Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062/b3508f11-cce1-3428-8e75-c6c58bc4eba8.roa
File:                     b3508f11-cce1-3428-8e75-c6c58bc4eba8.roa (raw, json)
Hash identifier:          NYT6JzEbKJ+beIkTISXfU+fRUKX8yfa+/MLMB/QmhXA=
Subject key identifier:   35:51:1F:08:13:05:FC:85:6D:9F:D4:D6:63:70:3A:5E:CF:1A:E6:C0
Certificate issuer:       /CN=796da7a6-d03c-4b4c-99a5-eb37f67b3062
Certificate serial:       010D0C9F4328584AB91B86CE6FB75BE07C60BD60
Authority key identifier: 57:64:57:47:A4:47:3C:7A:11:86:CB:11:63:3C:A5:78:58:54:D5:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062/b3508f11-cce1-3428-8e75-c6c58bc4eba8.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     395348
IP address blocks:        67.219.182.0/23 maxlen: 24
                          2602:ff36::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062/796da7a6-d03c-4b4c-99a5-eb37f67b3062.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062/796da7a6-d03c-4b4c-99a5-eb37f67b3062.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:86:ce:6f:b7:5b:e0:7c:60:bd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796da7a6-d03c-4b4c-99a5-eb37f67b3062
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=dc372ac9-1f32-48d4-9740-cf1a3a8e230a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:47:12:ca:9c:4e:a2:d8:94:be:41:3f:67:
                    2f:fa:c7:c4:9d:4f:72:0c:eb:fe:40:a1:35:16:eb:
                    98:35:b0:46:73:85:5a:4a:5b:8a:64:13:0d:61:76:
                    24:15:88:31:d4:94:8e:2b:72:fc:5b:94:63:94:cd:
                    54:28:1e:1b:d1:53:d5:75:4c:05:ea:8d:2d:29:26:
                    7f:43:2c:31:3d:ad:a3:dc:c5:6e:68:21:d0:3e:e4:
                    90:ff:67:ce:3c:cf:55:0a:cb:8f:c4:51:ca:4c:35:
                    fb:96:b1:9e:1d:ac:c4:7a:56:22:e6:f9:4b:a2:73:
                    32:a3:99:fe:99:fb:5c:fd:40:8a:71:ab:f6:16:6f:
                    32:1e:1f:74:b1:f5:c8:fd:fc:0c:5c:bd:14:a7:64:
                    93:40:93:0c:f2:56:3d:13:9d:32:5c:3d:ae:cf:6d:
                    10:04:19:5e:da:78:b3:01:55:dd:a1:64:5c:0e:d6:
                    d8:2a:0f:c6:bd:df:0e:d9:71:f7:72:26:38:25:5f:
                    0a:7c:8d:cf:58:12:08:df:26:de:b2:36:5e:e6:fd:
                    51:91:46:bb:ab:fa:09:34:0b:88:09:72:1f:75:9e:
                    6a:32:56:4a:c6:9c:0d:98:a1:24:cb:34:4c:f6:f4:
                    c3:b8:87:ed:69:50:10:95:03:b2:5b:a6:56:9b:5c:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:51:1F:08:13:05:FC:85:6D:9F:D4:D6:63:70:3A:5E:CF:1A:E6:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062/b3508f11-cce1-3428-8e75-c6c58bc4eba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062/796da7a6-d03c-4b4c-99a5-eb37f67b3062.crl

            X509v3 Authority Key Identifier:
                keyid:57:64:57:47:A4:47:3C:7A:11:86:CB:11:63:3C:A5:78:58:54:D5:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/796da7a6-d03c-4b4c-99a5-eb37f67b3062.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.182.0/23
                IPv6:
                  2602:ff36::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:0a:fd:af:4e:b4:51:f5:d0:d0:17:b6:e9:40:2a:3c:9d:
         fc:52:b1:b5:73:ca:d9:65:bf:6f:9b:79:b5:43:4b:eb:44:33:
         0f:32:26:d4:3f:63:55:e1:fd:98:7e:0a:af:d6:fa:36:f2:93:
         dc:f2:71:14:62:ba:b3:d2:f0:0d:7f:11:b6:8c:b1:05:4f:fb:
         59:ed:75:f1:33:ec:db:f5:3f:de:87:fe:10:77:62:6a:a4:92:
         f2:05:45:b2:fc:17:6c:b3:95:e9:d2:60:29:56:dd:82:34:7b:
         ae:72:cc:e2:c7:81:c8:3c:ba:d2:3d:6d:9b:03:a0:05:0e:8d:
         d2:c4:a6:b2:54:a0:6b:78:ac:52:c2:4a:dc:d3:41:f2:5f:21:
         c0:03:13:8a:bf:40:69:c5:79:07:67:d0:cd:61:0b:c7:61:28:
         a3:8d:2f:e6:d2:0f:a4:c8:51:d9:cb:40:38:90:e0:8c:96:ba:
         86:43:a4:03:00:27:f8:fc:48:9b:07:f8:f7:13:ec:09:ab:ce:
         11:e8:f0:a6:15:a1:02:a3:13:05:65:ea:68:4b:90:4a:ce:99:
         bb:7a:f5:8b:4f:bc:ea:c9:5f:3b:98:6f:c9:44:cf:b4:9e:78:
         1f:17:e0:ba:fd:14:99:c4:1d:87:00:30:bb:81:9f:8c:76:85:
         5c:20:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:48:01 2025 by rpki-client