Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
File:                     1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa (raw, json)
Hash identifier:          nOARVcBdYDYVIn49suRm0K8Q2QLuK3KDu9IFGSF1lSQ=
Subject key identifier:   EE:68:14:74:AA:DE:6E:14:9A:0E:D8:43:E4:8B:D9:DD:18:7F:26:B6
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F4328584B679743D21DB257393B5D0750
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     33322
IP address blocks:        208.67.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:43:d2:1d:b2:57:39:3b:5d:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=058f78f4-26f7-4b52-8ef8-26478dc2868d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:fd:a3:70:54:fa:82:f5:e0:13:c8:a0:52:
                    6b:7c:b3:67:04:46:42:07:03:cd:25:a6:03:44:4d:
                    fe:64:f3:b1:3d:7a:76:ab:82:f9:81:64:8c:7c:78:
                    2e:4e:e3:16:c9:e6:7f:7f:c9:6f:3f:89:f1:6a:1a:
                    08:38:9c:68:01:89:9e:0c:f2:dc:c5:98:f4:cc:cb:
                    2e:2c:f7:9d:fc:e0:de:5b:fa:37:99:2c:48:d5:06:
                    f1:54:e7:ce:6c:91:29:83:3e:d3:b7:5e:08:3f:cd:
                    b4:8a:0a:72:53:d3:c7:99:2b:bf:a8:c3:eb:56:4c:
                    11:b1:b7:ec:74:c7:73:64:f7:5b:b8:f4:03:62:56:
                    70:2d:c2:dc:bc:f6:b3:84:56:a4:dd:29:5a:a0:1b:
                    17:33:6c:13:3a:df:30:1c:b8:69:8c:08:05:fb:b6:
                    53:8b:e0:75:10:87:18:60:d8:43:35:a7:63:ba:fa:
                    75:f9:11:41:ad:3a:ba:70:5e:69:1d:7b:8d:f1:db:
                    0a:da:23:59:e8:89:22:03:30:ad:60:96:26:da:a2:
                    f7:8f:5f:ec:c3:20:28:ac:4b:59:07:6b:50:d1:22:
                    9b:af:76:58:5b:10:9e:ab:ca:c9:dd:d7:d5:0f:16:
                    be:22:0c:d2:48:f6:c4:05:94:4e:26:6d:4f:32:73:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:68:14:74:AA:DE:6E:14:9A:0E:D8:43:E4:8B:D9:DD:18:7F:26:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:f9:7d:0d:55:9e:85:a5:cd:27:ff:04:37:ae:71:db:cb:
         b5:73:0c:c2:c5:63:0d:f4:e0:83:f6:db:2a:e2:20:93:5d:85:
         fd:7c:35:3b:1c:53:35:6f:50:9e:96:40:2e:02:97:37:28:77:
         d6:b5:c5:4d:c7:d4:39:48:c4:df:5a:79:3c:2e:10:cb:d7:cb:
         ce:95:9f:89:4e:de:de:0c:5d:66:15:be:ee:79:fb:f8:ee:32:
         f8:e1:42:f3:8d:bf:a0:5f:0e:06:7e:81:a1:7c:cb:7b:55:ca:
         5e:52:a7:ad:7f:6a:af:61:a6:52:ce:78:e4:18:c5:38:11:02:
         2f:f6:52:59:29:7b:61:30:05:18:e9:5d:1e:f5:18:f0:8b:22:
         2e:54:96:db:43:e2:af:51:c7:6c:9c:43:ce:07:1b:78:17:68:
         66:01:fd:d4:1c:90:ee:4a:63:0d:41:ae:d9:67:f8:a3:78:30:
         dd:c6:8b:19:c2:9f:04:7f:54:38:46:28:ee:cd:f8:9a:af:8e:
         f3:4b:75:c0:22:7d:31:9f:f4:8a:bb:df:f4:f0:4d:b5:3b:9d:
         68:67:ad:95:3f:4b:ca:56:99:ea:c2:1b:e3:70:0d:ad:80:b1:
         c7:7e:be:2b:f9:b9:b6:09:d7:be:95:a6:9c:ec:cd:f6:50:b8:
         29:a9:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:36 2025 by rpki-client