Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f3b92612-8c77-39a6-9c66-b086dbf05cf2.roa
File:                     f3b92612-8c77-39a6-9c66-b086dbf05cf2.roa (raw, json)
Hash identifier:          Nz7ndc6JrrbOYKL9sDrkmwBr4O9OnCBdSEd2z3YtF3k=
Subject key identifier:   E2:B9:6F:B2:5B:68:1D:08:87:E7:09:6B:DD:92:CA:97:AF:2B:96:1E
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584AA42B6E7FD127E6CAEDD43104
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f3b92612-8c77-39a6-9c66-b086dbf05cf2.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     3855
IP address blocks:        207.228.130.0/24 maxlen: 24
                          207.228.131.0/24 maxlen: 24
                          207.228.132.0/24 maxlen: 24
                          207.228.133.0/24 maxlen: 24
                          207.228.134.0/24 maxlen: 24
                          207.228.135.0/24 maxlen: 24
                          207.228.136.0/24 maxlen: 24
                          207.228.137.0/24 maxlen: 24
                          207.228.138.0/24 maxlen: 24
                          207.228.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:6e:7f:d1:27:e6:ca:ed:d4:31:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=fa57e307-6a36-46ba-ac42-c7589dc44cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:0f:ed:70:1d:ef:4a:7a:00:dc:ca:a2:f0:
                    07:a2:60:2a:b1:10:37:26:dd:1a:c2:e5:0e:65:b2:
                    31:41:9c:d0:cb:47:cf:10:f5:b3:c6:fc:8c:d6:2b:
                    2e:82:d9:b3:aa:51:f4:8a:0a:e4:91:58:92:81:80:
                    67:55:72:79:07:47:24:ec:26:4d:87:d9:1e:b0:eb:
                    f0:d6:85:62:f9:6f:aa:7d:04:f1:25:8b:8f:cd:9d:
                    6a:f5:d5:62:8d:a5:10:a2:2d:41:78:11:a8:5e:a2:
                    90:33:73:02:45:95:a0:cc:e8:cb:7f:9f:46:7a:62:
                    93:9c:15:78:b8:79:b1:4c:11:cf:de:49:e0:fd:1b:
                    12:1d:89:e9:35:50:9a:99:b7:0b:0b:40:7d:cd:7a:
                    1f:a9:45:e9:88:f9:bd:33:86:ad:16:a2:55:f6:3d:
                    e0:4f:9e:a4:cd:a8:38:8a:a9:b9:13:ca:99:86:24:
                    68:89:4b:f2:09:07:51:5a:de:64:c4:4c:d3:dc:99:
                    c4:0e:2f:ec:bc:f2:7f:33:cb:dc:78:03:50:81:8a:
                    1b:bd:13:55:ff:71:c8:b9:52:63:7f:c6:05:17:83:
                    a8:39:23:ba:e3:0b:8e:fc:9e:cd:82:8e:5d:db:7a:
                    3b:b5:27:51:7d:bc:1e:a4:1e:64:7d:ff:a7:df:18:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B9:6F:B2:5B:68:1D:08:87:E7:09:6B:DD:92:CA:97:AF:2B:96:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f3b92612-8c77-39a6-9c66-b086dbf05cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.130.0-207.228.139.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:be:c0:bf:70:88:bb:96:49:8c:87:97:fd:d8:05:09:d0:9e:
         bf:be:e4:e4:af:d7:a3:63:70:66:c4:da:f5:26:8b:b5:2a:ff:
         ef:cd:60:56:7f:4d:73:e6:db:c3:c4:8d:f5:9b:08:7f:52:b0:
         12:db:d2:25:23:4d:23:3e:b4:51:18:93:59:56:81:5a:51:1e:
         88:fb:6b:23:e3:b6:09:d3:09:2c:e8:ec:b9:4f:79:4e:e5:95:
         ab:07:41:e4:56:2b:b3:3d:bd:55:a8:a1:7a:00:52:b1:8c:e0:
         d8:19:90:af:d3:79:d7:8f:71:dd:52:30:9c:4e:19:72:97:f0:
         5e:ab:ca:61:85:0b:a0:48:6c:2f:12:0f:c2:3a:a4:84:89:09:
         f2:1c:a2:b3:11:3b:bd:47:ad:c4:20:ff:41:0f:3b:0f:35:e9:
         e0:17:ed:17:33:70:dd:4e:c3:f4:d8:ae:c1:10:59:bb:3f:06:
         bd:49:1b:92:db:7f:01:a3:d4:4b:3f:41:00:7f:f7:a8:f4:b5:
         f0:ba:4c:60:10:be:12:10:53:71:e8:4b:0a:8f:a0:c5:3d:15:
         a3:f7:8d:47:bd:f3:1e:2a:41:4b:04:8a:f5:3e:8c:f4:1b:fa:
         52:a3:60:52:b0:ec:46:f8:93:7e:03:37:6f:f1:79:71:88:89:
         49:11:38:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:24 2025 by rpki-client