Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/39ed7cc9-4ed7-3545-811d-3501676e3047.roa
File:                     39ed7cc9-4ed7-3545-811d-3501676e3047.roa (raw, json)
Hash identifier:          l7tA/tkJhQv9okSpoSnRncmANxV4Leas+ndlCceecqM=
Subject key identifier:   CC:58:60:D9:03:6C:3E:F7:BE:7A:C9:3A:5D:08:6C:98:00:5D:D9:F6
Certificate issuer:       /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial:       010D0C9F4328584AF52134DB6EB2A1C3B30D7730
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/39ed7cc9-4ed7-3545-811d-3501676e3047.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     395917
IP address blocks:        207.174.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:34:db:6e:b2:a1:c3:b3:0d:77:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=14cdedc3-c2d4-45cf-a4cd-9165dd390943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:44:87:b1:a2:0e:ff:18:db:8c:b4:cd:7f:
                    99:8c:dd:75:d5:24:fe:e5:39:6d:e4:2b:2b:60:d7:
                    b5:58:0f:59:f1:c7:10:d0:0d:bb:e7:10:54:78:98:
                    58:bd:1a:bc:df:f6:c2:17:ed:83:66:45:6c:a5:7e:
                    d6:ff:cc:0f:5b:3c:23:0b:c8:d6:07:53:5e:0d:f6:
                    cf:7d:30:70:d1:b2:02:92:7a:7b:97:d5:c6:64:c7:
                    0c:62:a4:ad:c9:fb:bf:67:ca:fe:ca:db:87:7e:08:
                    df:e6:ff:f0:7f:72:55:8a:4f:d7:d4:28:93:48:8f:
                    ec:73:77:a2:67:c0:41:93:f1:dd:2c:8b:81:8d:81:
                    5f:5a:75:4d:b2:5f:54:ff:23:57:1f:dc:d4:19:55:
                    da:89:97:bb:f2:34:be:75:b0:2f:0e:f3:66:ab:ae:
                    c2:25:d2:d2:0f:65:71:5d:2a:92:ab:8d:4c:1f:fc:
                    d0:9a:dd:c6:cf:b7:50:ce:6b:36:56:0e:36:98:bf:
                    45:d7:37:74:dc:c8:8f:cb:16:6a:2f:96:dc:9e:78:
                    5a:77:d8:55:f8:64:7d:ae:07:52:53:0e:3c:70:1f:
                    81:60:25:49:06:ca:fa:cb:d4:41:80:a7:df:59:03:
                    e7:60:a7:b6:cf:a2:7d:ba:83:07:25:a1:45:8b:43:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:58:60:D9:03:6C:3E:F7:BE:7A:C9:3A:5D:08:6C:98:00:5D:D9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/39ed7cc9-4ed7-3545-811d-3501676e3047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl

            X509v3 Authority Key Identifier:
                keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:bc:0d:60:b5:b6:64:6f:46:ef:7f:f7:bc:69:78:f3:02:50:
         7a:20:fa:a7:3d:a7:78:32:c0:2f:fd:14:f1:bf:ed:f6:f8:04:
         3a:87:a4:a0:2e:0d:93:95:ac:fa:89:84:82:d6:08:22:bb:35:
         0d:ef:37:3a:fb:f9:e3:fe:af:63:0a:2b:ca:c7:37:a1:9b:98:
         e6:90:e2:51:79:0b:38:4c:5b:ff:60:05:ce:e4:3a:a8:1b:05:
         af:f8:fc:76:d3:cf:65:06:31:5e:53:30:13:37:4d:cc:c9:e2:
         15:45:91:90:ac:c5:27:90:8c:13:8b:d8:48:b6:21:ff:49:60:
         d7:65:33:ef:e0:73:80:e0:a3:5d:99:62:ae:98:5d:71:58:a9:
         d3:02:62:e9:c8:d7:78:88:ba:ad:73:48:5c:3e:fb:08:0d:34:
         b8:56:be:23:23:a1:78:cf:e3:ae:99:43:69:78:30:e8:9f:2f:
         38:74:75:1d:84:46:3e:a0:d7:a2:bc:21:8d:d8:72:bf:1c:cd:
         e9:dd:5b:82:78:ee:fc:d7:91:15:b1:45:11:ad:2b:fb:2f:23:
         19:f1:cb:b8:4d:dc:f7:80:64:21:de:4b:a1:11:c0:33:b5:84:
         db:04:32:fe:f6:ca:80:8e:1c:5c:56:3b:8b:40:48:b1:2f:c1:
         58:b6:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:08:16 2025 by rpki-client