Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/438da753-cc7b-3c29-beff-c44b99437298.roa
File:                     438da753-cc7b-3c29-beff-c44b99437298.roa (raw, json)
Hash identifier:          I8Mt882eDaElURLDvPEtelaU0YLWmsRMiY4QfTra/0Q=
Subject key identifier:   BC:C0:90:3A:09:F2:E7:3A:2D:18:18:74:DB:BE:92:A8:D1:61:A7:59
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584ABD4B8B45D5A3F7F2E999B380
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/438da753-cc7b-3c29-beff-c44b99437298.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     198148
IP address blocks:        205.177.44.0/22 maxlen: 24
                          205.177.52.0/22 maxlen: 24
                          205.177.56.0/22 maxlen: 24
                          205.177.132.0/22 maxlen: 24
                          205.177.196.0/22 maxlen: 24
                          205.177.224.0/21 maxlen: 24
                          205.177.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8b:45:d5:a3:f7:f2:e9:99:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=92c22c84-215b-4b27-927a-160d8ed9d377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:ac:b0:6c:23:14:12:8f:30:32:5c:70:c0:
                    ed:91:68:50:ed:73:ab:f0:69:82:0d:76:14:d1:f5:
                    52:bd:2f:ae:12:10:e2:a2:59:54:dd:42:6e:97:5b:
                    a6:1f:e8:8d:d8:65:a1:5d:c7:a7:c2:aa:17:19:17:
                    69:ee:86:90:ae:24:0a:e8:c1:be:bb:85:86:8d:7e:
                    a7:51:d9:c3:e6:aa:59:07:5b:9b:95:94:ba:a5:c2:
                    23:ac:dc:22:91:11:b1:c7:5c:20:71:d1:54:5f:e7:
                    0c:e6:0b:de:12:c2:8b:7e:57:a0:5b:1c:43:ee:f1:
                    c4:35:33:41:69:be:26:d7:00:96:af:92:d2:6b:c2:
                    8b:56:3c:93:d2:2f:8e:b6:02:2c:c5:f9:e3:89:5a:
                    6b:1f:61:c2:e5:73:0a:9d:f6:b9:10:7c:0b:a7:0b:
                    09:37:35:5d:44:76:eb:3e:61:92:33:73:e0:ba:d3:
                    d2:f9:87:6c:f7:ef:fa:e9:12:02:57:bf:c2:bf:23:
                    82:4b:59:f5:b1:ba:de:8a:d8:73:3e:89:b7:ea:79:
                    b2:56:c1:2b:ca:fe:a5:e3:7c:14:2b:42:54:fc:0c:
                    f2:3e:cb:1e:66:bb:4b:76:a0:69:54:b6:05:d2:15:
                    91:c7:e2:65:46:4c:ce:05:30:ad:e9:b7:32:de:92:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:90:3A:09:F2:E7:3A:2D:18:18:74:DB:BE:92:A8:D1:61:A7:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/438da753-cc7b-3c29-beff-c44b99437298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.44.0/22
                  205.177.52.0-205.177.59.255
                  205.177.132.0/22
                  205.177.196.0/22
                  205.177.224.0-205.177.235.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:10:8b:88:97:56:98:c9:71:2d:8d:66:38:df:a4:6a:19:d2:
         76:d3:25:e0:c3:8b:2f:3a:1f:27:a7:ba:ea:12:2c:34:d9:fa:
         7f:68:99:ce:4c:78:17:9b:26:6d:db:85:bd:ad:8e:ab:1e:7b:
         ab:ef:46:09:08:fc:54:1f:d5:ec:49:a4:de:d8:ff:8e:d3:0a:
         62:42:e9:69:d3:fa:11:a4:0b:81:0e:9c:e3:3c:12:dc:61:fb:
         bb:95:34:3b:4f:77:24:e4:b9:cf:87:ee:e4:fe:bb:14:45:4f:
         a8:68:90:36:b5:bf:8a:a5:22:7d:82:f1:37:c2:54:55:f3:04:
         50:93:64:e9:fb:12:67:ec:bf:55:af:d2:65:29:59:92:3f:75:
         7a:a6:21:5e:f8:a9:84:35:36:95:98:b8:ac:1e:10:55:91:1d:
         ae:fc:1e:8b:9b:9a:b2:e1:94:8f:a0:bd:88:3c:f7:5a:57:ba:
         8b:21:fa:5d:f3:b3:b7:b8:b1:dd:90:67:15:17:5e:4c:e3:1f:
         f2:ab:b8:d4:e3:97:1b:57:65:8f:bc:3a:9a:23:ae:19:ea:fc:
         1c:91:94:eb:1d:25:c5:7d:05:96:32:12:e0:3d:e2:41:3b:a5:
         38:7e:4c:64:b8:e7:ff:62:79:95:be:24:5f:91:eb:7f:62:6c:
         00:ca:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:22 2025 by rpki-client