Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f5b01191-47b0-3e8c-bc59-76444f781269.roa
File:                     f5b01191-47b0-3e8c-bc59-76444f781269.roa (raw, json)
Hash identifier:          EnZCqSSvrUsN+E1IATJ1L1JNHZl2cYYGHU/DcjOcFGY=
Subject key identifier:   94:B4:99:4F:87:A8:B2:B4:79:E4:F4:64:13:97:C4:6F:D0:FE:61:B3
Certificate issuer:       /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Certificate serial:       010D0C9F4328584A9636974B136F074582AB8000
Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f5b01191-47b0-3e8c-bc59-76444f781269.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     3851
IP address blocks:        207.197.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:97:4b:13:6f:07:45:82:ab:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=9a236871-cbc8-4e74-9a96-3ff20d19652b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:f2:cd:f3:ea:d9:09:fe:18:0c:ae:6a:d4:
                    f1:d0:ce:9f:1c:e6:3b:47:79:c8:e2:ce:c6:90:89:
                    6f:26:12:d8:51:9a:f0:ff:08:88:58:65:22:34:fc:
                    ae:1c:2f:72:c4:44:e8:98:bf:b8:91:2f:5e:41:fc:
                    78:37:66:00:06:a1:83:8a:1a:47:e0:04:82:38:18:
                    49:a3:b3:ed:09:7b:c9:ac:4a:da:3e:a4:4e:65:64:
                    0e:76:a1:03:bb:55:d3:b5:53:2a:5b:c3:46:f8:7d:
                    c3:30:90:78:42:26:10:c1:c9:74:97:84:6f:f7:41:
                    2d:71:4c:20:6a:9e:0b:19:91:26:d5:81:2c:f5:f6:
                    ad:fd:78:a3:46:92:36:f3:92:ad:fa:15:f1:a3:a7:
                    e0:79:61:a1:9c:01:70:82:9d:bc:fe:3a:4d:75:dd:
                    6b:81:72:3b:ad:15:49:87:b3:e3:d4:0d:5b:b1:d0:
                    af:2d:bb:99:95:52:79:48:7a:76:d1:97:f6:87:73:
                    36:a2:99:ed:9f:11:5d:63:0c:55:f9:2d:4a:85:b2:
                    a7:d7:11:39:bf:eb:d8:d6:16:27:f0:0c:a9:86:53:
                    39:d8:95:67:4e:3e:dc:8c:7d:6b:b5:02:78:63:29:
                    06:37:29:92:bd:7d:3a:15:5c:f8:1d:68:16:ee:9d:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:99:4F:87:A8:B2:B4:79:E4:F4:64:13:97:C4:6F:D0:FE:61:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f5b01191-47b0-3e8c-bc59-76444f781269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl

            X509v3 Authority Key Identifier:
                keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.197.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:f7:3f:d6:d9:74:f9:92:65:76:b4:a7:12:e9:81:86:78:
         06:de:46:b3:16:fc:75:b8:2b:34:f9:28:60:5e:80:21:aa:3b:
         67:24:a3:1e:7f:13:6d:bf:a0:48:79:d6:32:18:05:02:3f:9f:
         49:ef:31:56:4a:95:65:7d:52:4b:e2:99:0f:cc:b0:e7:d0:4c:
         58:ce:b3:b1:eb:65:a5:c7:8f:21:6b:d8:ef:48:f5:7f:3f:22:
         1e:5f:10:91:39:84:e9:3f:9e:a2:ec:5c:df:2d:ca:3a:d0:4f:
         6f:e4:3e:82:2c:ad:f3:bc:66:fc:16:aa:a3:c7:a0:fa:37:de:
         f6:0f:7c:3c:d1:68:d7:74:81:5b:86:d1:54:dd:d0:d4:0a:7e:
         e0:da:61:24:2a:20:16:df:d3:77:cb:e1:de:18:d0:d6:27:50:
         09:dc:48:fe:93:c1:71:54:a5:92:7d:1a:11:0c:11:e1:93:dd:
         81:ed:93:0b:59:65:57:7f:49:55:d2:9b:24:f3:d3:60:b3:3c:
         d9:a8:8a:66:bd:f5:2b:7a:ab:30:b8:be:c5:00:8e:fb:bc:48:
         51:ba:83:2f:58:35:59:36:32:18:22:8f:47:58:b7:79:7b:a7:
         ac:2c:80:4b:05:48:1d:08:24:cd:d1:27:25:35:2b:fa:61:ab:
         f2:83:9d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:43 2025 by rpki-client