Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/39a6d799-e684-39bc-a3f7-41653d2b5285.roa
File:                     39a6d799-e684-39bc-a3f7-41653d2b5285.roa (raw, json)
Hash identifier:          SVR6XDeqYVj/qpayB1jjTyvVJLOLwyG4jc1jH2z7mHs=
Subject key identifier:   A0:59:48:EA:40:8B:AB:8A:F0:46:EA:F7:C1:98:63:0F:57:BC:11:9F
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584AB91BB2CE3EA9DBCBB1368A80
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/39a6d799-e684-39bc-a3f7-41653d2b5285.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     30383
IP address blocks:        198.208.164.0/24 maxlen: 24
                          198.208.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b2:ce:3e:a9:db:cb:b1:36:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=894eae40-c370-452a-b695-ba563625ce2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:df:7f:bd:6b:35:40:96:ec:a6:4d:23:a9:ea:
                    6e:86:1a:88:e8:ab:a0:50:70:0f:9b:8b:00:c4:ff:
                    63:ce:64:86:1b:29:9e:17:db:63:ce:66:99:00:fc:
                    58:15:b3:15:38:da:5a:4b:17:79:14:40:b6:63:a6:
                    e6:c3:34:b8:e2:5a:01:0e:c5:d3:99:d4:88:f5:31:
                    cc:4f:cb:eb:37:05:57:c8:90:3a:89:ff:ef:d4:48:
                    34:04:5f:2b:e4:3b:8f:b0:49:50:2b:a2:5a:9e:29:
                    7d:7d:bb:b5:64:64:ad:f1:12:5b:88:c6:6c:ac:69:
                    d0:8a:f6:5c:8f:76:8a:ca:98:c8:eb:24:05:47:9c:
                    63:e4:56:bf:be:54:a4:aa:08:01:86:cb:82:81:f1:
                    d8:97:31:81:f3:9a:00:44:dc:56:88:e4:0b:fc:1c:
                    0e:20:4a:b9:1a:81:3b:99:44:d0:5c:e8:34:fa:2e:
                    14:53:05:65:54:af:92:68:7a:4f:73:24:2d:fe:7b:
                    20:de:38:98:72:ac:96:cb:10:f4:ad:6b:fd:99:65:
                    72:ba:81:f0:68:03:79:52:ef:5b:84:59:5c:ec:7f:
                    ac:19:f7:ff:b0:dd:b8:77:ac:34:d5:cc:bf:83:f6:
                    5c:08:1d:5a:b6:c5:86:50:8b:ac:e3:ab:c7:b7:a8:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:59:48:EA:40:8B:AB:8A:F0:46:EA:F7:C1:98:63:0F:57:BC:11:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/39a6d799-e684-39bc-a3f7-41653d2b5285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.164.0/24
                  198.208.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:8b:d3:5f:c7:ff:fd:01:63:4c:a3:8a:9a:d3:6b:fc:48:
         8f:70:79:e8:de:8a:f1:89:9d:6c:f2:df:2f:8a:6c:38:4a:3a:
         a0:8c:58:d1:3c:b6:e1:8c:11:32:5a:19:85:a0:00:c7:a5:0c:
         dd:32:f3:2f:a7:95:02:77:86:de:fb:80:14:07:d3:65:44:41:
         58:27:ec:24:f7:37:1a:21:42:e9:51:86:07:ce:45:2d:65:34:
         75:d7:e5:42:c0:96:e5:d7:f3:ed:cc:d3:6d:e1:04:a8:e1:21:
         56:dd:3e:e5:1a:d8:95:b0:a9:27:dc:19:f3:99:34:ce:55:d0:
         3b:8d:c7:64:96:d2:4d:87:9d:90:46:22:e8:d6:e1:07:ed:3d:
         5c:9b:0a:ac:9d:70:55:d7:a4:56:77:9d:13:e6:de:9e:de:52:
         8c:84:7a:c2:53:96:4b:76:0d:2e:9b:c4:18:b9:0d:53:0f:00:
         ad:50:65:65:f9:f2:a4:06:a6:c4:ae:18:cc:55:fe:53:58:c5:
         c3:3f:df:b9:9f:d4:f8:dd:35:b7:c1:23:e5:24:3c:1e:53:66:
         3c:75:0a:ba:88:b0:0e:48:35:04:e7:74:5d:b5:b0:87:6d:32:
         fe:c4:f4:e2:59:ac:58:16:d6:79:24:74:31:ea:67:29:8c:e5:
         39:44:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:59 2025 by rpki-client