Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/07371b5d-f179-3164-afcb-bd24a204b59d.roa
File:                     07371b5d-f179-3164-afcb-bd24a204b59d.roa (raw, json)
Hash identifier:          A7Nd6r4ZMwgFfmzR2EZjsKtJSDVFFahWW4Ovr+LVVEw=
Subject key identifier:   DC:EF:DB:2B:44:25:5D:5E:C6:30:FA:96:C8:BD:CA:ED:60:A8:B9:3A
Certificate issuer:       /CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443
Certificate serial:       010D0C9F4328584AF5216FDDA4299A6765C2C600
Authority key identifier: 39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/07371b5d-f179-3164-afcb-bd24a204b59d.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     394962
IP address blocks:        172.110.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:6f:dd:a4:29:9a:67:65:c2:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=0bc428e9-c525-4b0b-b7de-0d613bc1fa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:dc:29:7e:c9:36:fe:b9:ee:1b:46:97:1f:
                    4a:f0:3e:e5:37:8d:b0:98:0a:c2:32:1a:7b:48:7c:
                    78:f7:7d:88:c4:a9:5f:87:84:74:5a:d6:a7:83:71:
                    70:24:b0:ed:03:fe:33:8d:1b:37:56:a1:15:7d:8b:
                    84:7f:a4:cb:f9:0c:e8:87:ac:97:d4:6a:f3:c8:6c:
                    40:af:fe:16:15:0c:2f:ec:b9:2f:79:9a:94:95:86:
                    3a:31:f3:de:75:43:54:60:0d:22:c6:99:07:14:38:
                    96:6d:1d:9b:23:d3:a5:20:43:3f:0a:16:19:51:f4:
                    f0:c6:21:cb:21:09:8c:39:9f:93:14:ae:1a:81:df:
                    0e:69:70:b4:92:a3:f5:89:ee:76:07:79:02:3d:ab:
                    3c:31:54:18:9d:cb:d1:0a:17:dd:77:2c:64:71:03:
                    2c:d7:32:be:3e:6a:fa:6c:54:f7:d4:b4:81:ed:fd:
                    d1:f6:61:a9:06:ef:79:6b:d6:4d:27:ab:a0:8b:81:
                    13:9a:3f:6b:f2:e0:72:b2:58:12:4a:79:b9:d6:8d:
                    1d:3f:c1:81:67:61:af:d4:85:15:39:ec:51:05:f1:
                    50:00:f1:a4:6f:9f:fb:9a:0a:1f:29:48:d8:0e:2e:
                    64:cb:aa:01:3c:16:da:10:92:32:22:23:80:99:32:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:DB:2B:44:25:5D:5E:C6:30:FA:96:C8:BD:CA:ED:60:A8:B9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/07371b5d-f179-3164-afcb-bd24a204b59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.crl

            X509v3 Authority Key Identifier:
                keyid:39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:90:e3:0d:b3:ce:0b:65:f9:c0:d5:c1:19:d9:a4:98:19:
         ad:6b:95:a5:a3:1a:12:17:3c:ac:0b:73:40:cd:d7:c9:4d:db:
         49:73:15:b9:9e:6a:63:58:8f:bb:3b:3e:a4:6b:da:e9:cd:52:
         9e:87:1a:2e:01:fe:ab:0d:d3:b8:f3:06:54:b9:c1:05:ce:65:
         13:12:7b:a7:d8:55:e6:12:5c:70:a0:75:69:38:2a:ed:6f:7c:
         c3:37:da:da:52:1f:ad:89:70:4b:ea:d3:69:b5:ed:98:24:a3:
         2c:69:9a:27:7d:33:2b:6e:cc:95:84:98:fe:91:c5:12:b1:e5:
         85:58:da:9e:b4:f1:9c:c2:7b:8e:98:7e:ae:2b:00:14:3b:28:
         24:be:17:c7:dd:9c:29:f3:dd:4d:ff:83:59:b6:50:b5:d9:04:
         6b:99:2f:81:68:2d:d1:69:af:56:14:f0:54:74:59:7f:3c:58:
         d3:4f:ea:18:88:d1:ba:ef:5e:82:26:10:c3:a0:d1:ae:e1:7a:
         33:78:20:d4:6a:07:e8:4d:01:0e:71:af:3e:bf:9a:e7:01:74:
         e4:a4:07:54:26:d4:4c:d1:e4:9a:29:88:2c:65:7a:37:5d:2d:
         24:eb:b0:f0:4e:e4:93:dd:94:fb:12:67:b3:b8:6a:bf:6e:76:
         54:50:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:21:22 2025 by rpki-client