Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa
File:                     938a1a8b-5d4c-3f95-8273-2135590b1d77.roa (raw, json)
Hash identifier:          zXycz1QdQY25HhJHehlhTyszd/3DB+zXGBaKMNO2bpI=
Subject key identifier:   82:1F:CE:EE:FC:89:61:50:8A:FF:6B:DB:7A:22:E6:E0:7A:93:7D:E5
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F4328584A7A4B4A6D7E4AECD50DABD100
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     0
IP address blocks:        204.9.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4a:6d:7e:4a:ec:d5:0d:ab:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=084996dd-aa16-4d08-ad1c-dbc8748b636f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:c4:c3:04:3f:de:23:73:48:84:68:4e:0e:
                    4b:8c:4b:3b:c3:ad:7a:5a:b6:9a:21:b3:29:2b:38:
                    73:ae:b0:ce:d4:72:33:56:5d:3a:4a:32:2e:1d:e8:
                    fa:2a:a6:78:17:c2:ff:38:f6:ec:60:ab:c8:78:5e:
                    2c:62:2b:b5:01:41:ff:b5:ee:71:ae:58:1c:93:65:
                    b3:e9:12:54:1b:13:d1:c1:d2:89:c4:26:8a:29:c8:
                    fc:1c:d0:45:e8:4a:76:85:f2:6a:be:29:89:0a:e8:
                    79:45:fa:5e:7d:45:ec:fc:a0:f3:7d:c5:7c:da:d5:
                    de:e1:37:a6:9a:4e:d7:93:ba:88:4a:81:b3:68:82:
                    83:4a:bd:98:bf:72:bd:cf:95:a2:58:9a:6d:69:d9:
                    25:84:8e:41:69:df:df:8a:7f:72:28:f8:1c:74:75:
                    14:b4:48:a0:0e:2c:3f:36:e6:43:00:23:a2:9c:76:
                    c6:62:73:e6:e9:25:51:de:57:16:a7:61:bc:ca:6e:
                    43:4a:fc:90:92:b3:ce:72:1b:e7:b0:d1:3e:b4:73:
                    97:37:e5:24:78:1f:b3:82:91:a2:8c:d9:17:52:4d:
                    27:67:48:83:15:eb:d9:c4:90:b0:36:c5:2b:c9:5f:
                    8a:42:3f:42:d4:9a:15:19:d5:da:55:6a:b5:8b:16:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1F:CE:EE:FC:89:61:50:8A:FF:6B:DB:7A:22:E6:E0:7A:93:7D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:60:64:6b:50:87:39:31:6e:59:69:d0:09:91:9a:3d:5b:
         cc:d8:70:72:1a:a7:c8:32:00:40:d0:42:59:fb:30:16:5e:a7:
         14:6f:74:6c:09:10:cc:a1:07:fe:72:94:59:a3:09:5f:63:72:
         92:ed:2b:bf:5b:89:f6:ef:b7:4c:e9:dc:ce:47:41:66:fd:b0:
         bb:1f:7b:4a:cf:b2:be:ea:8d:cb:0d:85:5e:b0:51:95:6b:c8:
         9e:74:5a:6b:b7:7b:09:fb:b4:40:48:f8:72:69:af:3a:3b:73:
         d0:af:c9:3d:b2:64:97:6e:80:7c:71:68:ef:55:11:a4:c4:53:
         2a:e3:ba:c5:55:4a:72:fb:9d:c2:f9:8c:a7:c4:27:81:0e:37:
         11:a8:23:21:8f:aa:6d:28:4b:f3:a2:dc:f1:5d:c2:96:0c:1f:
         d0:3a:3e:56:2d:65:f6:b7:a3:32:25:16:03:b4:bb:ea:91:2a:
         91:3c:a2:b7:ca:58:e9:9a:4b:1a:97:0e:f0:d3:b9:59:e8:9d:
         10:05:47:b1:67:7f:bc:34:d8:65:e4:e6:1b:13:93:21:ac:8c:
         56:96:51:4f:46:55:46:dd:e5:13:23:02:e5:1c:3f:dd:b5:63:
         a2:50:16:77:eb:dd:be:f6:99:0b:63:8e:aa:d0:d5:f9:d2:f7:
         f7:7f:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:08:22 2025 by rpki-client