Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa
File:                     d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa (raw, json)
Hash identifier:          ux/BZOMUL7q4tPmKZptg6SlXjtdux648pFtgKwDF5rg=
Subject key identifier:   4F:1A:DD:9C:8F:36:BC:9E:4F:05:DB:28:DC:5C:3B:8A:66:65:4F:A2
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584AA42B8ECEAE52C93F93507D80
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     7018
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8e:ce:ae:52:c9:3f:93:50:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=05932d39-37f3-43f6-b047-a9b2ead41275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:63:e0:cd:81:07:2b:4f:91:d1:1a:1c:f6:
                    73:95:d7:c0:93:28:7d:9e:b9:45:68:3c:b9:14:3c:
                    da:37:f3:c1:25:d2:15:85:71:1a:38:a5:7e:97:3e:
                    75:3f:ac:be:ea:20:b2:77:d7:a1:69:03:f9:b1:73:
                    b0:00:43:d8:64:42:18:bb:fd:0b:83:b3:34:e7:77:
                    dc:c9:c7:4e:fc:2b:1e:e8:5a:c8:2e:15:33:5b:9a:
                    29:c6:7a:e9:af:db:9b:8b:b5:9f:19:7d:0b:f2:16:
                    0a:3d:18:4d:c6:ff:50:17:a1:f2:da:5a:4f:87:6a:
                    52:af:c2:e2:ac:a5:bd:0f:a0:7d:08:89:0c:54:60:
                    9a:68:83:0e:52:d9:ce:24:cc:6e:1b:b2:81:bc:98:
                    13:ba:65:26:8a:9b:f5:6c:db:80:06:55:74:37:a0:
                    e6:51:56:da:8d:f3:82:f3:f6:b8:03:8a:2d:35:a0:
                    c0:2d:44:ef:68:86:12:1e:0a:d0:71:95:ff:82:08:
                    b5:ee:ed:6c:5c:74:cb:be:e5:f6:59:19:cd:70:82:
                    19:46:a8:c9:da:f3:06:db:fb:fa:b0:df:91:fd:93:
                    3f:a3:55:c9:f7:7d:dd:ba:c3:9a:2b:12:cf:ef:fa:
                    2a:c9:31:59:b6:e9:c7:16:ae:47:23:5a:21:d1:12:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1A:DD:9C:8F:36:BC:9E:4F:05:DB:28:DC:5C:3B:8A:66:65:4F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:68:cd:c2:3a:02:f0:13:4b:16:1e:a0:3e:dc:85:64:0d:7e:
         64:03:78:31:d2:21:79:43:84:3d:ff:02:a9:f6:0b:82:11:05:
         ba:ad:46:46:ba:39:dc:6d:7d:97:b8:cb:75:94:73:ff:5a:3e:
         bb:d2:8e:08:36:1b:7b:62:5c:44:85:ef:f7:6e:57:c7:19:8e:
         e3:d0:76:86:62:de:00:59:ec:0d:02:db:8d:4e:47:4a:49:63:
         9e:87:f2:f3:41:3a:4d:c0:ad:48:b8:9a:ef:29:99:05:b9:f4:
         43:70:1f:48:2d:0b:92:37:20:aa:5d:72:83:ad:5d:d2:1a:82:
         68:96:14:c0:d9:fc:ee:da:8c:1e:1a:b3:f9:85:ad:98:eb:26:
         b6:1b:ae:7b:08:3c:75:e6:32:4a:af:ce:99:15:18:89:28:89:
         23:60:b4:df:d5:cc:0e:1f:91:8c:82:57:5e:4f:ed:87:66:87:
         29:96:8a:4e:ed:2d:4a:ff:a5:28:fd:43:32:03:95:db:38:c3:
         30:da:4e:72:ea:53:8b:51:25:0b:a1:a5:eb:40:e7:e6:a4:fc:
         d5:fe:db:a6:7e:ce:f4:5a:5b:51:e2:55:a4:f3:09:f6:5b:f1:
         19:e4:97:e5:ba:bf:d9:0e:b1:aa:4c:5e:92:28:c7:5f:f5:b5:
         85:13:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:19 2025 by rpki-client