Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
File:                     70a2edab-599b-37b9-90c6-3e15b53af115.roa (raw, json)
Hash identifier:          4h3A7V3BQCSaBG8BT+1vuq+jD6JmIIoeG+dYl4ijJ9I=
Subject key identifier:   37:62:09:A9:7B:66:50:95:BB:15:C3:30:7D:90:17:1F:6C:8F:A8:C4
Certificate issuer:       /CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
Certificate serial:       010D0C9F4328584AADF10C351BE5C254C6F62C00
Authority key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     397701
IP address blocks:        192.64.12.0/24 maxlen: 24
                          199.193.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0c:35:1b:e5:c2:54:c6:f6:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=8dd61758-9357-4be0-bb26-67ab4d28347c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:05:20:b8:2d:0f:d5:b1:d6:4f:3f:6e:35:05:
                    92:c2:ea:b4:ca:95:19:25:d4:f6:89:4a:7a:7e:ea:
                    f0:13:cb:5d:fa:d8:14:d7:d1:b2:2c:c5:6b:5a:b8:
                    01:80:f8:a8:bf:8c:40:e9:66:35:ca:4d:53:12:84:
                    d6:b3:50:25:45:23:44:ff:97:66:c9:26:eb:f2:00:
                    55:cf:04:ae:5c:99:ce:9c:63:69:85:52:f7:a9:aa:
                    9f:d2:7a:9f:7f:0e:2f:84:ee:88:db:71:8e:ff:52:
                    bd:01:b9:c9:61:0f:2e:23:f4:58:56:49:f2:52:8d:
                    96:bd:27:1a:51:4c:43:8f:b2:a2:ba:74:77:75:8d:
                    3a:95:1d:6f:47:5d:f3:bf:48:15:bf:ca:8f:31:33:
                    5e:79:95:fb:9e:83:f8:da:1b:92:de:c5:3d:0b:97:
                    14:92:12:7a:a1:5d:d2:3e:de:c8:7e:2e:41:ba:4f:
                    b4:f2:c6:ea:d5:77:30:ee:60:85:63:49:64:03:c9:
                    19:4a:f4:48:3d:d9:d9:de:ac:8b:4a:9b:21:25:ff:
                    e6:68:ab:f6:5f:fb:8b:6a:ef:1b:5d:64:1a:0f:08:
                    ab:76:30:8f:9e:52:70:e5:da:e6:04:6b:75:9a:e9:
                    62:86:7b:e2:11:4f:32:48:c4:53:2c:75:02:98:6a:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:09:A9:7B:66:50:95:BB:15:C3:30:7D:90:17:1F:6C:8F:A8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/70a2edab-599b-37b9-90c6-3e15b53af115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.crl

            X509v3 Authority Key Identifier:
                keyid:37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.12.0/24
                  199.193.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:5c:c0:83:2b:10:8e:12:11:ef:06:12:69:6f:b7:03:36:
         ff:29:88:0f:7e:32:16:b6:13:3c:b8:37:54:59:9e:47:f9:55:
         27:df:59:7b:03:a2:6f:a8:39:d8:51:37:b3:ab:df:25:16:38:
         b9:73:b2:77:53:b9:53:91:8e:5c:4b:8d:9a:4f:69:30:74:df:
         8b:9e:1d:17:0d:9a:92:37:d4:fb:2d:8c:01:ee:69:d8:1c:8a:
         b5:6a:3a:a2:fc:14:0b:e6:5d:02:d2:ff:74:ae:5c:d1:75:d0:
         d2:6b:6b:16:3f:56:5e:15:94:a8:63:14:90:45:d6:55:e9:9f:
         e0:98:44:84:b6:7f:27:b2:f8:b0:14:7f:d3:1e:57:71:03:17:
         37:49:72:0b:c3:c9:2d:b6:ee:7c:d1:d4:e0:86:aa:e6:69:3f:
         6b:10:80:03:3d:69:ac:ac:3e:df:c9:7b:85:6a:d6:98:79:fa:
         77:26:ae:9b:71:0e:ec:3d:bb:02:95:4f:4e:b4:60:a5:21:50:
         3a:cd:6f:8b:3e:f2:73:42:7a:da:7f:6c:87:09:36:ec:cf:83:
         2a:12:2f:76:25:b0:66:22:11:49:5d:69:ac:cf:30:f6:f3:ac:
         85:34:29:ea:2c:f0:c8:29:c6:b8:44:df:04:cf:eb:f8:69:16:
         55:3d:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:03:59 2025 by rpki-client