Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa
File:                     1b1477be-4861-34e9-a84a-b4ea3332351f.roa (raw, json)
Hash identifier:          c/HXLgHwIU/8ikVGKyE+pCJ9ys2Vz4teVyPSnylxTyg=
Subject key identifier:   96:9B:B5:66:E9:A5:1D:27:F9:74:FE:2F:CC:5B:67:F7:F0:34:47:0A
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B1806E716A93FE74744587D00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11232
IP address blocks:        67.217.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e7:16:a9:3f:e7:47:44:58:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=39126e82-1c38-445c-99cb-98149c5f3f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:79:a7:a7:d7:10:24:94:76:75:14:2a:cb:
                    0f:5f:f7:fc:84:f2:9c:0a:1c:72:e6:0a:35:96:fd:
                    e4:d7:5f:e3:bd:27:52:27:ed:88:d1:48:07:f1:3e:
                    58:b8:91:fd:78:dc:05:99:9e:02:24:83:97:d0:96:
                    e5:8d:82:6f:33:18:09:55:46:94:d4:c1:47:93:34:
                    b3:e1:64:e4:39:3c:a7:68:2e:d7:05:10:24:a1:de:
                    30:65:e6:cf:9e:38:2c:18:8e:00:5a:e4:54:39:45:
                    b7:ee:61:a3:02:97:e9:ff:56:7d:29:7a:4f:1c:c5:
                    48:a9:dd:e4:b0:75:f3:07:77:bf:58:6a:99:3d:df:
                    ae:b2:50:92:65:c4:36:97:18:92:04:4e:63:4f:af:
                    d6:61:e9:4c:c1:4c:4e:5b:96:82:30:fc:6a:2f:2d:
                    b0:79:28:57:e2:3e:8a:8f:fc:51:88:ec:d1:e7:c4:
                    6b:3f:64:d1:e4:85:b8:ac:41:21:31:66:b6:98:ec:
                    95:a4:ad:22:19:dd:68:e1:65:fd:14:86:be:86:92:
                    ea:5c:1e:17:5e:d3:95:6c:76:5e:57:5d:0f:18:b1:
                    63:30:cd:9a:56:49:5c:61:ef:f8:6a:d4:6e:7d:e2:
                    63:b7:68:04:9a:89:de:84:81:6f:9e:7a:20:6e:39:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9B:B5:66:E9:A5:1D:27:F9:74:FE:2F:CC:5B:67:F7:F0:34:47:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1b1477be-4861-34e9-a84a-b4ea3332351f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:46:e6:e1:d6:23:12:39:b3:1b:c9:bd:7f:fd:50:a1:fb:
         25:a7:5e:b0:af:8b:7d:b6:3c:74:ac:6b:09:bc:53:9f:18:63:
         33:7b:5e:71:3d:42:9a:56:65:41:38:a0:da:4e:4c:09:ab:8c:
         a5:7b:b0:26:c8:a7:6c:b8:0b:c7:d5:e0:79:51:51:56:e9:2e:
         10:18:65:1f:ae:6c:4b:11:cf:04:02:25:a4:6d:0d:21:84:11:
         3a:02:35:b2:b8:96:65:37:0c:eb:bc:23:69:1e:68:a4:23:c5:
         87:1f:f0:82:a0:76:9f:63:a1:e4:15:5a:46:71:78:2b:58:0b:
         d0:c9:d7:68:e3:68:0a:50:3c:4b:79:1a:18:7b:3c:39:2e:e8:
         2e:b0:88:53:33:82:02:45:23:4a:7a:36:70:de:5d:29:64:89:
         7c:6c:a8:f7:3f:f6:dc:e0:4f:11:5c:45:a6:c3:d3:b2:3d:d9:
         8b:ec:b4:b7:ac:d2:a2:f5:76:bd:57:9c:44:a3:23:aa:29:0a:
         67:41:71:a0:bb:c6:54:66:1d:5b:89:fb:71:dc:b1:0c:ba:de:
         a7:8e:b0:e8:97:0d:06:6a:9c:ad:42:ec:b1:2b:76:21:55:6c:
         be:23:a0:42:03:4f:72:6e:f3:f1:89:00:29:59:33:0f:b5:b2:
         50:e7:2c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:19 2025 by rpki-client