd-3e13-99e3-51d0d74b7058.roa (raw, json)
Hash identifier:          Z6zypYRcbG7ME0tDS9xp84tH/lOfF53qv3+NjOeuN84=
Subject key identifier:   B2:17:59:E9:49:1B:2C:AA:36:1C:63:54:1B:64:71:BA:86:4A:51:4B
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584A80067F0B33D646EE0C455700
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0a1470eb-58cd-3e13-99e3-51d0d74b7058.roa
Signing time:             Sun 13 Jul 2025 02:17:19 +0000
ROA not before:           Sun 13 Jul 2025 02:17:19 +0000
ROA not after:            Sat 11 Oct 2025 02:17:19 +0000
asID:                     40818
IP address blocks:        216.38.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:80:06:7f:0b:33:d6:46:ee:0c:45:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Jul 13 02:17:19 2025 GMT
            Not After : Oct 11 02:17:19 2025 GMT
        Subject: CN=b7e41274-dccf-4252-b027-55a9415a1002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:2c:f2:f7:c7:e9:44:d7:d6:2c:0b:9d:75:
                    31:44:25:a6:b9:8c:97:06:b2:41:5c:06:3f:a9:cc:
                    f6:a6:ca:93:aa:c4:52:c9:cb:60:c1:6f:6c:c8:1e:
                    6e:a4:a8:5b:8f:9f:5e:cd:df:bc:3a:28:79:91:c1:
                    37:f6:1b:54:d1:d2:35:35:6a:47:68:c2:c8:b7:78:
                    8a:cd:a7:70:ed:6f:c6:01:6c:95:55:56:4f:19:72:
                    ac:2d:d3:2c:2d:7d:5c:ed:e4:f6:57:1c:1e:2e:e5:
                    d6:db:40:88:b2:84:d4:fe:8a:d7:ef:b3:f4:35:d5:
                    e3:3a:1d:d3:83:f7:5a:06:bc:64:a0:57:37:94:92:
                    a5:4b:3e:b9:19:e0:ae:7f:cc:02:49:36:19:c7:6a:
                    da:46:64:87:43:89:95:b7:29:c3:22:34:de:de:42:
                    32:06:60:27:34:10:bf:90:de:62:a4:fc:5c:66:74:
                    e5:b3:26:8a:4f:14:57:b9:cd:0e:35:db:e7:ad:4c:
                    36:ca:ad:c3:a9:16:ca:a4:e1:01:db:e1:70:ad:6b:
                    ab:16:8f:e0:f7:5b:21:f3:d0:22:6f:5e:e1:06:e0:
                    53:50:79:04:2f:89:f9:4e:4a:df:ac:e7:f4:7f:45:
                    d2:d4:9d:8f:bf:b9:2c:a3:2c:1a:4d:37:d2:12:5b:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:17:59:E9:49:1B:2C:AA:36:1C:63:54:1B:64:71:BA:86:4A:51:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0a1470eb-58cd-3e13-99e3-51d0d74b7058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:d1:d1:50:f5:2a:57:83:38:09:b0:ab:35:54:07:fb:91:
         5c:d7:0b:df:df:ea:73:a5:09:34:94:96:22:dc:bf:9f:68:61:
         57:85:ce:3d:5b:a3:62:2d:fe:71:e2:17:95:75:d3:6a:df:9c:
         52:94:37:ca:c1:d0:e5:62:49:a3:b5:3f:e3:c7:29:85:f8:29:
         46:fc:c8:c3:9b:28:a0:b2:81:c3:79:9f:7b:1e:ca:76:3a:b7:
         bb:6a:75:fb:63:9d:db:6a:8f:42:c9:71:1e:b6:03:e3:d3:d0:
         42:1a:25:46:42:79:17:ef:50:e9:07:34:33:29:c2:b1:d8:e3:
         a5:62:ce:6f:e6:67:da:16:7e:50:8e:10:9b:da:ec:0d:1c:be:
         56:77:d6:c0:92:56:a3:91:17:9b:be:48:4f:d3:25:2c:b1:84:
         62:81:03:cf:35:e4:1a:30:de:44:a4:e3:4e:dd:7b:2e:f0:d3:
         76:91:b3:ce:bf:b9:3c:11:51:16:aa:bc:93:c2:2b:0e:e9:fa:
         58:c5:08:d8:3f:af:d9:ce:67:a4:21:8e:21:d5:26:a2:62:32:
         f8:80:d1:79:3e:00:0a:b9:1a:a5:ea:92:a5:bd:9f:52:da:03:
         75:36:b8:c6:1f:3d:48:a8:29:41:9a:ce:de:99:1a:45:fd:fe:
         66:d9:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:44:23 2025 by rpki-client