Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa
File:                     dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa (raw, json)
Hash identifier:          rgl7i6EO6DwKrvlwGHXx0xpv4Rpawq2L30CigjSgK7I=
Subject key identifier:   CF:38:C7:2D:74:33:BD:A7:9B:7E:CF:C4:EA:29:BE:1E:01:B6:FD:F7
Certificate issuer:       /CN=63772934-17e5-40fe-9a28-6fe830808dc3
Certificate serial:       010D0C9F43285849A784C394C501587ED1370000
Authority key identifier: 51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        161.38.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c3:94:c5:01:58:7e:d1:37:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63772934-17e5-40fe-9a28-6fe830808dc3
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=bf2243f5-258c-4178-970f-7e14c1eb819e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:c4:b1:00:d1:97:2c:75:b4:a8:2e:90:18:
                    cf:49:84:e2:f8:99:1b:da:98:50:9d:5b:5c:28:24:
                    b9:05:31:c8:ec:97:ca:ca:5e:e0:05:f1:fe:c1:eb:
                    a1:37:53:c0:10:eb:09:49:18:bb:7d:0f:80:f9:8b:
                    f8:22:0f:8b:b4:b9:57:53:b1:43:94:ec:a7:a9:bb:
                    91:6e:15:15:ee:3d:16:0b:2f:6e:50:e7:a3:f8:81:
                    57:ff:5d:6e:cf:c7:80:0a:d5:61:8e:9a:62:42:c6:
                    71:0f:47:2a:14:3a:ff:b0:ef:9f:a8:cc:44:fb:ff:
                    63:f4:30:65:b2:1e:5b:08:67:6b:ff:34:b1:37:92:
                    92:fa:f5:02:8e:0a:2b:82:a0:d2:0b:62:58:af:64:
                    fa:69:38:4e:04:7c:df:66:e4:fa:fa:6f:d6:f4:15:
                    c6:30:6f:e2:e1:7c:46:95:d1:3b:81:08:d9:e1:3b:
                    53:fe:7a:b6:69:99:1b:da:44:c2:6a:d5:c8:3d:c0:
                    1c:00:72:cd:95:36:e2:ce:cb:89:58:4b:1f:dc:0e:
                    6a:f6:e2:2f:88:0b:01:32:fb:0b:70:66:91:21:8e:
                    d4:68:69:32:0a:53:62:b2:d5:40:a5:b4:55:2c:50:
                    21:f1:35:0d:bd:5e:67:e5:a7:3d:50:bf:90:77:9f:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:38:C7:2D:74:33:BD:A7:9B:7E:CF:C4:EA:29:BE:1E:01:B6:FD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl

            X509v3 Authority Key Identifier:
                keyid:51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:26:98:d7:32:82:db:a8:80:58:7b:8b:7e:1b:c7:8c:de:38:
         2a:f6:d9:65:3c:81:80:22:18:c0:1b:c1:89:5b:42:c0:a5:b3:
         ca:32:de:52:f1:b1:d6:bb:1c:99:d3:31:b2:ae:80:11:bb:66:
         10:21:19:9c:9f:8e:95:5a:d3:e8:e9:a8:03:18:2f:cb:7e:28:
         20:e1:e0:44:1d:fa:91:87:57:04:38:ef:f7:ba:fd:06:13:d0:
         36:d1:27:87:94:f4:67:f5:8b:35:73:03:2f:97:ac:d8:fa:db:
         c4:3c:6c:32:59:05:8e:77:8d:9d:54:9e:d1:9b:18:b8:48:ba:
         7f:58:41:1f:ea:c0:c3:4f:d6:e5:ab:db:18:e6:55:9b:27:b0:
         ed:de:8e:45:b7:ea:a4:bb:64:9f:b6:1e:af:c3:b2:32:77:71:
         58:86:d2:47:ea:ef:79:b3:8b:5e:32:60:b3:63:ac:df:3d:0c:
         79:24:2b:d1:45:d2:8d:93:13:f7:d9:be:5b:9c:b5:ed:75:a4:
         ca:2a:2a:e2:6c:59:eb:2e:e3:97:70:60:08:a0:bf:6e:c6:46:
         a7:60:06:49:da:bd:d5:cf:30:34:a4:e2:76:6a:28:9a:23:6b:
         8a:75:22:b4:db:1a:79:ff:58:0e:38:d5:f0:df:9d:8e:ae:b5:
         c2:d0:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:16 2025 by rpki-client