Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/62ab5157-1d2a-3cf5-851e-0837b0509c83.roa
File:                     62ab5157-1d2a-3cf5-851e-0837b0509c83.roa (raw, json)
Hash identifier:          CiPbNKD0LDsEIxxEZ/IXnt5bPlSRrNzCJX+w7AqFLiE=
Subject key identifier:   3F:4F:A3:D2:D4:FE:AD:D4:D3:61:9C:2C:CF:17:3F:04:F4:D2:F8:F1
Certificate issuer:       /CN=63772934-17e5-40fe-9a28-6fe830808dc3
Certificate serial:       010D0C9F4328584A86DB762A44219F9FE9471BC0
Authority key identifier: 51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/62ab5157-1d2a-3cf5-851e-0837b0509c83.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     398264
IP address blocks:        161.38.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:76:2a:44:21:9f:9f:e9:47:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63772934-17e5-40fe-9a28-6fe830808dc3
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=9830b6ae-8a2f-462b-a5d6-c650487e9e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:9c:7b:af:b4:46:29:2d:65:33:95:20:a5:
                    5c:68:3e:42:90:fc:ce:af:34:d4:14:b5:84:0c:52:
                    82:7f:8e:5b:cc:44:67:17:70:12:7e:90:64:4b:04:
                    1a:7b:c7:26:07:b3:cc:f7:bf:27:85:5f:e6:8a:e0:
                    49:fa:c9:23:8f:2a:b2:e3:f5:76:13:88:64:36:4d:
                    94:0c:08:dd:21:40:fb:95:cb:7a:6c:76:20:cf:7c:
                    3d:b3:24:6b:c2:a4:85:d2:bb:0c:45:68:4a:16:f4:
                    2a:56:40:56:27:c2:0c:bc:ce:e9:60:ec:79:8c:dc:
                    78:6b:b2:08:d4:76:6b:13:4a:30:b9:2f:d6:c6:fa:
                    1b:b2:ae:42:7b:6e:8a:c7:9d:77:ba:d7:36:62:44:
                    4a:b2:f1:5f:ea:9f:4b:25:a9:af:a7:3e:fb:c5:70:
                    9b:ea:e6:1a:09:ce:a2:cd:d6:81:f3:44:6d:c1:a7:
                    27:c4:12:6a:a0:8a:b8:55:8c:45:94:55:0e:6d:ea:
                    0b:fb:f2:78:4e:95:b1:39:0d:e5:27:be:dc:83:17:
                    d5:da:59:8a:c1:3e:c1:79:bd:ff:99:30:88:e9:b4:
                    8a:8d:68:38:68:ac:f6:6a:c6:f3:60:b4:14:24:fc:
                    7b:91:84:fd:f2:b8:0f:b4:26:9f:ee:45:19:79:9d:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4F:A3:D2:D4:FE:AD:D4:D3:61:9C:2C:CF:17:3F:04:F4:D2:F8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/62ab5157-1d2a-3cf5-851e-0837b0509c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl

            X509v3 Authority Key Identifier:
                keyid:51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:8d:fe:bb:9c:0b:d4:c2:19:af:49:62:0d:3c:da:84:fe:
         4c:d7:b3:3b:bf:4d:54:22:cf:bb:2f:5b:25:66:b8:63:f2:89:
         32:28:1b:d2:5f:0f:26:38:b2:59:19:61:aa:67:1d:7d:c1:26:
         3b:2f:67:d6:7a:7b:89:2e:f8:9c:41:f2:c1:2c:19:e3:3e:7a:
         1f:db:9f:b0:d6:b2:92:d7:32:33:67:a1:20:d1:4b:96:46:e4:
         9f:55:6b:dd:13:66:3c:39:75:dd:e2:c2:43:aa:f4:2a:11:46:
         fb:fa:a1:3b:d3:e5:86:5c:a6:a8:17:05:14:25:b9:92:85:3d:
         0a:9b:b0:6b:87:0b:b5:c8:c4:9a:91:f8:6c:01:7e:33:72:5c:
         de:dc:d2:f4:bc:b5:4d:8b:cb:56:d9:2f:a1:fa:3d:5a:b3:52:
         23:17:bd:09:d6:df:42:d8:b7:b8:0b:f9:43:74:18:1b:dc:06:
         64:9e:3d:a4:3e:20:92:77:67:00:b2:f7:43:d9:dd:dc:03:9e:
         2c:1e:1c:b5:cb:11:a3:0c:78:75:6a:b8:1d:b9:d9:24:83:79:
         ee:e5:75:1c:09:49:22:20:ec:19:1f:ce:f6:3b:e1:1f:8a:27:
         95:24:d5:e4:32:98:ae:12:ee:bd:9a:8e:0f:31:ae:5f:96:a6:
         c9:e8:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:23:57 2025 by rpki-client