Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa
File:                     39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa (raw, json)
Hash identifier:          zUXeA3HsYXxx1o5Qk+/y1VLQ8BqoSXYrzavekeLZni8=
Subject key identifier:   A0:B9:F7:B5:E1:E1:A2:16:E2:CF:98:80:56:7B:C9:59:2A:9D:EE:3E
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584A90A0A563F2A5FFD332890D00
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     21782
IP address blocks:        207.246.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a5:63:f2:a5:ff:d3:32:89:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=31cf794c-6be3-471b-8b40-2c30a43e6588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:95:7a:fc:3c:c8:47:7c:e5:40:be:7f:94:
                    bf:bf:55:d4:4e:e5:12:bd:9d:74:1a:ee:b4:1a:30:
                    ed:94:de:c5:43:f4:b4:31:d2:f8:86:fd:bf:0a:4f:
                    c1:f2:c5:96:48:5c:e4:43:bb:da:be:74:1c:da:e5:
                    f1:1b:8b:bb:f2:b3:f2:d0:f8:a8:0c:09:c4:a4:1d:
                    3b:fe:6c:f8:20:76:c4:93:59:c8:39:ac:0f:c6:ed:
                    de:a7:d4:78:5d:fe:ce:5e:0b:de:08:cd:e0:59:d5:
                    76:0d:ed:6a:a6:74:bc:6d:5e:6d:cc:16:3d:18:aa:
                    be:77:07:1c:46:7f:bc:f3:25:9d:c6:31:34:80:b9:
                    c6:d2:be:f5:a2:fd:9c:a2:a8:12:f4:a6:30:12:25:
                    e3:39:ec:e5:e4:54:c7:39:30:e3:5b:cb:72:fd:ad:
                    57:74:c3:0e:7d:aa:17:b0:a0:24:ac:de:a5:fd:c4:
                    b3:f3:6b:ea:43:c1:ed:f6:7c:97:9d:d0:a1:6d:0b:
                    86:8b:cc:64:fb:b6:13:82:1b:6a:c2:17:16:52:8e:
                    18:a7:92:aa:d7:be:e1:92:ac:3f:55:2a:81:e5:f7:
                    5d:e1:30:e9:d2:4a:1a:7a:f1:db:62:95:ac:52:19:
                    09:13:95:6a:c5:c7:3b:82:4c:8f:cc:b7:61:4c:17:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B9:F7:B5:E1:E1:A2:16:E2:CF:98:80:56:7B:C9:59:2A:9D:EE:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/39c2cc77-ae0c-3931-8f2a-005d597ec86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.246.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:04:1f:fd:ec:7c:02:fd:90:b4:a2:33:a3:05:55:fb:fc:48:
         5e:a8:84:77:51:f3:c8:92:c6:ff:79:2f:95:b6:56:38:60:68:
         71:65:9b:8e:73:60:59:7c:a0:62:50:0d:61:a0:2e:45:05:97:
         0e:c2:2d:97:04:d0:1b:c1:ce:3b:af:e1:4f:1a:82:be:63:41:
         0a:6c:aa:98:c9:af:3d:f6:56:f6:b4:d7:00:93:0e:03:2d:31:
         ef:09:ad:30:bc:c0:f2:9c:2f:3f:0b:bc:35:0f:d0:41:04:96:
         d2:ad:57:bf:e7:9f:67:1f:12:1e:42:c1:df:e9:40:5a:28:77:
         f4:13:7f:f2:bc:e1:e5:f9:dd:1e:c9:7d:74:72:6a:15:b5:6b:
         77:1e:f2:14:16:f4:79:90:4c:c0:6e:56:66:d3:39:39:57:df:
         cb:ac:a2:04:d1:2d:b5:70:11:80:39:bd:d2:63:26:79:07:d5:
         4c:2c:4e:5a:c3:e0:8a:c2:10:d4:5a:23:29:43:ed:14:01:3c:
         62:61:d5:be:48:c2:eb:19:e5:9c:f6:ca:9a:3b:b5:29:5b:b9:
         5e:37:bd:60:85:2b:d8:2a:13:eb:c1:a5:37:c7:ed:cf:b7:e6:
         22:0e:8b:a4:1b:ac:e2:62:09:a1:c8:c3:2c:40:8d:50:67:02:
         67:eb:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:19 2025 by rpki-client