Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38a9c270-9ed7-37b4-8996-240cd561d557.roa
File:                     38a9c270-9ed7-37b4-8996-240cd561d557.roa (raw, json)
Hash identifier:          txOlvqAbJoj6KwhimzNxG1uQaGJenKWG/fWAhWYmmIE=
Subject key identifier:   C0:D7:8F:0A:5D:EA:1C:BF:17:DF:CC:40:95:0E:6E:0F:DE:C3:C1:6A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BFA0E47FDD63515FDAC20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38a9c270-9ed7-37b4-8996-240cd561d557.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     200184
IP address blocks:        64.71.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:fa:0e:47:fd:d6:35:15:fd:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=4749d8a7-0b14-4d55-9f9f-3bb166b976f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:e3:df:50:78:ec:74:1f:9b:de:a4:96:5b:
                    ef:39:73:1e:08:b5:af:e5:0b:7b:28:d3:88:05:ce:
                    ce:60:6c:be:c7:10:36:af:02:86:c3:d1:ea:da:88:
                    40:71:e4:2f:64:38:16:06:f9:ac:00:ee:c2:3e:95:
                    28:26:f5:61:5a:b4:09:83:3a:35:6e:6a:c7:e2:88:
                    b1:0b:bd:3e:4c:80:66:55:cd:b9:ea:53:bc:e5:e9:
                    c8:c8:d0:2b:09:cb:81:1c:81:a9:44:c4:82:5c:ce:
                    9e:e7:28:34:0c:da:81:48:52:63:e7:b1:35:36:02:
                    a8:af:54:55:8d:6c:75:cc:e4:ef:f6:b6:4f:b2:52:
                    69:a5:5a:9a:29:3b:ea:6e:c6:be:a6:2b:1a:e6:83:
                    eb:a6:24:42:b4:f2:fe:1c:a4:4c:59:e3:bd:1b:6a:
                    45:d3:ef:cf:80:2c:16:a8:20:37:5c:27:1e:f2:44:
                    28:87:6d:5f:dd:64:9d:16:fe:cf:77:94:1b:9b:67:
                    43:7c:3e:6e:2e:b4:5c:cb:8b:60:57:22:85:3a:40:
                    53:5f:48:29:bf:66:b1:3e:68:ca:29:7c:51:a4:87:
                    95:ba:0e:e1:28:e8:a0:09:17:bf:a3:b1:77:b2:af:
                    49:53:b4:9a:f8:7f:67:13:65:df:9d:58:a4:c2:8d:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D7:8F:0A:5D:EA:1C:BF:17:DF:CC:40:95:0E:6E:0F:DE:C3:C1:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38a9c270-9ed7-37b4-8996-240cd561d557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:98:d9:a1:9b:ca:53:ba:74:25:55:66:57:10:49:bc:d8:07:
         2f:c4:d2:0e:4b:b1:b3:b8:c4:cc:fe:81:9d:9d:38:8e:9d:37:
         f2:1e:14:21:bc:77:ef:7a:22:60:f9:ab:18:59:41:d7:36:73:
         cf:68:75:9e:e3:24:0e:c3:5a:a0:5c:87:f3:4e:a0:ec:78:a5:
         9c:f8:8a:32:78:f6:f3:61:c2:58:12:60:6e:2c:f3:43:ba:b0:
         2c:91:69:b3:d0:13:f7:13:5b:03:33:18:ad:3b:92:90:38:72:
         de:22:30:a2:2d:a9:5a:31:6c:63:5c:12:2e:fb:03:e6:32:78:
         52:5b:d2:93:d5:6b:eb:ae:86:f1:19:5b:76:28:c5:04:39:f6:
         1d:bb:1f:7f:03:19:ee:b2:42:9d:93:b8:5e:b4:2e:48:7b:a0:
         a1:ed:31:55:2c:44:b6:ce:84:40:2e:48:8b:ce:04:1c:dd:dc:
         8c:05:bb:f6:e0:db:a6:9d:9d:85:f9:39:2e:a4:8f:39:32:7a:
         7b:0a:99:05:fc:a7:7c:c2:0d:d3:b7:f0:2a:60:04:3b:5a:a4:
         20:e4:dd:1b:2a:18:d3:dd:73:b4:fe:96:29:6c:d9:50:b7:35:
         58:2c:04:44:33:e5:cf:1b:be:22:c6:67:4d:f3:82:1c:a6:25:
         68:54:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:34 2025 by rpki-client