Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa
File:                     40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa (raw, json)
Hash identifier:          /sqyE+05rDIjsE2LdvtjiHdoT9JaBbu1xyDUPGf+I/0=
Subject key identifier:   2F:6F:5F:9A:4F:7C:50:0A:E2:ED:15:40:2E:E5:CC:86:73:4F:AE:A2
Certificate issuer:       /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Certificate serial:       010D0C9F4328584ABD4B9E6840B896CC3763E500
Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     395347
IP address blocks:        97.107.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9e:68:40:b8:96:cc:37:63:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=12eda454-2c8e-4a84-a4e2-e7ab43807d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:43:61:85:80:e9:09:0b:95:89:3a:ad:ea:12:
                    fd:76:0c:90:fe:c5:5c:98:41:f7:87:b1:d0:7a:fc:
                    ab:8d:65:c8:ab:14:bc:95:4e:ba:47:c0:2a:19:52:
                    5f:dd:4e:c1:01:42:e2:97:d6:69:28:b4:3a:a2:2f:
                    7d:80:84:ec:d6:7b:7c:91:c5:49:fd:f1:49:e5:09:
                    f8:ca:0f:f0:37:28:35:ba:62:00:3c:42:6f:75:9d:
                    60:4f:3d:c3:a1:55:50:bd:61:ea:3c:f5:dd:c6:25:
                    56:5f:3a:89:dc:c8:2f:b8:c8:f8:7d:63:32:2a:ed:
                    ab:0f:86:e6:e7:a1:62:bd:21:ee:79:a5:c1:e6:d5:
                    e7:42:17:1b:c8:f7:6d:f2:5f:cb:46:90:81:31:31:
                    da:6a:8e:01:e5:23:1b:ed:8c:84:40:97:44:db:9f:
                    93:74:9e:cb:1d:5e:ad:1b:89:5f:e4:8f:53:2e:cb:
                    2b:85:40:42:31:cf:e5:3c:ce:69:8e:33:0f:1f:f8:
                    b4:1b:fb:6a:5d:e2:87:cc:8d:1c:78:7c:37:62:b4:
                    7d:8c:2a:40:2c:8c:2f:1b:cf:b5:16:4a:73:fd:2e:
                    31:87:04:6e:9f:e5:ec:52:59:7f:d5:e3:4f:85:07:
                    24:29:aa:2b:75:30:c6:bf:18:8f:1e:e9:d2:b2:1e:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6F:5F:9A:4F:7C:50:0A:E2:ED:15:40:2E:E5:CC:86:73:4F:AE:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/40ba2de4-e815-3489-bb9a-9ad18607c3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl

            X509v3 Authority Key Identifier:
                keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:81:08:cc:71:b5:3a:b8:76:0e:de:06:2a:08:de:a1:23:55:
         4d:ea:61:08:d3:36:4e:55:3a:5b:58:11:14:5d:9b:fb:36:a4:
         54:21:13:a0:f2:90:41:c7:a2:27:b4:34:1a:0e:7d:e6:3d:d7:
         d1:20:7b:eb:d7:7e:4b:a8:4f:ef:5c:40:b1:1c:ec:91:a1:40:
         40:38:08:13:af:61:d9:c6:04:60:8a:a6:21:d7:f7:56:ee:37:
         fd:5a:3d:d8:0e:cb:0e:34:b5:c2:4f:75:ea:d4:51:d5:41:2e:
         67:65:b0:67:20:a8:8f:83:8c:2e:0d:c8:4c:17:3c:23:45:a5:
         ce:30:07:70:f1:1c:61:47:a0:96:02:e3:62:6b:98:79:66:42:
         3c:c2:84:fa:dc:10:e5:71:70:03:92:08:e7:60:1f:3b:ad:b2:
         14:6d:70:86:f7:d6:8f:3d:d1:15:da:b7:48:93:54:53:cf:8f:
         5e:7a:a6:e6:fc:15:2a:3b:cf:72:f3:da:1b:e7:d6:b6:ef:3d:
         7f:58:7b:7a:60:71:2f:b3:65:ba:c5:b5:71:3a:5b:25:72:b1:
         72:f1:04:43:cc:01:61:5d:e0:5c:c9:ce:ad:64:e2:db:68:37:
         fa:86:b1:95:c6:46:3c:da:b6:eb:b0:5f:da:29:d3:6e:2f:1e:
         9f:03:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:44 2025 by rpki-client