Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa
File:                     971c8edd-06bb-333f-94f5-8b5f3db41453.roa (raw, json)
Hash identifier:          BAG7rMmMyJ2VVcue+bKY5cyCqoxwvm6fmTlrsnqCVlU=
Subject key identifier:   82:B4:00:05:9C:B2:59:F7:73:16:D1:52:E7:43:4E:00:E3:C6:4E:ED
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584A96368A5BEB4078273860AC00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     63062
IP address blocks:        67.44.32.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8a:5b:eb:40:78:27:38:60:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=9652bcc1-b576-4594-948c-9aca48e3f6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:85:88:ab:07:cd:62:12:a8:48:13:9f:67:
                    da:81:84:84:a9:7b:fc:fc:27:3d:02:1f:d0:f2:64:
                    99:66:31:89:92:6e:ee:55:a8:76:62:9f:fd:dc:ac:
                    c4:75:0a:7d:bb:c9:eb:22:79:7d:f2:db:16:28:d6:
                    ae:91:7b:53:63:96:e7:d9:b1:24:60:a1:21:a9:23:
                    27:e2:4e:c7:fb:ad:87:42:d7:ff:2e:f2:97:62:85:
                    7c:75:e5:e6:fb:72:66:14:a7:42:55:a2:7d:09:2e:
                    03:f4:ff:af:a4:65:8a:cd:b2:0d:c0:07:32:2b:3e:
                    d8:96:b8:3f:e6:a4:50:7e:b9:89:55:13:f0:b9:a4:
                    08:ab:57:fc:49:60:87:90:ee:97:8e:b3:5f:10:b2:
                    4b:99:a0:bf:c9:63:ac:5b:9a:00:db:1e:8e:03:9f:
                    b8:6c:19:f7:01:8b:a7:c1:61:ef:92:21:4d:86:01:
                    fd:9e:66:81:ec:02:c2:42:ae:5b:53:72:56:af:41:
                    5f:2b:ca:15:d1:0e:76:be:ae:e3:54:0d:21:2a:fb:
                    58:52:0f:71:c8:88:51:59:db:c3:eb:4b:a1:6b:8c:
                    28:03:1b:de:02:51:30:47:c9:b0:0a:db:b3:f1:02:
                    a2:32:a7:2f:ab:b1:e9:28:9a:09:f9:ae:37:5f:e6:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:00:05:9C:B2:59:F7:73:16:D1:52:E7:43:4E:00:E3:C6:4E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:1d:4e:6f:b8:9f:ab:40:d0:19:5c:e4:4c:68:f1:53:ca:
         29:df:a3:b9:69:df:bc:a6:55:5b:84:59:b5:3b:2f:3f:3f:ad:
         60:ae:b2:4a:ce:58:20:2e:31:04:a1:ad:85:43:0b:bf:aa:9a:
         f3:2e:52:5b:c1:d1:21:ae:62:06:ac:ab:07:07:2b:d2:51:91:
         07:08:67:63:6a:01:f0:47:5e:fd:8f:28:ca:39:a3:ea:e0:a2:
         87:64:62:c5:38:18:0e:9d:3e:56:45:79:2f:77:45:b3:dd:56:
         c9:21:ee:38:27:75:80:d5:89:34:5a:83:cd:51:00:bb:d2:3f:
         d5:d2:76:d8:2e:28:28:94:1d:59:b0:f4:b2:19:c7:ca:dc:47:
         13:76:2b:f1:8d:49:26:2c:67:07:cc:79:02:70:e3:e6:83:ba:
         ba:db:b7:37:c9:1d:d4:39:f6:89:7c:71:b6:69:d6:4d:a9:81:
         98:92:e1:ec:f9:32:ad:3e:ad:24:22:ad:57:7c:f8:24:d6:5e:
         87:e1:81:1b:47:1b:16:f0:30:9a:a8:ae:c9:4a:4a:45:34:7c:
         21:9b:4c:6b:61:4b:1b:0d:96:39:cc:eb:5d:27:7e:26:75:ff:
         ac:0c:88:11:1f:00:b0:62:ad:82:11:f8:07:01:f4:ba:5d:7e:
         01:83:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:51:35 2025 by rpki-client