Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa
File:                     ca10f6ee-236c-3990-9aa6-b5221dab876b.roa (raw, json)
Hash identifier:          972dteObcdJe7wbeF1/slo4XhdJUE6OYqqLpQw0cHRA=
Subject key identifier:   D3:27:7F:1D:3D:C3:AD:4A:63:EF:21:E5:71:1B:FE:BE:D1:3E:AC:99
Certificate issuer:       /CN=37cfb708-8bc0-4a74-971e-28d677315695
Certificate serial:       010D0C9F4328584AC87644CC3EDE68B89A650E80
Authority key identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     395439
IP address blocks:        209.204.0.0/19 maxlen: 19
                          209.204.0.0/24 maxlen: 24
                          209.204.1.0/24 maxlen: 24
                          209.204.2.0/24 maxlen: 24
                          209.204.3.0/24 maxlen: 24
                          209.204.4.0/24 maxlen: 24
                          209.204.5.0/24 maxlen: 24
                          209.204.6.0/24 maxlen: 24
                          209.204.7.0/24 maxlen: 24
                          209.204.8.0/24 maxlen: 24
                          209.204.9.0/24 maxlen: 24
                          209.204.10.0/24 maxlen: 24
                          209.204.11.0/24 maxlen: 24
                          209.204.12.0/24 maxlen: 24
                          209.204.13.0/24 maxlen: 24
                          209.204.14.0/24 maxlen: 24
                          209.204.15.0/24 maxlen: 24
                          209.204.16.0/24 maxlen: 24
                          209.204.17.0/24 maxlen: 24
                          209.204.18.0/23 maxlen: 23
                          209.204.20.0/22 maxlen: 22
                          209.204.24.0/24 maxlen: 24
                          209.204.25.0/24 maxlen: 24
                          209.204.26.0/24 maxlen: 24
                          209.204.27.0/24 maxlen: 24
                          209.204.28.0/24 maxlen: 24
                          209.204.29.0/24 maxlen: 24
                          209.204.30.0/24 maxlen: 24
                          209.204.31.0/24 maxlen: 24
                          209.204.48.0/20 maxlen: 20
                          2605:7bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:44:cc:3e:de:68:b8:9a:65:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37cfb708-8bc0-4a74-971e-28d677315695
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=5a7be12f-4fcb-4eae-9fa4-605aa9c7c09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:a3:1c:2f:72:30:77:4f:2e:98:71:be:d1:
                    08:42:3f:76:d9:cf:24:9d:26:79:5d:16:84:3c:ba:
                    1b:30:7d:b7:e3:9a:4f:a9:04:ef:5b:ae:fe:17:ef:
                    96:5e:23:1d:12:99:aa:53:25:f8:f1:50:84:44:2e:
                    1f:bf:fe:52:4f:6e:47:95:83:10:ca:4a:6b:a2:6f:
                    76:92:d2:d7:bc:1b:71:d3:c7:75:96:23:d4:d1:63:
                    86:97:93:2b:04:49:24:a2:d2:6a:5d:6e:2c:c8:57:
                    46:1e:9b:3f:b9:75:d4:2e:32:d9:e9:31:a6:88:d2:
                    3d:60:a7:e6:5d:31:93:44:f7:05:b7:c8:0f:41:f8:
                    d7:f2:eb:7a:7c:d1:11:03:09:64:8f:ad:f0:3c:6a:
                    eb:63:f0:2b:f8:1c:0c:12:a9:b0:32:d5:4b:ff:05:
                    87:28:4f:a8:1c:9a:16:10:03:ab:19:a3:d7:65:d5:
                    a3:cd:ad:95:e5:98:4f:cc:4b:1e:66:d7:b7:5b:f3:
                    29:88:6e:4b:56:36:89:f3:1b:a7:c0:60:b3:76:0d:
                    52:9d:8c:3d:89:3c:b4:90:d8:21:29:13:47:f4:ad:
                    fe:de:f4:95:e6:44:d9:33:cd:5a:61:07:99:87:06:
                    fd:0c:ce:4c:34:8f:eb:ec:28:de:94:10:44:45:18:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:27:7F:1D:3D:C3:AD:4A:63:EF:21:E5:71:1B:FE:BE:D1:3E:AC:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl

            X509v3 Authority Key Identifier:
                keyid:AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.204.0.0/19
                  209.204.48.0/20
                IPv6:
                  2605:7bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:5a:bf:c5:57:f5:96:e3:cb:eb:e5:61:72:15:1c:64:03:
         0f:39:14:29:f2:1c:66:84:0f:60:71:b7:3f:46:a4:e0:d6:6d:
         a9:25:43:f2:d8:11:83:11:a6:e3:c3:a3:3a:9c:8c:ad:0c:1a:
         8e:7e:f5:a3:39:59:1f:66:54:fc:33:a2:2d:06:16:88:c0:17:
         f7:bf:de:bc:13:fb:79:44:8c:b4:98:17:ba:4a:89:23:bb:49:
         fb:4a:c0:b0:e8:6b:e8:59:ca:76:ec:a6:df:71:e0:a4:3c:0e:
         7f:f1:a8:8c:14:d7:f5:53:d1:02:4e:32:35:1b:ce:e3:12:fe:
         39:08:88:89:9c:ac:92:b5:d1:65:ee:65:49:d7:a8:27:75:33:
         25:5b:dd:7a:83:5c:75:da:11:d1:66:35:11:c3:dd:1c:19:a8:
         c2:fd:3c:92:73:bb:bb:19:aa:44:6c:b1:d8:9d:24:07:e9:73:
         16:ab:65:3e:6c:4d:05:70:8c:91:2d:aa:ea:a0:6b:00:fd:1c:
         62:68:d0:b3:83:18:09:73:9b:f4:15:ce:2b:a4:1c:87:7f:3f:
         7e:b9:58:5a:33:5d:b4:e0:8b:73:2d:c2:73:25:8e:9a:e4:4c:
         fc:52:ff:1d:c8:a9:2f:c2:b5:de:b1:e7:cb:2d:9c:02:a6:63:
         a7:4f:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:47 2025 by rpki-client