Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/7e3a53c0-ae0b-364e-9083-496c27cf871f.roa
File:                     7e3a53c0-ae0b-364e-9083-496c27cf871f.roa (raw, json)
Hash identifier:          +3xIatAHq7aVbnK22VuqUQSe2kTSVILVniz/tseevy0=
Subject key identifier:   73:92:10:A8:87:13:7B:C8:62:3F:2C:7F:65:9D:52:FB:12:10:BC:0E
Certificate issuer:       /CN=3364015a-cbd4-4063-84a8-a6b77c470bce
Certificate serial:       010D0C9F4328584ACE0BA1F7D04EC53333F6AE40
Authority key identifier: 22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/7e3a53c0-ae0b-364e-9083-496c27cf871f.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     396073
IP address blocks:        198.135.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a1:f7:d0:4e:c5:33:33:f6:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3364015a-cbd4-4063-84a8-a6b77c470bce
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=25d2129e-05e3-430c-85fc-887a04210e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:22:e1:3c:ef:46:76:94:8b:c1:ad:63:f5:
                    68:84:49:a6:04:f7:89:4e:d4:3f:44:c4:ec:1e:a0:
                    74:c8:76:a1:75:cd:70:61:d2:da:b7:cf:8a:42:d6:
                    66:9b:87:a6:1c:e4:53:fb:c5:c8:2a:40:d2:32:f2:
                    3c:ca:a5:fc:c0:4d:6f:5d:bf:7b:95:a1:9f:da:20:
                    d0:84:ce:4b:1a:57:e3:0e:cd:b4:82:4e:33:fe:9e:
                    08:0b:db:2f:ce:a7:a1:c2:75:3f:40:cf:ea:e1:80:
                    12:a0:a9:37:6b:06:9d:4c:e6:38:a9:65:15:1d:2d:
                    4a:32:0a:8f:40:53:59:32:a6:94:d0:17:24:0f:b9:
                    cc:ce:90:e6:48:64:98:5f:35:da:99:44:f7:1d:34:
                    84:b1:72:2b:38:47:94:33:e4:31:7c:c0:37:c7:1d:
                    72:69:a7:c7:0d:23:3b:43:c7:c9:1a:7e:51:e3:f7:
                    22:ac:06:b5:fd:5a:cb:bd:97:2b:ba:dd:95:fe:c7:
                    5f:1d:46:56:92:6c:3c:d4:ad:23:b6:27:3c:7c:b2:
                    5c:51:67:49:e1:b7:5c:42:07:14:19:a2:85:82:79:
                    ea:0b:95:ab:58:84:bc:1e:3f:27:bc:d8:b2:9f:cf:
                    4b:2d:0c:9d:68:55:50:9f:34:c4:54:29:34:66:f9:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:92:10:A8:87:13:7B:C8:62:3F:2C:7F:65:9D:52:FB:12:10:BC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/7e3a53c0-ae0b-364e-9083-496c27cf871f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl

            X509v3 Authority Key Identifier:
                keyid:22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3e:49:0d:40:fa:86:c2:3d:40:be:d1:0a:ee:34:35:ec:f1:
         b1:c8:fa:de:27:ef:cf:35:6b:8e:bf:48:c7:37:81:41:03:74:
         a7:cf:f0:b8:75:03:4b:7b:54:d5:c1:e1:f6:e9:31:67:0b:3b:
         8d:99:3e:fd:81:87:fa:a8:2c:b5:cf:62:64:65:76:9f:15:67:
         e2:fe:33:eb:ed:46:c5:97:ee:6f:cf:5f:85:5b:17:4e:08:4b:
         9b:55:85:97:03:33:51:5d:84:a1:33:e9:10:66:3e:fb:37:37:
         c9:3f:bf:78:02:b9:d3:9f:df:0b:7e:b5:28:c4:98:b7:bf:d6:
         e5:1b:cf:c9:b2:4e:39:90:68:fb:e4:03:78:40:55:70:77:a8:
         7e:bd:89:68:a1:80:b5:fb:da:ec:01:eb:7b:73:44:b1:f8:c5:
         d4:c2:a2:14:c7:ed:b9:e6:7e:d1:25:9d:8b:80:49:38:8f:17:
         66:04:2a:0f:7a:fc:02:31:04:5c:fd:b9:88:5c:f8:be:a8:11:
         21:60:17:dd:a5:02:96:6d:25:91:b0:ca:0b:ae:e5:c5:33:34:
         84:a7:63:d1:99:d5:2f:48:72:e8:08:3f:8e:ea:cd:86:ea:50:
         cc:c0:c3:4a:e3:94:82:a5:10:1f:36:62:04:d0:13:27:44:ce:
         7e:02:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:21:18 2025 by rpki-client