Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa
File:                     a553c4ca-c48f-3643-91b5-e2e0760a951b.roa (raw, json)
Hash identifier:          nHdUhMqe/E1fpgWgay900prJGm3o1vhs1kpBfSB6F5Y=
Subject key identifier:   E3:F3:30:F2:76:3A:28:F4:A9:39:A7:2D:A5:A3:9C:BE:7E:6A:6D:10
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19677426D5B730618E29600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        67.68.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:77:42:6d:5b:73:06:18:e2:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=2ac761a5-5f69-422a-82aa-94b062a58371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:54:19:e6:4c:21:1f:40:ae:19:ae:b4:7e:
                    5e:43:d7:9d:bf:a6:05:7a:96:ba:c6:a0:02:f8:a3:
                    06:64:cd:33:d7:20:04:43:c3:29:70:2c:2d:92:94:
                    53:40:38:90:96:7d:f3:e1:6c:7f:72:8a:83:c5:dc:
                    13:6a:e4:cc:48:59:f3:25:84:90:c7:f7:02:09:25:
                    cc:7a:59:71:7d:2e:2f:6e:3a:82:70:f2:25:fe:f8:
                    31:24:88:38:75:1b:58:fd:2d:9e:bd:c7:82:05:4f:
                    62:92:cb:f0:d6:b6:17:4a:d9:d4:97:0b:2a:ba:5a:
                    87:a1:63:3c:95:46:da:50:ff:8d:e2:74:9a:55:95:
                    b3:8d:10:bb:54:a9:1e:3a:d9:4e:06:09:31:b4:3d:
                    68:40:52:7f:86:64:f5:77:5e:30:65:30:fd:97:a7:
                    e1:b1:ff:6d:d1:43:0c:7c:16:bc:6a:dd:6d:69:31:
                    58:92:1c:cd:91:ed:79:69:b8:d8:89:80:ac:9a:2d:
                    41:53:f2:59:11:4e:8b:00:a2:98:cf:62:92:15:94:
                    8c:44:95:d2:45:65:34:e8:a0:9c:4b:57:3e:dc:46:
                    e7:9e:3c:08:57:da:5c:5d:3f:19:0f:28:48:bb:14:
                    61:3b:b8:c0:78:3e:37:f2:52:31:04:e4:20:03:cf:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F3:30:F2:76:3A:28:F4:A9:39:A7:2D:A5:A3:9C:BE:7E:6A:6D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:46:5d:2f:1d:0c:48:c9:d4:3a:8e:45:79:7a:6d:33:4b:
         3d:a5:ae:97:20:e8:60:1c:4f:69:e5:68:a4:77:35:49:78:ff:
         d0:d0:6e:bf:19:10:29:95:0d:bb:ec:ce:9f:7b:63:68:46:5a:
         f2:74:58:ae:0a:a1:2c:65:ff:cc:d9:81:c1:61:df:fa:a7:2f:
         dc:a2:ab:81:df:5a:41:c2:bf:ca:de:41:83:5a:83:7c:58:e9:
         2b:e9:8a:91:4d:a3:b8:21:e7:6f:7a:e4:56:12:46:37:9b:fc:
         22:ab:a5:d4:1a:81:5b:1a:ed:a1:14:5c:54:0d:36:a4:2d:ad:
         01:2c:5a:a6:5a:2d:1d:49:05:99:c0:fb:03:09:ed:25:af:f6:
         63:4a:9e:32:31:36:eb:87:a0:56:ae:dc:17:16:00:df:3d:e4:
         07:85:52:74:0f:c3:7a:1a:fb:cd:2d:46:0a:a8:3c:ff:37:05:
         9a:44:a8:10:b7:a2:c1:c0:7d:3e:ff:f2:50:02:e0:33:72:6e:
         4a:55:b5:55:0e:5e:e3:9e:de:10:3e:00:ea:53:61:ef:df:d1:
         a5:97:cd:c3:9c:70:b6:86:00:2f:54:1d:c9:49:f2:bb:f2:67:
         4d:40:03:b3:7a:d5:1b:47:0d:94:95:01:d7:ec:5b:af:96:29:
         0e:b6:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:23:09 2025 by rpki-client