Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
File:                     38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa (raw, json)
Hash identifier:          s0o0FBH9+unMSMIVKvpiA/8EBY1uRPCX5ZrJ3/7BTUg=
Subject key identifier:   34:4B:A6:08:15:A9:A0:E5:07:8F:26:2B:2A:9F:76:A7:BC:B3:9D:E8
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584AC710F1738CE78E032A07CFC0
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     18914
IP address blocks:        107.161.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f1:73:8c:e7:8e:03:2a:07:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=03606fc6-b79f-4c0a-a499-f2f014197247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:8c:f0:90:4a:54:43:8d:87:35:7d:61:9b:
                    49:49:13:ac:07:0d:fb:1d:6f:47:ea:57:c3:99:5e:
                    0f:be:b6:7d:1c:73:cc:6d:b9:78:73:bd:22:ee:dc:
                    ef:d8:fd:4f:c8:1f:14:66:05:a9:cf:46:6c:f1:87:
                    a8:5f:d1:53:fa:d4:30:ca:62:e8:ee:85:d6:3f:a1:
                    17:7d:19:9c:17:36:c3:ca:19:07:6f:d3:6b:d2:7b:
                    96:99:a3:46:35:a7:c5:15:a8:d2:aa:19:9a:da:94:
                    0b:05:4f:51:66:cb:0f:04:24:24:a5:7b:82:57:c4:
                    b5:58:9f:66:c7:25:2e:c5:61:da:8b:07:ee:97:65:
                    28:74:ce:87:6c:9c:ef:4a:76:31:eb:2e:51:93:fe:
                    af:8b:aa:fa:ed:52:99:7e:68:54:3a:e3:a0:fd:79:
                    5f:2f:d2:b6:a9:a7:8e:f7:af:89:30:d7:f9:cd:7c:
                    f5:15:1d:e4:c9:fb:74:9e:6d:47:7e:b3:f2:3b:fb:
                    f9:4e:03:b8:65:89:6c:28:b4:8b:21:db:40:db:90:
                    12:61:97:03:f1:f4:5e:d9:b6:88:15:00:6a:01:d1:
                    d5:50:ca:79:7b:e7:7e:c1:b0:58:57:bb:8f:87:e4:
                    c9:fb:f2:51:58:6b:a8:02:47:c1:a2:1a:23:25:a2:
                    07:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4B:A6:08:15:A9:A0:E5:07:8F:26:2B:2A:9F:76:A7:BC:B3:9D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:29:2e:da:24:8a:3d:04:1c:5f:33:c9:0d:d5:87:5d:2c:
         91:69:f6:81:8f:c2:bf:f4:46:01:e1:8c:4c:37:ac:58:92:b0:
         84:b9:50:d2:f1:98:06:4c:0d:c6:d2:bd:15:f8:88:b4:53:a5:
         e4:43:e4:79:c4:55:66:65:d1:e0:4b:98:cb:74:46:d1:d7:ca:
         a0:0e:b2:4b:e4:2a:02:1e:70:2a:4b:cd:80:1f:27:f9:8d:d0:
         ca:88:e4:10:0a:43:77:d2:55:dc:c8:65:64:91:85:c2:30:b5:
         94:f4:a9:c8:64:d2:e1:50:dd:8e:a1:5c:a2:dc:a3:a5:93:34:
         d6:2e:73:5b:ac:72:fe:59:ad:d3:a9:33:aa:c8:64:74:eb:ff:
         4d:40:c1:fb:bf:a5:7f:f9:8a:8b:b8:26:f3:0c:9e:80:87:e3:
         2d:76:72:d2:70:36:a6:70:05:68:c9:8d:d0:d0:eb:dc:9e:13:
         22:2e:3b:95:46:7e:69:aa:9d:c8:b7:b9:a7:68:4f:e6:4e:f2:
         eb:bd:6e:0c:4b:15:29:7f:48:ca:44:e5:78:fd:30:8b:ce:28:
         54:a6:31:08:ca:b2:2d:81:1d:94:7c:c7:69:75:ac:f4:29:a1:
         e3:42:ea:25:af:bf:e3:a3:1a:50:6c:a7:7f:18:be:54:59:a0:
         59:dc:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:43:47 2025 by rpki-client