Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa
File:                     b60f6871-bf1e-313d-a518-8618b46d517a.roa (raw, json)
Hash identifier:          wkanb8lSz6f3D4j5ONW7ymikzQUyl0/hqfla+wG/duw=
Subject key identifier:   B2:9D:F3:EE:9A:D8:DE:5E:85:7A:2D:E9:B3:B2:1D:78:25:21:B8:E6
Certificate issuer:       /CN=1040c089-26bf-4af5-9c25-bcef963829d2
Certificate serial:       010D0C9F4328584AC01633DE8D74E99D2F23F700
Authority key identifier: 20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     32704
IP address blocks:        198.38.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:33:de:8d:74:e9:9d:2f:23:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1040c089-26bf-4af5-9c25-bcef963829d2
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=168cb1ec-6657-4487-97bb-2bfe14f6f921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:b0:3c:56:07:76:fa:30:7b:03:f3:62:d9:
                    ae:be:bc:ae:11:54:83:7f:5c:b1:6b:07:9a:5d:bf:
                    40:c5:d7:88:26:c9:48:3b:cb:e7:fd:73:8a:3f:9f:
                    7c:c8:a3:1e:4e:9a:4a:d6:1b:a0:7c:7e:92:be:77:
                    87:37:d9:0c:f2:4a:94:9f:62:fb:3f:bf:c4:1c:01:
                    8f:6a:53:9e:44:ac:29:98:1a:6d:0c:86:89:71:80:
                    51:1f:73:b1:af:c2:49:5c:31:ed:0b:17:aa:47:41:
                    94:3d:c6:84:23:ce:4b:fd:b4:b7:73:3e:b6:7f:db:
                    2e:ab:10:b7:e3:37:3b:93:03:5d:1e:d8:47:f2:13:
                    53:f7:8c:da:a4:e5:21:fd:93:ab:8f:4e:ed:0c:ae:
                    53:88:1d:e6:5d:3f:6f:ab:8c:19:a6:fc:8c:8c:4d:
                    d6:dc:ab:a8:d4:4d:e1:c2:cc:6c:ee:b3:e3:22:34:
                    f6:58:ae:c9:75:39:f5:19:f7:01:69:f4:87:c1:b0:
                    1a:7a:70:ef:c6:fc:a2:10:7f:ab:9b:8a:7a:52:f5:
                    62:4c:44:a9:f4:35:f4:8c:1e:49:d4:59:16:f0:b9:
                    d0:75:4f:73:58:7e:ac:f6:36:24:f0:b1:5e:b1:c3:
                    b4:f8:d0:4d:fb:f3:4e:91:b8:7e:bc:82:d4:ba:1b:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9D:F3:EE:9A:D8:DE:5E:85:7A:2D:E9:B3:B2:1D:78:25:21:B8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl

            X509v3 Authority Key Identifier:
                keyid:20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:8e:4c:75:1d:ea:6d:c7:da:c7:0b:89:4d:9a:d5:97:c3:
         e3:c4:21:79:a1:9c:28:0a:3c:02:04:f2:63:27:d9:f3:7d:93:
         8b:93:0f:aa:ca:51:58:20:3d:e4:73:df:43:1a:94:e3:80:a4:
         7f:87:c1:f4:d6:eb:5b:ea:fd:bd:49:5f:8a:1f:32:17:e6:11:
         a4:47:d7:10:91:7f:d6:7e:da:c8:64:89:af:14:0c:d2:4e:4e:
         36:a3:a0:2e:e4:ec:1c:5d:c1:fe:1a:39:d4:75:e1:82:2d:92:
         a0:85:bf:c5:39:1d:8e:a3:41:93:c6:2e:6d:a9:82:a6:0b:e6:
         f4:49:94:d7:c8:ee:89:d6:fd:d8:c8:5b:b6:b4:1d:65:54:44:
         66:fb:5d:b2:1f:fb:49:7b:ae:d8:c1:34:39:d9:7f:85:73:1b:
         56:ca:9a:a8:fc:1a:73:33:75:89:e6:a1:be:6b:c4:e6:71:1d:
         d2:87:43:13:c6:46:e2:17:06:67:2c:40:4e:22:3a:8c:69:12:
         bd:f7:e5:70:36:08:86:50:be:b4:6e:3f:05:09:c2:bc:de:95:
         af:71:f0:5b:53:2b:06:c3:a2:0c:00:cf:b2:91:e0:d4:5a:74:
         4a:dd:89:be:55:87:8a:ee:98:a0:05:18:32:99:01:87:06:ef:
         0d:0f:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:01:12 2025 by rpki-client