Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa
File:                     47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa (raw, json)
Hash identifier:          iuE8ytWS3bicWoCC5IyjPj2QHU3p36dY4FW5YTFDIlQ=
Subject key identifier:   6B:A1:49:4A:87:79:CC:78:E1:D6:38:EA:0D:3F:26:CD:6B:B4:44:C2
Certificate issuer:       /CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f
Certificate serial:       010D0C9F4328584A794B7DD13520379E71884480
Authority key identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa
Signing time:             Thu 10 Jul 2025 16:25:41 +0000
ROA not before:           Thu 10 Jul 2025 16:25:41 +0000
ROA not after:            Wed 08 Oct 2025 16:25:41 +0000
asID:                     11507
IP address blocks:        192.139.34.0/24 maxlen: 24
                          204.209.40.0/23 maxlen: 23
                          204.209.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:79:4b:7d:d1:35:20:37:9e:71:88:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f
        Validity
            Not Before: Jul 10 16:25:41 2025 GMT
            Not After : Oct  8 16:25:41 2025 GMT
        Subject: CN=eda6ea47-e12c-43a5-8519-3165cc555e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:9d:11:61:56:1c:4a:12:5d:77:79:9b:a0:
                    c4:83:30:d8:05:c8:61:f9:49:b5:0e:ab:b9:52:1b:
                    d8:cf:6d:c1:63:e6:3b:f3:51:fc:32:cc:a0:7a:55:
                    d6:c6:4b:41:36:91:c5:0d:85:67:df:48:aa:55:00:
                    ea:28:e6:45:b6:dd:d3:4e:fc:91:47:29:f0:e0:82:
                    9f:f6:74:93:ae:97:67:e8:b8:82:96:52:54:c1:45:
                    c0:30:27:5d:8b:ce:8b:55:49:d0:b3:cf:d7:ec:0a:
                    72:ff:51:1f:d4:79:bc:6d:e3:6e:6b:31:f7:81:7c:
                    3c:b6:87:bf:93:88:48:84:66:de:07:b9:c4:59:35:
                    f1:fc:46:83:34:26:b5:34:80:36:0d:4d:d9:99:3e:
                    76:84:a9:fc:bf:f4:6a:c5:1d:e8:b8:99:31:ed:47:
                    a8:84:dd:59:54:d8:ef:83:b9:fb:bd:20:37:b0:8c:
                    6c:ed:35:71:05:a8:ed:51:f0:a0:3f:2e:3f:04:84:
                    80:fb:a9:60:6b:d4:f2:08:d8:a0:09:a1:b3:5b:16:
                    74:11:04:68:01:f0:86:c2:04:f6:35:03:b4:5b:6c:
                    ce:6c:5d:42:1a:18:f3:9a:b7:c5:6a:82:49:3c:93:
                    f2:a1:3a:3a:65:69:79:b9:e5:fd:6d:81:03:49:27:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:49:4A:87:79:CC:78:E1:D6:38:EA:0D:3F:26:CD:6B:B4:44:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl

            X509v3 Authority Key Identifier:
                keyid:71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.34.0/24
                  204.209.40.0-204.209.42.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:19:f1:5a:87:98:59:49:b2:85:64:ed:95:d1:ae:4a:67:04:
         61:72:e9:40:c7:48:90:54:25:02:d3:83:83:4d:31:f0:d4:26:
         cd:77:51:45:36:6f:2e:b5:6a:34:9d:fb:aa:87:84:ea:9e:00:
         4b:39:a1:cc:91:3d:df:d1:69:bc:e0:6a:be:6c:aa:5d:53:3d:
         d1:a0:18:75:e0:45:90:45:ee:c4:70:6a:9b:9e:9b:8b:4b:15:
         5e:c7:a9:cb:e2:61:c0:05:0f:42:7f:64:2e:91:6d:ec:c9:e0:
         70:b1:6f:a1:f5:e4:05:d0:8c:ed:1d:32:b4:23:6e:59:53:ee:
         65:58:b2:02:45:c6:23:19:63:55:fb:d4:b6:fd:b2:bc:7b:ef:
         c2:40:9d:e6:81:0d:ce:c5:d5:4e:d2:ed:97:71:cd:83:8c:08:
         f4:05:42:da:b8:af:53:a0:ed:6e:cc:b8:c7:17:47:30:e8:68:
         b7:7c:21:c2:00:8e:6f:38:3b:f8:9a:88:e5:6d:b2:30:2f:c3:
         3a:47:55:42:ef:fb:1a:c3:86:09:10:9d:7f:ce:c5:c6:74:16:
         6b:a7:c6:f0:fc:f6:04:29:cc:e8:54:84:b7:84:f6:6c:62:8e:
         87:a4:ca:4d:35:07:db:2d:3b:02:0a:13:9e:fd:04:a3:b0:74:
         3d:96:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:08 2025 by rpki-client