Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
File:                     0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa (raw, json)
Hash identifier:          Y6R3YaSXFd28vHr9/m8cDKPBuoBupXdtfUXWLOoFExE=
Subject key identifier:   7D:85:81:02:71:3C:CB:96:A9:9F:F9:71:09:85:98:75:7D:88:BA:3C
Certificate issuer:       /CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Certificate serial:       010D0C9F4328584ACF70F93ADB2A1AE02F76BD80
Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     393906
IP address blocks:        198.153.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:f9:3a:db:2a:1a:e0:2f:76:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=15968e89-efe0-4ab3-8bab-dab4244423c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:b3:9b:50:5f:40:da:2f:8f:4f:d3:3e:2d:
                    a6:97:96:79:bf:53:8f:ba:eb:93:48:75:ac:4e:d3:
                    51:21:00:c0:f6:ad:5f:a4:16:60:80:d7:5a:d4:7f:
                    69:2f:f7:fa:e1:73:69:cc:db:83:c7:9e:bc:f2:1b:
                    97:bd:37:2e:9b:2b:95:b5:92:fe:1f:95:a9:89:c4:
                    9c:da:35:a3:cd:24:12:92:89:a3:5b:e8:e9:be:46:
                    6d:2b:f7:d2:39:06:08:22:37:07:57:aa:de:42:0a:
                    5c:fd:54:ee:5f:2f:58:98:9c:bf:bf:c6:af:ce:b2:
                    e8:35:2b:42:ba:6d:01:41:d5:08:52:11:7c:35:5d:
                    01:6a:7c:34:58:db:86:1d:ac:72:42:3f:e0:50:77:
                    61:3a:50:5a:85:9c:a8:52:0a:ad:47:62:40:99:be:
                    ae:16:ec:66:af:fd:25:37:07:f0:3c:5a:09:c2:25:
                    ae:32:28:54:e2:11:cc:7e:21:e6:d9:8e:63:85:28:
                    cb:9f:f2:ac:af:cc:88:cb:c4:27:3c:fb:84:98:11:
                    f4:aa:fe:c5:43:ab:21:98:c8:7c:47:0a:1d:2c:b6:
                    16:59:aa:5d:38:e5:ac:a5:f1:a2:ff:f7:8b:65:52:
                    c6:88:b2:38:3d:d2:51:1d:72:83:a4:9b:94:d5:b4:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:85:81:02:71:3C:CB:96:A9:9F:F9:71:09:85:98:75:7D:88:BA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.153.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:b4:d3:96:9d:ae:5e:5d:76:eb:ef:e8:a5:67:cc:33:94:
         1f:e6:e0:f2:ec:19:14:19:1a:3b:6d:c1:72:19:66:66:d1:cb:
         61:02:f7:b9:0b:1c:eb:9d:c1:88:35:ed:80:47:08:68:0d:36:
         4d:6f:2f:18:f9:99:e6:af:0d:e3:cb:1e:90:5c:19:b1:ae:5d:
         a8:ca:f8:9a:c2:ee:c2:ce:62:04:dd:c4:d1:c6:8d:c0:98:38:
         06:a6:3f:fb:5d:e8:63:69:8c:51:69:fb:46:5d:bb:32:76:be:
         4c:61:14:64:08:bb:f0:00:66:ce:f9:3d:c7:7c:33:e1:a9:4a:
         7c:87:7c:bf:5e:f8:4d:42:e0:d3:d2:7c:c7:16:71:b1:8b:12:
         8c:53:40:a5:0d:76:32:31:d1:ec:ec:ff:0f:51:41:45:fb:1b:
         c9:bd:40:4b:f6:c0:d8:93:53:b2:4a:11:90:cb:19:fc:93:1b:
         67:7b:48:20:59:be:90:90:68:30:39:7c:f9:51:d0:73:1f:3a:
         4a:d8:7e:fa:9c:00:3c:10:c0:d4:f3:23:f6:9c:60:7b:f8:b7:
         eb:17:04:f6:d1:90:91:44:eb:fb:c2:4d:f9:b4:fe:07:a8:a2:
         4a:84:df:9f:dc:16:bb:77:52:6b:75:66:8b:7e:de:93:65:96:
         e1:cf:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:07:15 2025 by rpki-client