Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/44a30d3e-49f4-3d2b-af64-4bfc06765ce8.roa
File:                     44a30d3e-49f4-3d2b-af64-4bfc06765ce8.roa (raw, json)
Hash identifier:          Ko1uKkd/IEkWYed4DATiWsh72eqRKFPzmCwbUlfI6po=
Subject key identifier:   71:0D:F3:D5:84:DF:2D:AE:15:59:20:16:E5:ED:8E:F0:68:B3:EC:72
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584AE461290AC89C0141E730A080
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/44a30d3e-49f4-3d2b-af64-4bfc06765ce8.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     7029
IP address blocks:        134.202.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:29:0a:c8:9c:01:41:e7:30:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=0ee928d7-3091-410c-b5c2-360341ed89b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:16:26:4a:df:d8:97:c6:0d:02:f0:08:d0:
                    fd:cb:7c:e5:7d:32:f9:02:d4:49:bd:36:b4:8f:a1:
                    b9:7b:b3:fd:84:65:8c:e2:7c:79:2e:fd:cb:5c:ee:
                    53:f8:3d:cf:e0:37:40:eb:82:b4:36:da:f5:50:85:
                    64:a7:dc:ac:c0:eb:c9:73:aa:81:e7:a2:6b:fd:f6:
                    2b:9c:a4:51:38:78:3e:2b:aa:03:f7:23:f0:27:f3:
                    c6:1a:10:d8:5a:68:f1:ad:65:24:bd:34:41:e5:76:
                    f0:b7:aa:e2:64:0f:f2:07:45:8e:9e:14:a0:96:14:
                    d2:b5:38:5e:79:e1:b3:4a:65:1a:57:57:ff:51:b7:
                    a2:ad:07:b2:7e:19:bb:38:61:eb:5a:f3:24:f4:29:
                    31:f1:22:70:7d:1d:05:0b:58:e4:de:e3:62:81:e3:
                    79:40:0b:b8:79:7a:df:6c:ec:62:91:9c:bd:f1:81:
                    94:c9:7f:ee:ba:29:b8:2a:04:00:e8:b9:8e:f7:7d:
                    45:4d:fe:4e:e1:56:f8:e9:65:c7:16:09:87:14:33:
                    61:c0:5a:73:e8:e5:05:99:83:5a:2d:f0:a7:e4:8f:
                    f9:b5:82:bf:2e:d2:c4:30:1b:de:93:b3:d3:1c:6f:
                    12:1b:e0:24:c3:db:11:ab:33:b1:44:e1:d5:26:5a:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0D:F3:D5:84:DF:2D:AE:15:59:20:16:E5:ED:8E:F0:68:B3:EC:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/44a30d3e-49f4-3d2b-af64-4bfc06765ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3c:c2:ef:51:c6:b3:61:17:ce:0a:c8:59:e2:be:bb:59:f1:
         59:58:90:59:b4:ab:bc:d9:ba:ba:07:76:17:a3:53:0b:38:79:
         77:73:43:73:0a:8d:b9:24:87:44:6b:2c:74:b1:f0:02:c1:2a:
         37:dc:cc:88:03:78:98:3c:a6:69:11:3c:d0:f0:fa:33:38:60:
         65:f7:31:21:4a:13:6a:dc:a9:57:00:de:cb:16:5f:8b:43:98:
         12:6e:25:9b:a5:d9:e9:ad:ff:dc:0c:15:9a:bf:a2:37:9e:a1:
         0b:6d:11:bb:6b:23:b7:41:3e:26:1d:12:9e:08:53:63:2e:63:
         04:c0:ba:b2:1f:ca:94:31:aa:11:39:33:4c:dc:53:a1:3c:55:
         b4:b2:c2:82:81:23:eb:53:3f:f2:20:5f:34:99:df:7e:2e:d9:
         79:01:93:7d:4d:88:c4:eb:6e:42:b7:e0:56:6e:27:8e:43:b2:
         78:ac:15:9a:6b:7e:5d:50:aa:fa:41:72:70:80:6c:20:69:51:
         cf:e8:73:e6:a2:c9:fa:04:9a:70:7b:90:2c:2e:c4:ba:ec:6e:
         aa:70:c8:3d:dc:a1:f1:6e:27:9c:fe:38:ff:7d:c6:51:b4:61:
         0c:16:39:ac:4f:df:59:e5:ac:61:0a:0a:cc:5b:da:d8:95:67:
         4c:0d:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:39 2025 by rpki-client