Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa
File:                     d22c3402-a212-36a9-b07f-cea36e6bf20f.roa (raw, json)
Hash identifier:          bPaVP+S7SlW4MAjS6K0ZN9NZnIWj+npyF1bogfkLpw4=
Subject key identifier:   AC:33:68:6E:F5:97:F0:54:C9:17:DE:6B:E1:E0:2B:41:5C:58:D5:1A
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584AE46118E6E3317CF87DB62C80
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     400402
IP address blocks:        64.44.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:18:e6:e3:31:7c:f8:7d:b6:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=8f6f50dc-bbeb-4720-b362-9dc6f7732ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:41:f6:bb:00:fb:7a:61:48:c1:0a:76:d4:83:
                    38:af:14:fa:fa:0b:ac:f7:5e:ce:56:66:67:2e:01:
                    97:0f:c6:cc:c1:1f:02:e5:47:52:f7:b0:02:76:ae:
                    84:6d:cb:c2:20:d1:13:50:f7:1d:1b:f8:c4:ba:76:
                    7a:10:15:13:90:4b:e1:9d:f9:ea:44:41:e2:0a:49:
                    f0:4d:1f:2d:29:f6:84:6f:1c:89:8c:bc:40:e8:b6:
                    15:61:29:71:34:26:ef:27:85:bb:b4:9d:c2:c1:bd:
                    c0:3f:bc:6e:ae:69:6d:dd:ab:2f:d7:fd:19:34:50:
                    13:51:0c:54:a9:fb:61:f5:5b:65:6c:23:d2:eb:fa:
                    85:6f:67:f9:cc:88:db:3d:b4:05:e7:1a:6f:66:52:
                    5f:31:18:0c:c5:ed:d0:b5:c3:88:be:c7:b0:43:a1:
                    13:00:0e:5e:ee:55:c9:6e:39:a2:23:3f:d2:1d:df:
                    9e:9c:56:9c:22:a2:15:b6:64:60:24:53:08:c9:25:
                    a2:dc:74:00:fb:6b:c4:9a:41:3d:1f:d6:e6:96:46:
                    bf:13:8b:8e:aa:e0:fd:38:8c:ae:d1:15:49:1b:e7:
                    aa:2f:46:4d:0c:d3:0a:73:8d:c1:70:4a:5d:34:d1:
                    1e:64:97:fa:cb:01:ea:4d:e4:9c:74:c1:2c:51:59:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:68:6E:F5:97:F0:54:C9:17:DE:6B:E1:E0:2B:41:5C:58:D5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.44.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:16:18:5c:cc:46:a4:e7:c2:44:85:e2:cb:c0:45:71:7c:
         15:36:e1:0c:fb:2b:2d:69:29:0c:bf:95:27:38:0c:72:91:9d:
         2a:47:b3:21:23:92:12:3b:03:1c:1f:04:d5:a8:f3:11:73:71:
         f6:84:d9:07:b6:0d:d6:14:89:d2:4f:5e:26:d8:8b:c4:05:4e:
         8e:de:2a:f3:0b:92:1a:bb:5d:41:68:d7:2e:d5:35:45:59:b8:
         2f:c1:55:3d:7c:61:ca:4e:72:07:40:0c:9d:fe:95:03:c1:66:
         0a:eb:90:e7:07:28:df:a5:df:8c:94:97:a9:0a:fc:c6:c7:d6:
         2b:55:33:5b:f1:d9:61:df:d6:4f:ac:38:42:88:f7:8b:b8:ca:
         29:fb:82:18:bf:b2:b4:00:8f:2d:e9:1f:d0:05:b8:61:7a:3b:
         78:68:8b:31:78:62:a3:51:52:3a:76:6b:91:5d:68:ae:b7:b4:
         9f:5f:3c:ff:0e:16:ff:ae:db:a4:80:7d:76:3d:53:e2:6f:6b:
         f3:77:f6:83:ad:3d:dc:c8:90:d2:c5:c5:7e:ff:77:00:16:18:
         12:6b:0d:62:92:51:fe:82:db:4f:f2:ed:6a:1f:03:7f:27:27:
         d3:d6:37:98:e8:6c:92:85:35:aa:e1:ad:43:44:24:e9:ec:2c:
         9a:5d:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:04 2025 by rpki-client