Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa
File:                     ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa (raw, json)
Hash identifier:          GBUeSlIG527grruQxvxNfp6VEnAOb9Sx960DacPUIq8=
Subject key identifier:   0E:86:AD:17:CA:1E:CF:59:50:EA:AB:7F:53:67:8E:F7:8F:20:31:20
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584AC5AB9097293EF787706A6360
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     399629
IP address blocks:        67.217.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:90:97:29:3e:f7:87:70:6a:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=e93b462c-0430-44cb-af19-8cc8ce3f1612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:49:99:79:5c:10:18:89:b5:98:53:66:8b:
                    72:e6:8d:e7:33:7c:2b:5b:7d:c2:23:a9:60:71:ce:
                    c5:7c:a5:e5:88:94:25:08:f4:81:08:f4:99:69:79:
                    f2:44:f2:78:32:a6:b0:41:d0:35:3e:55:c4:91:fb:
                    42:4d:c6:a2:55:8c:c8:99:92:73:52:b4:8b:89:61:
                    58:b2:71:4d:c6:e9:14:42:1a:9c:9f:36:92:5b:03:
                    94:1c:84:de:e2:0a:ee:91:5a:77:62:7f:2c:35:15:
                    ff:f2:10:1a:21:74:2a:40:cd:ee:87:60:bb:af:e8:
                    23:cd:d1:41:94:cf:6a:80:bb:50:71:e7:7b:e3:97:
                    43:07:e6:b9:6d:f2:1a:ca:9f:95:fb:f2:21:40:06:
                    a9:a6:f9:f0:a0:3e:37:2a:52:9a:0f:20:ea:13:b1:
                    51:ef:0b:e8:08:ee:53:e0:d4:51:94:64:13:c5:3f:
                    5a:74:2a:cc:0f:9d:ed:07:8c:81:d0:e0:1f:2a:01:
                    6f:5f:03:49:3a:28:54:a7:e0:93:f4:28:19:16:94:
                    d5:05:e1:f6:5f:6c:f4:5e:63:a8:76:a1:fa:3b:f3:
                    ca:56:72:fe:ae:4c:51:5c:b2:98:62:d7:ba:97:3f:
                    42:9e:0d:17:db:d8:86:04:b3:8e:0e:f0:47:f6:38:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:86:AD:17:CA:1E:CF:59:50:EA:AB:7F:53:67:8E:F7:8F:20:31:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d3:a7:35:fd:a4:e0:34:36:f8:45:c7:c4:eb:12:80:e7:f4:
         63:68:f9:99:a6:38:5a:e2:75:62:9e:d5:23:fd:c8:1e:35:c8:
         41:9c:7c:32:e4:97:b3:02:18:2f:95:ec:e6:e0:9d:22:e5:e5:
         34:8a:3e:e6:05:85:4c:b3:1f:27:97:d2:9f:6d:bb:ad:4f:d9:
         f7:28:f6:9d:ed:4a:88:b3:de:c0:10:f0:f2:b7:af:43:dc:6b:
         f8:45:ad:08:0e:96:d3:dc:e6:73:6a:2f:79:5c:5d:8d:9f:d6:
         5a:b0:df:d3:e9:4c:9d:d9:0c:de:a6:c1:0b:e0:5c:4f:5a:09:
         e6:8a:45:f7:75:42:df:41:22:ed:05:f8:3c:50:72:23:fe:f4:
         bc:50:f6:38:b3:36:2f:cd:a9:d4:7d:c8:32:93:40:93:ea:33:
         a8:87:eb:96:78:bf:c1:61:39:b5:5d:b3:6c:e3:b9:cc:f3:ec:
         f5:7f:0c:f0:be:18:c5:a1:c3:b0:cb:7c:cd:00:69:88:b2:70:
         bd:11:6c:ab:12:22:84:03:82:bc:df:2e:ea:ea:ec:a2:f2:c3:
         59:a7:30:8b:36:89:b6:c2:d9:d5:80:11:3b:ab:f5:8c:df:bd:
         0d:b4:be:a9:68:17:e0:76:29:fd:e3:31:3d:63:08:08:f8:c6:
         6d:e3:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:51:05 2025 by rpki-client