Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ff842fd7-a7ac-34ac-b3ef-93d6c371c278.roa
File:                     ff842fd7-a7ac-34ac-b3ef-93d6c371c278.roa (raw, json)
Hash identifier:          xdWdMC4d5sJuaHGAVMue+2+PQdFfR9RoyWe1G5lnSyI=
Subject key identifier:   1D:AE:7A:58:22:F3:F0:D7:75:46:5B:20:15:F2:C3:CF:66:E8:A2:3F
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584AAB2655B12606C31E962D6A00
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ff842fd7-a7ac-34ac-b3ef-93d6c371c278.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3807
IP address blocks:        207.196.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:55:b1:26:06:c3:1e:96:2d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=f871de5c-9b95-4321-9573-eb3de7fa19a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:d5:2a:8c:27:4a:e7:db:59:1b:61:f0:4c:
                    f1:5a:19:f5:63:87:fd:72:f2:2f:db:4f:54:a8:a5:
                    67:c2:52:73:4c:1b:1a:0a:da:95:56:d2:73:87:1f:
                    39:bd:3f:45:13:fa:ce:05:b4:7b:d9:67:6f:d4:9d:
                    31:5f:e4:c4:e3:1f:9b:b3:af:0b:cf:39:aa:33:52:
                    4e:99:e3:71:dc:61:22:41:a2:f9:f2:93:a5:63:7b:
                    6c:6a:59:6d:bc:38:38:84:07:1d:aa:0c:e7:ba:fa:
                    e2:af:65:3e:b4:ed:f3:b1:0a:f3:27:93:ca:21:91:
                    54:b3:a3:de:38:9f:cd:4b:d6:1b:c3:6e:77:85:ce:
                    87:d4:06:73:07:d3:32:38:a5:20:6f:2b:98:2d:4a:
                    fd:01:17:84:63:f3:de:0e:4c:1a:d4:81:69:25:25:
                    28:cd:ed:2a:fd:cf:7b:6c:26:be:e3:7b:35:38:68:
                    b8:07:50:ee:f9:82:cd:02:58:37:de:d9:3c:70:90:
                    a3:47:d2:82:20:4e:08:b3:7d:fc:fd:40:66:f2:37:
                    fc:ed:1a:0a:a4:f9:c6:b0:f6:41:37:ec:10:56:6f:
                    48:1d:8a:09:be:00:2d:9a:45:19:b6:de:66:2d:d7:
                    c1:cd:7e:45:6d:c6:8a:c6:db:f7:84:f8:36:b2:0f:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AE:7A:58:22:F3:F0:D7:75:46:5B:20:15:F2:C3:CF:66:E8:A2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ff842fd7-a7ac-34ac-b3ef-93d6c371c278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:87:f8:90:8a:4b:02:e8:e3:6e:90:1b:7e:d6:d9:bd:82:
         84:e7:96:1a:ad:49:e4:33:7b:16:1b:10:91:9d:31:53:e1:c9:
         4e:8c:f1:cd:f6:fe:d7:64:70:41:d0:99:ae:a9:02:f6:17:dc:
         68:cf:aa:70:19:23:26:97:b7:cc:4b:4c:6e:3b:00:fa:dc:bc:
         de:f5:1b:7d:be:9b:4d:ad:b9:36:d1:f2:2c:ad:74:16:59:f7:
         ae:05:70:26:81:86:cc:0b:00:60:34:57:7a:b7:f4:d6:ea:ea:
         a9:8f:64:2c:bb:a3:de:2b:7a:b1:62:0f:7e:6e:9d:2e:dc:89:
         07:b7:9d:99:4d:80:f7:d1:49:c5:ef:c0:11:1c:94:94:a2:0f:
         b0:15:9c:b3:5e:60:a9:07:db:9d:78:8a:9e:6f:06:ef:3b:24:
         d1:58:09:a2:d8:ad:04:64:c5:0b:07:6a:58:1b:5d:32:7b:bb:
         15:ba:13:e9:95:0c:b9:ce:f8:55:41:a4:42:e8:b3:bc:5f:66:
         08:b7:41:24:d7:32:88:5d:a4:46:bd:5f:3f:29:3a:b1:a3:dc:
         b5:70:d3:2e:4f:92:dc:b0:39:ac:f9:c3:1e:0b:4e:d0:5a:e1:
         3d:10:59:49:c4:dd:df:f2:5f:75:7b:48:d2:6b:3b:34:39:b0:
         db:b5:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:04 2025 by rpki-client