Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c0cc3768-b43e-3d64-b4dd-09a01239e8d3.roa
File:                     c0cc3768-b43e-3d64-b4dd-09a01239e8d3.roa (raw, json)
Hash identifier:          muPMyZhMbhGPdk/k3RAg6x6NYcyTbpuSKJh8s359jCc=
Subject key identifier:   E6:AF:45:08:0D:08:9D:25:83:51:3E:1E:5E:9E:A7:F0:14:A4:76:20
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584AC01630306076620DCDC22A80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c0cc3768-b43e-3d64-b4dd-09a01239e8d3.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     3491
IP address blocks:        207.176.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:30:30:60:76:62:0d:cd:c2:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=302d0c06-aecb-4999-a403-129b5d7e28b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:7a:3e:7f:30:cb:9a:7b:c0:cc:ca:fc:ca:
                    fd:da:b0:d9:22:e9:53:64:29:7c:1f:16:91:43:e5:
                    bb:55:bd:80:c9:38:10:e0:d8:8e:de:bd:0c:b9:e1:
                    28:b2:83:ab:02:3c:3a:5a:f3:5a:1e:15:99:00:a4:
                    ce:78:58:e2:0b:08:be:b5:9a:62:76:98:db:6c:11:
                    71:b9:a6:71:92:92:a6:f4:ec:36:1a:60:3c:03:aa:
                    d8:38:66:bb:03:ef:ee:63:4c:87:f1:27:60:42:24:
                    76:bb:5e:99:69:b6:cb:e2:56:b2:fe:a9:d2:97:a3:
                    60:d4:55:b4:f0:15:33:02:ff:d1:94:e2:e5:85:25:
                    56:5e:b6:27:37:3f:c7:e9:3e:aa:7e:ee:04:ab:c3:
                    2e:07:b2:c8:95:37:13:77:c6:37:35:86:77:17:c2:
                    c8:d3:43:21:0b:1b:14:3e:36:4e:ec:b5:dc:73:da:
                    d0:d8:3e:fc:91:7c:ff:b3:14:4b:a0:06:6c:6e:21:
                    29:89:1e:1a:c5:5e:e0:65:a0:b3:5f:45:e5:26:ad:
                    d3:95:7e:54:cb:b1:12:ba:3b:2b:6c:62:e4:6b:ec:
                    76:57:fe:88:36:65:a0:21:29:d2:d3:ba:21:7f:50:
                    61:c5:5e:6a:5b:69:ff:3e:30:2a:85:a1:45:88:f3:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AF:45:08:0D:08:9D:25:83:51:3E:1E:5E:9E:A7:F0:14:A4:76:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c0cc3768-b43e-3d64-b4dd-09a01239e8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2d:8a:79:4c:5c:72:b3:de:82:f0:9c:f5:f2:f6:20:19:ee:
         50:c1:fa:42:eb:9f:fc:e6:f9:da:25:6d:f7:f3:0b:93:80:46:
         65:93:ea:ba:92:f3:fa:61:56:0e:31:9a:ae:5d:a0:37:b1:c3:
         44:7f:82:d4:f2:38:9a:aa:21:4b:63:48:1f:c6:73:5e:15:11:
         87:09:3a:68:fd:ee:fc:ab:ac:bc:8a:a1:18:b2:b2:83:2b:6d:
         33:ce:32:8b:f7:c7:40:a2:59:7d:b5:77:da:a3:3d:6c:29:33:
         37:30:ae:12:15:8c:92:0c:42:07:3c:69:c8:b8:fd:ba:2f:05:
         49:3e:af:86:f4:cd:48:1e:b1:68:b1:7c:e6:3d:72:66:51:35:
         53:b2:4f:61:ce:73:94:1a:ed:39:dd:5b:5b:9d:3e:6e:70:d3:
         f8:6f:66:00:be:0d:69:ed:aa:6c:e7:e1:e5:37:52:af:39:dc:
         29:40:40:d5:e8:60:bc:dd:46:f4:6a:5d:56:13:0d:6f:23:cb:
         80:d6:eb:f9:02:bc:ea:59:d4:b1:1e:2b:73:a3:6d:d6:2f:56:
         d7:91:bc:4c:c8:48:11:ef:42:a3:cc:7b:2d:cc:8a:9b:b6:04:
         18:d0:f0:1f:3f:63:07:b9:84:fc:69:b3:e6:5e:2f:94:13:e6:
         30:98:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:29 2025 by rpki-client