Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/c349dc38-3f23-3090-af77-fe6470f4ab3d.roa
File:                     c349dc38-3f23-3090-af77-fe6470f4ab3d.roa (raw, json)
Hash identifier:          XqFLTdyJ8QoKsKXySGrgimK8uiForNqogiUujZ9D9dM=
Subject key identifier:   05:76:00:0D:85:9A:2B:9B:17:FB:78:81:F5:43:5B:4B:22:A6:AE:63
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F4328584A9D30E6FBC1C6CAD7946E7100
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/c349dc38-3f23-3090-af77-fe6470f4ab3d.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     14977
IP address blocks:        137.84.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e6:fb:c1:c6:ca:d7:94:6e:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=1abee8c3-3689-47bf-8c88-27c65a2cc79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:13:26:65:be:7a:ab:21:23:a5:12:06:72:
                    77:ae:3d:e0:b4:59:f4:11:1b:fd:bf:b4:b9:69:1d:
                    8b:fd:be:57:fc:ae:05:95:da:0c:ec:d2:3e:59:a1:
                    61:49:c7:e2:b5:cd:01:b6:70:ea:12:10:8d:75:ea:
                    bc:ae:e4:37:07:15:2f:d1:05:6b:1a:18:18:81:e4:
                    60:31:dc:8d:38:49:63:56:eb:14:8f:7d:f1:d7:b8:
                    cc:38:c4:af:38:79:aa:26:25:9c:94:5f:4f:f4:03:
                    4e:c5:ad:77:02:fe:3e:63:5b:67:98:39:fe:97:40:
                    40:14:f4:72:54:00:5b:48:40:4b:33:4d:9f:6b:94:
                    12:14:c0:82:6b:4c:b3:83:d1:44:41:46:49:84:24:
                    91:ff:01:30:b6:c4:b6:99:93:2b:7f:de:3c:e5:e6:
                    9a:f9:2a:24:4f:d6:b7:4c:fc:c9:31:e0:31:16:fe:
                    cd:cf:e4:17:66:4b:2c:9b:13:c4:34:86:69:5c:5f:
                    55:c4:9f:ff:be:81:5d:22:20:e0:a5:dd:30:1d:9b:
                    24:bf:c1:ea:ad:cb:4b:6c:a2:b3:d2:b4:b3:b4:10:
                    da:13:fd:56:65:58:dc:fe:54:8c:8d:4d:e9:33:df:
                    88:3e:b6:5e:f9:67:8f:a5:09:53:98:b2:1d:fa:92:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:76:00:0D:85:9A:2B:9B:17:FB:78:81:F5:43:5B:4B:22:A6:AE:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/c349dc38-3f23-3090-af77-fe6470f4ab3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:33:cb:c0:86:66:06:d6:53:34:c5:96:d4:d0:68:cd:73:
         c9:cf:2f:48:d8:42:06:0a:b1:64:69:d4:44:de:e0:95:83:f0:
         be:0c:26:60:3b:a1:36:93:03:20:22:5e:96:52:56:79:f2:3e:
         06:6e:a3:e2:0f:45:0e:fd:83:13:09:d8:47:d3:4a:d2:69:01:
         44:64:af:6d:8a:10:ea:56:e5:a8:de:11:90:70:6e:1c:eb:b0:
         7b:31:18:95:26:92:58:02:86:57:2c:58:51:6f:8c:ba:19:02:
         ff:66:04:39:6c:09:e2:3a:7e:e9:06:31:af:48:da:00:3a:22:
         ec:3c:73:d8:73:1a:84:ba:6b:fd:25:76:33:0a:27:04:ce:d4:
         84:4c:cb:e4:c2:ea:9d:6e:29:55:59:bf:73:23:f6:82:da:eb:
         e5:ac:3c:40:96:27:81:5b:ef:9b:56:8b:90:e9:19:9f:c9:c6:
         46:6e:c5:ab:af:38:d2:4d:b4:b8:0f:b5:ef:67:a8:3f:3e:cc:
         41:95:ba:d4:2d:cf:79:c3:bf:21:c5:ed:fb:8e:87:08:a2:db:
         53:e2:ac:ab:e4:62:30:49:bb:85:9b:89:19:c0:05:d1:0e:76:
         13:65:9a:be:36:48:f0:73:03:fd:8b:1a:81:88:0c:94:c0:f7:
         5f:0f:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:25:42 2025 by rpki-client