Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/439609a8-1c99-31b1-bad2-597b7805d019.roa
File:                     439609a8-1c99-31b1-bad2-597b7805d019.roa (raw, json)
Hash identifier:          GRgl8RKwRhWy9EiXbXV1jKsBacs06g+OsvHZzYemBQU=
Subject key identifier:   57:02:BD:E5:62:00:36:56:B1:48:18:97:A9:D5:BA:83:22:86:C1:FC
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849DEDF5BEFA634116142BC3B00
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/439609a8-1c99-31b1-bad2-597b7805d019.roa
Signing time:             Fri 16 May 2025 08:53:19 +0000
ROA not before:           Fri 16 May 2025 08:53:19 +0000
ROA not after:            Thu 14 Aug 2025 08:53:19 +0000
asID:                     393611
IP address blocks:        169.145.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:de:df:5b:ef:a6:34:11:61:42:bc:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 16 08:53:19 2025 GMT
            Not After : Aug 14 08:53:19 2025 GMT
        Subject: CN=b4d5f2a6-b60e-4226-9557-8d22d14c69af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:4e:87:46:0d:73:44:2f:d4:30:57:41:50:
                    d3:26:dd:74:a7:1c:9e:fd:ce:ba:db:20:98:6b:99:
                    9b:97:37:3c:9c:8e:95:8c:dc:af:45:38:9d:93:f1:
                    b3:2e:17:e8:e2:6d:a8:8e:2f:b7:a5:60:2e:e3:3c:
                    ff:8e:5a:48:31:f0:31:cd:86:b1:b8:88:0c:3d:c3:
                    10:60:00:17:ed:86:a2:8c:35:02:5a:8d:b6:ec:3a:
                    cd:63:19:8d:74:7c:95:30:40:51:85:8a:a4:69:e8:
                    49:0d:4c:72:b3:df:70:dd:8d:ac:8b:76:03:2f:ff:
                    47:7e:dd:1a:eb:58:92:87:29:08:3b:58:3f:c2:23:
                    2b:82:14:2a:f5:d5:54:ba:7d:63:ea:2a:18:71:63:
                    50:19:30:ad:d1:8b:88:05:f6:0f:a9:04:9b:c5:c2:
                    74:91:a9:b6:a7:7e:39:cc:12:74:fe:83:09:1c:99:
                    f7:4a:a3:be:3d:13:6c:3b:3b:fd:ca:1f:d9:95:2c:
                    77:de:1a:82:2e:c9:68:f0:87:ed:22:50:ff:9b:dc:
                    7d:9b:74:7c:85:16:45:fc:65:a3:ad:74:52:68:1f:
                    91:61:06:56:9b:9f:16:00:db:e9:8a:14:a5:ae:da:
                    c4:f8:ed:85:98:8e:5d:fe:20:e4:64:10:a0:e2:73:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:02:BD:E5:62:00:36:56:B1:48:18:97:A9:D5:BA:83:22:86:C1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/439609a8-1c99-31b1-bad2-597b7805d019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:01:4e:a1:7e:b8:38:18:f1:70:bd:20:03:43:13:00:90:fd:
         03:0d:23:16:71:50:f1:02:a5:38:69:83:f5:8d:d2:ef:c8:6e:
         5d:c8:11:30:1f:fa:8b:41:de:cb:90:1d:24:d2:49:7a:a0:db:
         1f:06:aa:2d:fe:c8:bc:22:e3:a1:06:4e:a9:e2:1b:64:a0:d0:
         e4:bf:d4:7f:c6:01:41:66:53:e0:77:f7:4b:71:5f:ea:6c:21:
         6e:06:93:49:e8:9c:68:dc:69:62:32:17:31:32:09:5c:2f:cf:
         91:e9:38:73:06:a1:ec:e0:41:a6:30:a5:f6:22:16:b7:5c:ac:
         ea:14:64:5c:a6:5e:29:c5:12:a3:bc:b7:a0:a5:ba:b9:19:5f:
         7f:29:f5:e7:63:fa:6e:e3:39:e8:ea:53:ff:c8:1a:07:4a:94:
         78:70:f0:cf:d3:e7:f3:64:e6:cb:b5:a5:af:fa:3a:44:64:bc:
         c6:86:3e:88:5c:48:75:ea:78:78:b1:19:13:3e:0e:bc:de:a6:
         5b:ce:75:d7:ee:ed:c8:c9:8f:59:ad:1a:12:7c:ed:d8:bf:67:
         5b:f0:e9:94:29:d0:59:d6:37:38:5f:24:e5:44:b9:ab:77:ec:
         f4:2d:f2:1b:20:3e:2d:13:b2:86:66:81:2b:d2:81:e4:b2:f9:
         13:31:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:40:09 2025 by rpki-client