Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa
File:                     ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa (raw, json)
Hash identifier:          5Cwo+edTHI9fjb5UjS1IPvZYoT7hSdLqe7b4GLMUdqc=
Subject key identifier:   7B:EB:20:BF:65:6A:D9:87:7C:3D:A9:78:2C:90:79:26:C7:AF:FB:8C
Certificate issuer:       /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2
Certificate serial:       010D0C9F4328584B6BC75E14D5A72E7D0785D000
Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     8075
IP address blocks:        167.21.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5e:14:d5:a7:2e:7d:07:85:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=55a7bb54-6ec6-420e-8824-2df057c8b3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:31:d3:c8:43:c4:31:08:30:74:38:07:13:
                    f6:f5:aa:92:a0:51:c0:76:64:02:41:ec:07:7f:6d:
                    f5:92:5e:b5:4f:ec:d7:6f:c5:9a:ac:98:ab:74:80:
                    5f:6f:41:82:9c:77:b9:e5:e8:79:37:40:ed:18:38:
                    72:5b:94:1b:12:e4:c0:1b:da:18:f7:04:55:e9:3f:
                    95:7f:67:e3:5c:59:7d:7b:5c:ee:7e:63:da:50:ef:
                    fe:86:4d:b4:96:55:bd:b5:6c:c6:d9:fb:14:1c:23:
                    16:59:35:05:b6:22:07:80:f3:f4:af:ed:04:7d:44:
                    d2:02:5f:98:a2:f0:da:58:09:66:d4:9d:fc:23:f3:
                    2e:e2:11:a1:6e:5f:34:46:a3:3c:93:7b:8d:0e:72:
                    b0:ed:98:f8:14:52:9a:be:f1:7e:8e:0a:a4:1a:84:
                    a9:69:4c:7c:de:a4:74:4d:f6:da:9d:5a:6d:61:8a:
                    5d:2b:01:69:50:a2:87:f6:b8:ef:df:2d:15:b7:60:
                    f0:5c:ec:41:27:62:90:c4:bf:cb:ea:cb:6f:85:21:
                    90:85:d6:3d:41:7f:81:ad:6e:2c:22:80:90:da:55:
                    38:6a:54:85:7a:5f:23:c4:c4:6c:0c:80:b6:cf:b7:
                    33:d5:e3:5c:2e:57:ba:3a:cb:e4:24:24:73:f5:29:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EB:20:BF:65:6A:D9:87:7C:3D:A9:78:2C:90:79:26:C7:AF:FB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl

            X509v3 Authority Key Identifier:
                keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.21.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:35:bc:79:8f:8d:87:f5:20:c4:ad:a3:78:0d:bf:28:e9:
         c2:0f:97:1d:28:5c:0a:f4:f8:5a:e8:da:cf:0f:7d:c3:27:37:
         a8:3e:3b:79:36:ff:86:ee:7a:81:ca:e3:18:82:1c:e6:ef:13:
         68:1d:bc:28:96:7a:6f:37:e9:ae:8f:b1:0b:6a:89:a9:d5:83:
         44:b8:4b:c5:e7:c9:9b:13:57:10:dc:63:70:6b:c5:39:93:dd:
         95:3d:4d:6c:d8:3b:ba:a3:88:e2:2b:d3:0d:39:da:18:88:b0:
         53:1b:ee:1f:4f:69:df:69:4d:07:77:c4:6b:4f:12:7a:c5:39:
         5b:fa:fe:84:e6:8f:44:b4:75:1e:04:b0:7d:34:25:be:43:ed:
         34:70:b3:fd:4b:1b:93:a7:98:e7:47:4f:5a:36:6d:55:69:48:
         03:6a:5b:c5:6a:33:68:b1:da:37:37:ed:dc:0e:74:50:a5:db:
         68:82:5a:3e:40:fc:5b:24:17:73:88:18:2e:4d:ce:23:e1:dd:
         2b:14:46:7b:40:95:34:bf:16:10:f3:23:be:c5:00:38:d7:b5:
         d1:3d:1b:be:c5:f5:3c:9a:3e:a0:e4:e9:9e:9a:b5:bd:67:0a:
         32:1b:6f:61:d7:04:af:7d:7b:02:b8:52:53:0e:f5:65:c0:8f:
         26:88:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:20 2025 by rpki-client