Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa
File:                     32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa (raw, json)
Hash identifier:          zJFOM7V69AyCax+nrd7DT3kThQmrome6sBdSpj+pDVc=
Subject key identifier:   BC:62:5B:95:5B:B9:55:13:8A:E7:57:47:54:33:CA:5A:77:25:C5:37
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584A3CE0248EA8B66E7C67058B00
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     396026
IP address blocks:        162.211.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:24:8e:a8:b6:6e:7c:67:05:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=4545bedb-cb1a-412e-837f-325d98af3116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:cd:08:14:a7:a5:c2:a0:41:3e:44:b6:a6:
                    5b:2d:97:43:f7:1e:0d:68:75:29:f9:5f:05:67:d3:
                    54:4c:86:61:15:35:31:00:de:5b:e6:1f:24:36:c3:
                    ec:c6:8e:55:7b:ed:83:f9:aa:ed:32:91:8d:a0:2a:
                    5c:5b:8c:95:16:f9:75:87:d8:24:60:7b:fe:42:1e:
                    c6:45:15:5f:b1:dc:10:09:b3:3b:36:22:45:4f:94:
                    60:c2:22:b9:b0:62:43:a2:5f:fc:69:b5:d5:c2:42:
                    0a:b5:a6:8c:25:1b:16:ce:6c:b3:1d:04:ab:f0:9c:
                    f6:7b:25:b2:38:1b:83:93:b5:6f:72:86:08:9a:4f:
                    ce:bd:d7:6c:74:00:17:7e:01:bc:55:78:0f:2e:ca:
                    de:5c:50:5e:2a:10:b8:a1:66:e7:b7:c7:a6:c5:33:
                    ef:50:1c:72:98:b0:07:0b:27:f1:1d:74:27:59:b9:
                    2e:91:46:07:41:b1:13:86:ac:6e:38:88:9f:7a:bd:
                    e7:5a:da:94:dd:f4:85:83:e2:4b:72:08:61:7a:15:
                    83:9c:49:ed:d5:28:55:09:c3:b3:0d:b0:10:1f:80:
                    5a:95:bf:64:8f:7d:4d:95:2a:83:56:ca:c5:a2:e8:
                    8e:74:3d:05:26:19:ca:b2:86:a6:ba:71:96:25:a0:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:62:5B:95:5B:B9:55:13:8A:E7:57:47:54:33:CA:5A:77:25:C5:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/32ac4ea6-c208-3091-8ada-3b8a7d59ec18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:7c:46:bf:7e:57:76:e5:fc:8c:ca:96:d2:0a:3f:f8:21:
         2e:fb:69:64:0d:a0:8c:6f:b3:a1:a8:10:32:39:53:ee:6c:44:
         17:65:e9:00:fd:a3:3e:c3:4e:7e:0d:ce:b2:5e:54:87:f0:21:
         7c:94:89:b2:5e:fa:1b:67:3e:03:70:a3:7e:1b:cd:b9:3e:74:
         f0:80:c9:ea:3f:e9:48:ca:3f:30:3b:71:df:7b:70:77:2b:c8:
         32:6d:3c:50:17:04:d1:ab:09:22:5d:3a:e8:09:1c:ea:57:44:
         04:bb:c6:b0:b7:dd:c8:1d:c8:db:c0:b0:d5:06:90:ba:e9:c8:
         56:45:f4:5c:58:12:89:0f:9f:41:fc:b7:c9:5a:2e:20:13:90:
         97:94:a7:67:52:10:72:06:33:4b:ea:ec:f6:27:84:0b:11:53:
         bf:c7:cb:ec:43:7c:e4:2f:b1:4a:06:f8:67:03:b1:13:5b:05:
         d2:a7:45:e1:4c:31:c2:a5:26:cb:b0:26:c7:75:66:57:b3:9a:
         73:30:55:5d:48:8a:eb:aa:03:72:37:28:19:05:8e:87:c7:63:
         f8:c1:2d:6a:6b:d3:d0:b5:0e:4c:fa:d5:91:e7:e5:33:f4:e8:
         e2:18:5f:44:a8:bc:fc:2f:10:fc:23:2c:fc:11:31:8b:c6:4f:
         ca:26:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:03:17 2025 by rpki-client