Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa
File:                     d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa (raw, json)
Hash identifier:          VDahPQhEAh4e6Z+fMAnB50pGqcTl0l88yYbB6X8Sy64=
Subject key identifier:   05:52:D9:FC:F8:C7:B5:1D:08:0B:0D:2C:23:41:90:77:F8:99:C3:D9
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F4328584A8A52CE4FA8FF3E256254C440
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     396479
IP address blocks:        161.38.192.0/22 maxlen: 24
                          161.38.196.0/22 maxlen: 24
                          161.38.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8a:52:ce:4f:a8:ff:3e:25:62:54:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=0ba1e35c-726f-45db-be18-789dee8d1fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:77:b5:cd:62:49:93:db:0b:90:05:b5:97:ce:
                    83:60:62:b3:75:67:98:87:44:b3:0a:5c:1c:58:6a:
                    73:cd:a3:92:90:2e:85:aa:c2:3a:4f:37:59:52:6a:
                    3a:40:fc:d7:f4:fd:f2:65:e0:4a:dd:1b:09:44:bd:
                    1e:5f:fc:3b:13:de:21:dd:4a:f1:78:bd:33:f8:e3:
                    8e:9c:10:5c:43:76:75:fa:a2:75:ce:f6:81:61:20:
                    63:2f:fa:c6:76:fe:81:fd:f7:d8:22:e6:c8:4c:72:
                    b1:78:17:d0:47:8e:59:0d:3b:d1:42:c2:6e:a4:ff:
                    99:db:33:c1:48:28:47:0b:6e:a1:90:a3:34:b2:e7:
                    01:90:21:71:98:54:4a:df:d2:f4:2b:ef:d3:01:21:
                    65:3c:e9:14:80:a1:70:a1:97:99:e3:f4:a6:6a:0d:
                    16:c9:5c:57:27:3f:2c:d4:f2:e7:78:fd:0b:bd:a6:
                    e0:96:d8:f8:1d:45:12:63:2a:b8:4a:8f:5b:ef:6e:
                    a0:9e:79:dd:ab:11:29:70:db:4a:48:18:10:dd:07:
                    9d:77:15:90:e4:10:85:a8:51:a8:7d:e8:b4:a7:3d:
                    82:d5:c8:48:08:41:6a:7d:1f:53:92:d3:dc:f3:8d:
                    8f:28:78:6e:b0:96:5d:b9:f5:e2:9e:82:b3:b9:e5:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:52:D9:FC:F8:C7:B5:1D:08:0B:0D:2C:23:41:90:77:F8:99:C3:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.192.0-161.38.203.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c1:1c:fe:41:47:4f:96:79:75:a4:04:49:5a:5e:d4:fa:d8:
         3e:52:c7:32:4e:0a:50:7c:af:19:07:91:4e:87:4a:6e:44:52:
         4f:ac:d3:f4:ef:1b:80:a3:a2:eb:f1:a5:be:ae:c0:25:ed:f1:
         34:38:6f:81:9c:90:ee:64:53:4c:17:0d:72:e1:17:f4:fb:a5:
         60:6d:bb:fc:b3:d6:da:6b:2f:a9:3e:1c:1d:c4:2f:cf:1b:9b:
         02:7e:a3:95:c2:de:d5:4f:0a:12:61:e7:b6:f7:3d:45:5f:a0:
         f4:e8:1d:ed:52:5f:8b:e7:a3:48:ec:0e:18:e5:aa:f8:ed:ab:
         fd:62:2a:46:03:46:bf:05:09:2e:aa:bf:97:ce:33:75:59:bb:
         60:75:bc:4b:d1:8b:46:90:b5:e1:78:46:34:09:33:4c:70:25:
         50:cc:30:a2:19:a5:ac:6e:b8:c0:0b:3c:ad:e2:3b:55:c7:1a:
         66:39:a0:98:77:b4:6a:c9:d2:18:cd:39:11:37:07:26:64:3d:
         78:2d:20:85:bd:c6:15:c9:48:07:41:d9:1f:20:ff:f3:96:bc:
         a9:fb:72:74:57:5c:1c:88:57:3c:55:70:2d:1a:f0:31:fe:d2:
         ca:e7:8b:36:6f:1c:15:46:2e:60:8f:14:cc:55:a4:cb:83:5a:
         8f:a7:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:06 2025 by rpki-client