Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa
File:                     c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa (raw, json)
Hash identifier:          E2cYpRD5/oPDrWa+Flutv+v+qA6iLoEKYh6u8vlw5F8=
Subject key identifier:   5F:FC:9D:9A:C7:DC:7B:D2:91:F9:0D:B8:66:DF:68:59:D6:A9:0F:AD
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584AAB265615FB565FE2D26D83C0
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3807
IP address blocks:        207.196.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:56:15:fb:56:5f:e2:d2:6d:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=98bc0e98-d372-4d56-8f16-8f76741bd95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:e6:40:b3:03:66:96:66:de:4c:e1:51:fd:
                    8a:67:c1:20:f0:49:2e:04:6c:80:df:0e:3e:88:73:
                    d9:66:22:4b:74:fc:2b:a2:41:3a:75:09:dc:f3:68:
                    7e:44:a7:58:ec:bf:da:c8:a3:2e:2c:da:4b:a9:87:
                    e7:1e:48:e3:0f:4c:8b:2d:41:84:6f:f3:72:2f:1e:
                    a0:d7:c0:f6:d4:5d:c9:64:44:2d:65:90:7d:f5:c7:
                    45:b1:32:a2:e6:3d:fb:5b:a5:7a:5d:41:c1:e1:ba:
                    b1:86:7a:fd:ca:5b:9e:94:e4:9e:d6:e2:39:60:6d:
                    c4:f9:c5:91:36:a9:8c:c0:36:e9:3b:a7:72:85:3b:
                    5e:30:8a:2c:c3:4f:fe:e9:d4:c3:f5:fb:dc:b4:58:
                    6e:4b:d4:b9:5f:00:c3:3b:83:d9:d0:24:72:f8:bf:
                    ea:28:bf:65:80:bf:b2:92:e3:4f:d2:5b:3f:3a:56:
                    71:a1:15:f6:28:59:16:75:39:12:e2:5b:8f:a8:14:
                    ad:13:16:08:b5:74:b5:91:e5:bb:0b:c5:cf:ea:aa:
                    3b:65:39:54:6e:82:03:da:bb:49:b7:c0:b0:5c:05:
                    54:01:f8:d9:51:98:78:fa:cf:8f:ee:65:bf:6a:d5:
                    76:9c:7e:60:33:56:95:31:2f:74:fe:06:74:e7:8b:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FC:9D:9A:C7:DC:7B:D2:91:F9:0D:B8:66:DF:68:59:D6:A9:0F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/c752e31f-9d41-3d14-a14c-e19d6bea51ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:77:57:ac:f6:fe:79:43:ba:49:d6:e7:46:09:4d:7c:db:bf:
         a3:33:db:e3:ba:b2:ae:91:0e:28:a7:30:c5:3b:60:92:55:28:
         05:59:b0:09:b4:66:54:b2:58:e7:dc:4e:55:1e:41:3e:e4:50:
         ee:b8:48:e7:46:1a:fb:cc:f5:69:a5:11:63:c0:48:48:84:65:
         85:5c:f4:d0:08:5a:a9:45:7e:9b:3b:cd:8e:2c:50:e4:c7:49:
         b7:56:b2:9d:71:30:18:f2:8c:ae:4d:f4:2f:ac:90:38:f4:93:
         e9:97:33:22:11:29:c6:1c:9d:93:70:74:d2:4b:7e:78:b2:1f:
         15:49:2d:20:ae:c5:98:9c:1d:21:09:09:bf:ed:bc:21:b3:17:
         df:03:35:9d:3f:fe:2b:05:7a:88:76:3b:f4:4b:80:79:46:00:
         d5:c4:3c:d5:c7:39:9f:fc:6d:86:16:6b:3c:4f:8a:1b:fd:d4:
         fd:a7:c6:43:ba:67:46:01:03:65:d2:54:3f:e4:8b:49:11:8c:
         07:7d:fb:80:1c:55:e6:0a:44:ca:fd:b7:e2:68:bc:49:02:ee:
         18:a5:6e:46:0a:20:c0:80:ef:75:54:ba:30:aa:ff:f1:26:cc:
         9e:93:c2:46:cd:53:81:e5:16:89:3f:da:19:b2:c6:b5:e1:fe:
         e3:92:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:05 2025 by rpki-client