Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ad2c90a9-e608-36f7-9b4b-343c8e14f51a.roa
File:                     ad2c90a9-e608-36f7-9b4b-343c8e14f51a.roa (raw, json)
Hash identifier:          7EVebOdgd2x25VVeeP/qChbPwQXVr2qLd9tp/QXcOXA=
Subject key identifier:   1D:1B:2A:01:B6:1E:1F:E1:BE:71:6A:6F:2F:38:BA:B8:58:53:8F:11
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584AC2E0FD4D15BB8C1F346B5F80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ad2c90a9-e608-36f7-9b4b-343c8e14f51a.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     63062
IP address blocks:        67.44.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fd:4d:15:bb:8c:1f:34:6b:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=374e9d40-e72b-4b18-b91c-d2fb43de3b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:26:7b:79:35:16:8d:93:b3:05:f3:ac:4f:
                    d5:06:9a:88:eb:ff:34:64:5f:8f:e6:4d:40:00:b1:
                    21:0c:04:2e:4d:bb:f0:37:e1:06:69:ce:b0:8e:fb:
                    c3:cd:b4:d9:a0:47:0b:8a:a1:4c:ac:67:17:ed:18:
                    95:f8:52:45:1b:33:c0:8d:be:08:c4:27:22:7b:a2:
                    be:61:82:7c:f3:ce:55:a4:fc:d0:6b:62:f1:35:ab:
                    34:65:f3:bf:de:6a:01:e5:b8:c9:d4:48:10:e3:42:
                    b5:98:04:a1:ae:13:7a:2f:66:be:be:ff:c1:4b:94:
                    28:77:fa:84:60:f8:88:8f:ea:4c:43:98:41:b0:8f:
                    cb:08:7d:b4:1a:09:d7:1d:80:7f:e3:33:5b:12:8e:
                    5a:4b:28:40:2e:61:78:01:9e:a7:20:c9:b9:61:1b:
                    c9:a6:23:d2:04:38:47:a5:d3:83:c3:56:b6:8a:a4:
                    87:80:e5:77:1e:75:40:56:05:77:45:84:24:7a:af:
                    9b:91:d7:8c:28:7a:7d:13:2e:ee:36:35:91:fe:00:
                    1f:a3:53:26:a8:a4:bd:51:22:2f:67:5e:bc:f0:2b:
                    0e:fd:51:96:d3:24:da:53:22:21:c7:af:88:1d:f2:
                    9b:35:a6:fb:76:f7:ef:bf:55:bd:57:c4:22:4c:09:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1B:2A:01:B6:1E:1F:E1:BE:71:6A:6F:2F:38:BA:B8:58:53:8F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ad2c90a9-e608-36f7-9b4b-343c8e14f51a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:33:95:a9:6a:cb:0f:a1:12:1f:09:4f:72:81:82:34:ab:8f:
         e9:02:80:cf:6b:be:db:bd:42:44:41:46:03:43:12:f2:9e:99:
         69:39:c9:9b:a8:59:02:60:4d:40:bd:d7:30:02:1b:da:bc:73:
         bc:f4:8f:79:b5:58:7b:5f:4d:9d:7f:8a:21:63:8d:b4:56:c4:
         12:07:e6:37:ce:67:40:eb:82:90:45:7b:8a:bf:4c:cf:6d:e4:
         83:3f:9e:fe:53:61:e9:bf:70:d5:71:38:ee:7c:4e:1e:6d:46:
         54:15:49:6a:60:bb:2c:3f:82:fe:ff:93:74:09:39:27:83:9f:
         0d:d3:55:0f:6b:e3:2f:fd:1b:4e:b0:7f:1a:6a:2c:f7:70:59:
         e1:0a:09:70:60:a4:fd:3d:c7:2e:ef:f9:92:1f:03:fa:dc:01:
         d7:19:26:bf:ef:7f:1f:23:75:8b:05:62:51:ec:56:aa:7e:b0:
         96:3d:42:bf:ed:d0:94:a1:65:42:a5:35:55:51:bf:5c:8e:9d:
         30:16:7e:62:53:83:3b:dc:01:42:85:c3:dd:e3:97:ca:0d:8f:
         24:ce:d2:9c:df:f4:0d:ee:71:6d:e5:fb:83:17:ce:b8:63:0c:
         35:a0:8d:03:e3:61:ac:1c:86:1d:26:4c:ec:2a:e4:8f:c1:97:
         db:93:17:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:36:12 2025 by rpki-client