Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa
File:                     39a0738d-bd81-3dc4-bada-007779bfb3e8.roa (raw, json)
Hash identifier:          IY9GMIioxgUyYd7/+pjt/LN7AUz3ZaBSgs1lXFIqa2k=
Subject key identifier:   D7:5C:6B:72:B8:FF:08:17:8C:B9:E2:B8:D8:71:AC:29:D2:BC:98:14
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584B715CAAF57957AC1CADA04880
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        204.194.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:aa:f5:79:57:ac:1c:ad:a0:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=ca7c56a9-ecb9-4788-8ce8-7bbe6a3a865b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:b9:bf:0f:8e:eb:fb:cb:69:35:ca:b5:42:
                    da:86:e3:74:10:49:b1:00:da:17:84:89:65:77:aa:
                    8c:cf:ce:39:f0:c7:a6:a9:0f:ce:d7:37:a7:88:38:
                    bd:5d:09:b2:6f:05:98:0c:6d:bb:d4:f1:52:08:10:
                    fd:88:85:1b:fc:9f:33:75:8f:af:16:3a:48:9a:6b:
                    97:27:8f:b6:73:57:eb:57:c5:e2:92:dc:26:14:ef:
                    a3:06:7e:21:5f:34:6b:4d:65:2c:b8:4d:75:24:0d:
                    bd:4a:ae:83:bd:b5:36:25:ea:aa:77:85:f7:ee:8a:
                    92:ef:39:7b:5e:41:86:ca:93:8c:e7:6f:cc:54:ea:
                    ed:3a:5a:20:e8:ac:5d:55:41:03:f7:b9:a0:40:2c:
                    37:e1:a7:38:d6:39:af:19:a2:fe:24:0f:9b:32:78:
                    d5:2a:af:ef:0d:55:a5:f1:45:9c:80:4b:e2:24:e4:
                    ef:da:63:8a:51:d0:24:18:a9:2b:68:d2:6f:c3:23:
                    4e:9c:54:54:c6:5c:f4:02:c4:7a:8b:86:34:93:98:
                    93:04:d4:56:71:64:97:1a:b4:60:8b:7f:44:68:df:
                    a0:be:ac:ac:4c:d8:04:c1:e3:f4:a0:51:78:d6:23:
                    bc:9a:8b:17:4b:08:0d:5f:87:e5:db:65:ee:76:78:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5C:6B:72:B8:FF:08:17:8C:B9:E2:B8:D8:71:AC:29:D2:BC:98:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:d6:d6:31:5b:28:6f:f8:19:92:36:93:f2:22:a7:27:54:18:
         d9:36:85:19:48:3c:07:ce:90:f7:d2:5b:d7:47:6d:72:df:69:
         14:72:e3:dd:b2:6e:fb:9d:6a:18:9d:1b:d4:e6:cd:a9:ae:33:
         73:33:a9:c5:29:e4:31:a2:13:c8:a9:58:ca:81:e3:94:4e:f5:
         08:52:e9:07:84:67:d7:69:44:52:c7:a0:a6:b2:51:bc:69:53:
         9f:46:bf:9d:ce:8b:21:6c:91:d6:29:73:d2:b9:5d:e6:64:52:
         fb:f0:8b:39:15:15:48:ce:09:2d:2d:26:3e:52:aa:3e:cb:e3:
         53:7c:12:ca:e0:ba:bc:1f:cd:d2:d1:29:db:f4:51:39:0f:0f:
         ee:49:13:25:73:fe:8f:86:38:c5:75:8c:a6:b7:72:dd:f2:99:
         5e:1f:d0:bc:93:31:fb:d8:da:29:e9:eb:56:94:f0:6d:86:fb:
         2a:44:5f:d0:e8:08:0f:ed:23:af:43:d1:d2:16:93:d4:eb:d3:
         5b:b9:94:cb:d2:4a:0a:b9:36:a9:9c:3a:84:c1:f6:c6:51:2b:
         9c:d4:43:10:91:61:39:64:ce:38:d3:fa:ef:53:8d:bc:7b:1d:
         9e:70:cd:d0:c0:9e:a9:53:b8:5d:95:b1:29:90:80:6b:50:9f:
         fb:f6:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:56 2025 by rpki-client