Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/b3a39767-222f-30df-866d-2754bc0aedd5.roa
File:                     b3a39767-222f-30df-866d-2754bc0aedd5.roa (raw, json)
Hash identifier:          pf7sW0ZksTUdT0G/6jw4LmsbrWuKGWXkrNtk8zD7Tl4=
Subject key identifier:   FD:BF:57:E0:39:1A:B6:C3:56:3B:D4:F4:BB:BE:EF:1C:F1:43:F0:B4
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F4328584AC01645AFC0FFF1FDC26912A8
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/b3a39767-222f-30df-866d-2754bc0aedd5.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     611
IP address blocks:        198.164.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:45:af:c0:ff:f1:fd:c2:69:12:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=6a1dcfe2-7209-4c1d-950a-bd3e349ac9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:fe:57:41:cf:69:fc:dd:78:73:e6:ad:9d:
                    63:15:06:e8:15:e4:88:b1:79:d0:6c:ee:88:46:0b:
                    a4:e4:d3:5c:40:c9:54:66:f4:37:9e:a4:ac:b0:be:
                    8f:c8:58:bc:5c:37:ac:29:78:9b:85:d2:de:01:99:
                    21:1c:a4:2a:b6:03:1e:a5:52:15:92:9b:8c:48:fa:
                    41:5a:83:77:01:69:3d:7a:1a:e9:ef:9e:2c:ff:de:
                    57:b3:d7:4f:43:37:d4:76:67:da:98:c1:af:5a:84:
                    fd:be:ed:61:fb:0d:83:99:7b:c0:1e:b6:4c:e1:cd:
                    3b:b1:6f:bd:a1:5d:55:31:d8:1c:d0:af:5a:c0:00:
                    9b:1c:ef:4f:70:e5:a8:e8:6e:d8:7e:1e:33:db:e9:
                    38:2f:d2:30:19:68:bd:93:cc:b2:63:c4:8f:95:f7:
                    5d:b9:e5:40:27:e6:c3:8f:67:b9:56:95:ef:ac:2a:
                    fc:59:52:4c:7c:d7:0b:e2:63:22:30:e0:f1:30:8d:
                    2d:31:de:47:1d:c5:fc:21:11:40:ca:8a:1d:82:e2:
                    03:c6:62:51:03:aa:8d:88:c0:ba:99:f4:83:80:f7:
                    67:66:80:6a:ca:57:83:a9:29:f7:7b:c3:9a:c5:1a:
                    60:eb:66:d7:5f:4d:1e:90:2d:a9:aa:9a:e6:be:c3:
                    fa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BF:57:E0:39:1A:B6:C3:56:3B:D4:F4:BB:BE:EF:1C:F1:43:F0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/b3a39767-222f-30df-866d-2754bc0aedd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a8:c6:e8:89:f6:37:0e:ea:d2:04:42:48:96:35:6e:70:be:
         c7:b6:5a:d0:8b:53:1a:f6:de:54:4c:01:4b:ef:23:7a:12:97:
         c5:3e:b2:8e:60:d2:b3:c0:f1:5a:d0:24:cf:03:3b:18:db:83:
         3d:6c:f7:b8:c6:fd:a5:31:a3:f8:3b:71:10:17:c1:23:f9:87:
         28:c8:c9:fb:0d:74:00:b0:cc:6e:1e:c2:4a:36:a4:22:b1:00:
         b1:c4:71:59:d2:f6:38:0d:4b:10:b0:c7:78:53:9b:5b:31:e8:
         6c:db:6e:89:9a:e1:49:af:13:d1:9b:b9:1f:22:df:e6:9f:87:
         40:6a:5b:d3:68:74:5f:20:f6:34:bf:2c:08:64:e0:97:ae:35:
         6b:8c:43:e7:63:92:87:82:68:42:90:e3:d0:35:b1:2e:3c:34:
         3e:6f:a1:ac:4b:09:d3:7a:0b:3c:8a:4b:9d:cb:fc:0a:67:72:
         88:ec:0a:9f:b3:1c:9f:ac:c3:ad:20:46:f4:00:9a:3f:74:c0:
         d7:a5:39:7e:38:c9:7c:e8:9d:18:4d:f2:39:51:da:e5:48:85:
         cd:1b:58:bf:cd:5d:cc:cd:94:8d:51:d0:b6:c0:9d:6f:1e:73:
         05:db:ff:54:5c:c0:e1:0e:b5:55:34:17:3d:1c:e3:32:ab:4e:
         3e:6b:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:54 2025 by rpki-client