Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa
File:                     fc284e26-d2d1-3655-a308-af31001c9c53.roa (raw, json)
Hash identifier:          OkET30DAf1b9J5ced+F/l9NeN+3jnqxJY13INAeZbh8=
Subject key identifier:   25:C1:ED:0E:37:27:59:5B:60:46:69:7A:E9:A1:CC:B9:EC:49:B3:F4
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584A49706907B59685B08AB69B80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     5769
IP address blocks:        173.176.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:69:07:b5:96:85:b0:8a:b6:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=fa67d31a-b3e0-4945-9661-5576d03f4de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:8f:c0:27:af:db:67:3e:73:69:b1:b5:80:
                    1c:eb:30:b2:9f:3e:42:bb:66:7a:cb:5e:a4:77:5b:
                    45:46:f8:09:e7:02:53:c8:e6:40:c1:4e:88:e1:b5:
                    67:27:46:8b:62:99:1e:1e:78:ab:36:24:41:74:37:
                    6c:74:70:d0:2f:ed:8f:d6:38:31:d5:ee:62:a0:6c:
                    3e:d5:2a:52:bf:0c:10:d3:b5:49:0c:a4:78:8a:6d:
                    1c:df:fa:b4:88:f7:1b:d1:52:6d:d5:1e:7c:aa:c1:
                    aa:32:95:75:98:cb:c4:7f:12:c9:39:99:c4:8f:de:
                    7f:fc:97:a7:3a:92:c7:df:4a:9a:7f:36:3c:b6:95:
                    7c:e5:02:a1:5f:f9:8e:23:2d:7d:2c:8c:f2:93:71:
                    21:32:59:e6:5e:20:98:c0:ce:62:35:9f:45:89:64:
                    07:da:0c:ab:3b:f2:41:3f:2b:12:3e:5b:63:6c:ba:
                    67:d9:30:41:f9:41:8b:cc:71:17:fa:e1:54:0c:6c:
                    2f:ab:b5:80:23:80:73:f3:a9:33:54:72:8f:30:d6:
                    f9:f9:c3:35:f4:e8:05:eb:3f:9a:d7:c7:c7:d3:0c:
                    d7:15:d1:c4:2b:7f:f5:15:ae:b9:0b:45:2e:b7:2d:
                    43:c7:c4:70:06:8e:12:85:8d:c9:3a:85:b1:7f:2c:
                    24:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C1:ED:0E:37:27:59:5B:60:46:69:7A:E9:A1:CC:B9:EC:49:B3:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.176.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:d7:46:bd:e1:d4:c4:73:8e:8f:d0:35:8b:b0:36:ed:00:
         c5:f3:3b:60:1d:dd:a9:f7:01:b4:61:8b:7f:e1:bd:8e:d0:f4:
         95:ee:cb:0f:c4:6b:46:50:74:7f:72:ee:03:95:e5:f1:06:d3:
         d6:c0:1c:10:31:78:3b:3c:1c:31:e0:ac:e1:57:f8:ca:3b:20:
         03:e2:ff:2c:2b:3f:07:79:53:33:06:1e:03:03:07:4d:38:b9:
         a5:41:a0:de:37:f1:97:39:2c:7b:aa:5a:cd:cd:e2:9f:0b:c0:
         ce:68:04:2f:d2:6d:75:b1:3f:af:9c:08:4b:2c:f7:f5:d5:9d:
         50:1c:a1:13:e0:ec:99:4e:7d:ab:dc:85:6e:f0:fb:54:2e:00:
         74:44:85:4c:f8:d3:25:63:16:e7:31:4c:b8:87:96:55:fa:c9:
         f4:d1:d1:59:21:41:af:76:08:62:a2:7b:07:d5:fa:e7:16:1a:
         3e:80:e5:a9:a4:d6:7f:15:05:25:7a:7f:f2:24:6c:5e:98:17:
         30:54:f4:08:4c:9d:d3:08:98:bf:38:fc:49:4e:5a:a4:55:ff:
         03:12:15:0c:4a:7d:1d:7c:23:13:1e:22:01:ca:3b:e8:bc:8e:
         63:7e:56:e8:c1:2b:1f:fc:68:08:71:1d:f5:fb:ca:1c:2d:91:
         6c:18:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:56:33 2025 by rpki-client