Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/61870f32-e261-3f4a-8f98-a2aa34b48256.roa
File:                     61870f32-e261-3f4a-8f98-a2aa34b48256.roa (raw, json)
Hash identifier:          t2E8EYMkUvCjsPctI+aBnE0WYm0fO5PacRH59WnESaM=
Subject key identifier:   1F:D5:B8:DC:8C:15:94:73:C5:7A:38:8C:54:7B:51:74:A5:EE:78:BA
Certificate issuer:       /CN=383e9a28-cf2d-4545-8662-6ef42ad8c1c7
Certificate serial:       010D0C9F4328584ACE0B9273D1379A7F5762B2B0
Authority key identifier: CC:FC:7C:A1:AD:86:36:4E:D3:9C:48:D4:F0:29:C5:FC:C5:6C:97:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/61870f32-e261-3f4a-8f98-a2aa34b48256.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     393240
IP address blocks:        130.51.176.0/22 maxlen: 22
                          162.245.172.0/22 maxlen: 22
                          209.163.110.0/23 maxlen: 23
                          2604:8a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:92:73:d1:37:9a:7f:57:62:b2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=383e9a28-cf2d-4545-8662-6ef42ad8c1c7
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=0bdfd1f4-fd31-488c-b667-96b50870b9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:79:db:3b:62:0c:22:f2:59:5b:9f:ef:2f:
                    b1:d7:5d:ac:2b:7a:a5:48:2c:4e:07:98:5a:24:40:
                    9f:b2:4e:78:47:f4:32:72:bb:10:d8:93:3e:f9:e4:
                    6d:0f:ea:b2:2a:b2:da:d2:de:07:aa:e3:ec:63:ce:
                    05:00:ec:02:9b:39:b2:8f:16:f2:38:cd:42:b9:f8:
                    99:79:73:09:da:c1:f2:36:66:9e:01:ca:95:dc:29:
                    73:fb:e5:ca:64:11:76:16:c8:91:9d:d4:1a:d5:62:
                    f5:f0:57:45:26:7a:cd:0d:6c:d5:e4:dc:6e:1b:f5:
                    f7:0c:10:60:12:44:d9:66:5f:03:6a:11:c1:76:43:
                    1e:11:21:e3:68:3b:c7:ba:9d:8d:42:fa:ab:9b:19:
                    73:8c:33:14:6c:4a:12:57:39:c1:42:0e:5d:44:36:
                    31:92:1a:5a:06:59:52:92:e2:5b:24:cf:8b:23:c9:
                    bb:3b:8e:5d:1f:f5:57:59:25:79:a9:e4:7f:87:ef:
                    fd:6c:c1:06:91:25:68:42:42:7d:a9:69:0a:1e:fa:
                    de:ac:c7:d6:97:3b:45:93:c4:b2:1c:81:84:10:cc:
                    d8:2a:c2:06:cc:cf:76:fc:df:7a:66:77:38:b2:75:
                    5c:56:dd:d7:2f:e4:35:b0:dd:28:45:f6:20:83:2f:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D5:B8:DC:8C:15:94:73:C5:7A:38:8C:54:7B:51:74:A5:EE:78:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/61870f32-e261-3f4a-8f98-a2aa34b48256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:FC:7C:A1:AD:86:36:4E:D3:9C:48:D4:F0:29:C5:FC:C5:6C:97:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/383e9a28-cf2d-4545-8662-6ef42ad8c1c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.176.0/22
                  162.245.172.0/22
                  209.163.110.0/23
                IPv6:
                  2604:8a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:b8:90:51:1f:f8:91:25:cf:98:04:81:32:4a:ab:20:3a:
         57:bb:d5:2d:2c:e5:7c:39:4e:fa:53:80:93:d2:3e:a9:5a:b7:
         1d:16:f0:6a:82:11:27:19:cb:fc:01:6f:ab:da:df:b8:52:23:
         ba:4c:24:d8:da:43:d8:1d:d6:b0:04:0b:05:98:eb:21:bb:01:
         21:c8:cd:66:ea:a3:71:3a:e1:6f:0c:60:55:82:0e:11:f6:9c:
         70:f3:37:2c:09:1a:92:10:59:15:b8:9a:b5:98:30:19:c6:e8:
         cf:3f:3d:f6:13:7b:f5:7e:48:3e:99:22:d9:e5:24:f3:58:b3:
         8e:a0:63:78:24:78:2f:43:6d:53:bb:0a:1d:41:e4:3e:ec:c5:
         e6:f4:a4:1d:62:cc:72:ec:43:83:25:91:e6:61:e2:92:43:e1:
         4e:3c:70:da:ab:14:86:95:30:0b:90:16:d7:46:85:db:c3:65:
         66:ef:5f:b3:4f:9a:26:a3:a1:c4:85:c8:af:6e:a2:b2:d3:9b:
         bb:2b:62:24:ac:66:5f:b9:61:b1:d4:3f:00:7e:0b:0e:2f:a9:
         d1:ba:e0:d9:c7:af:e9:81:45:8c:2e:3e:03:fd:40:7e:b5:d3:
         52:7c:ff:56:4c:df:08:17:fd:da:cc:b4:80:30:04:dd:af:8f:
         d1:bb:6c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:31 2025 by rpki-client