Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa
File:                     a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa (raw, json)
Hash identifier:          3v+3tO2WGvghC6cB8CG6NMYhEWAem8ZY18EFx1CXAhE=
Subject key identifier:   E2:51:AA:84:4A:AF:35:5A:9F:CF:5D:2D:88:EF:F3:4A:95:0F:C6:4E
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584AD3A116CEFC891AAF219B4080
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     33182
IP address blocks:        67.23.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:16:ce:fc:89:1a:af:21:9b:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=322160bc-ccc3-4dd4-8952-a9e38dd6470b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:e3:ed:97:42:ef:fd:51:09:a3:28:ee:97:
                    72:21:b8:cc:2d:5a:80:23:7c:2a:96:b1:a6:1a:3d:
                    55:2c:0a:43:a8:d6:d2:03:be:b9:9d:aa:19:dd:7e:
                    0d:8f:bd:fa:75:89:43:7d:aa:90:f2:77:cf:6b:42:
                    d0:42:bd:6f:ef:42:f5:4a:2e:1c:92:cf:cc:a0:4d:
                    2d:05:8d:9e:28:8e:0e:55:7b:cb:a8:20:d5:9f:01:
                    c1:f0:3f:03:ec:55:a7:69:e7:03:25:30:c3:bf:84:
                    2b:05:5e:70:35:42:07:cd:cb:79:fe:d7:8b:86:b5:
                    70:aa:dc:c5:1d:5a:e5:59:2b:4e:f8:42:98:54:b2:
                    99:02:5b:31:f6:fd:49:3d:e9:05:04:f8:56:5d:57:
                    28:7f:7c:62:6c:53:b6:a3:78:84:24:14:43:51:21:
                    40:f8:f5:76:b6:e9:13:95:40:89:bd:2b:f0:bf:b6:
                    65:9c:5f:e2:3c:d4:c9:8c:8b:af:c0:2e:67:88:76:
                    22:b0:b8:ce:27:3d:89:33:8a:e7:c4:6e:d7:3c:0d:
                    c1:58:ff:6b:77:39:a1:ad:3b:06:fa:65:d2:32:9b:
                    64:d9:0f:af:9d:35:0a:6d:cb:81:e1:0c:20:4d:22:
                    4f:a0:e9:4e:09:32:4e:f0:3d:41:56:94:c4:79:7a:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:51:AA:84:4A:AF:35:5A:9F:CF:5D:2D:88:EF:F3:4A:95:0F:C6:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/a8446fa9-9f9e-3677-8012-1e1cc91421e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.23.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:76:88:5e:51:54:18:9d:81:15:d2:52:09:da:f8:7d:d6:e5:
         db:3d:bd:da:c5:4b:99:91:53:25:e9:29:f9:93:09:8f:78:d4:
         9c:4c:17:ae:a2:57:fa:11:96:aa:f1:c6:17:e1:26:36:a8:4a:
         00:4c:aa:3f:74:79:24:96:c4:1d:17:e1:25:64:61:ea:1d:d9:
         04:ac:25:5f:94:9b:31:6c:2c:69:4f:3b:53:db:b0:96:18:04:
         ef:ab:e3:75:40:ae:d2:d9:be:74:e6:07:a2:c3:c8:68:27:5a:
         51:4a:9a:d1:8b:4a:60:91:4a:7f:e0:eb:08:d2:63:30:6b:37:
         2d:67:19:34:06:a7:08:8d:c1:85:7c:1d:88:f4:69:f8:d5:80:
         a4:f1:56:67:0c:d6:fb:0f:64:59:6e:ae:5a:ad:33:fd:b7:e4:
         fc:a6:48:57:d9:1d:82:b2:09:f6:f8:1c:d5:cb:3e:17:83:3d:
         aa:58:3d:08:06:60:74:56:7d:40:0d:a6:db:df:6e:50:d1:05:
         ba:af:78:2b:7f:20:59:ec:5f:f3:46:90:f6:aa:73:6f:75:9a:
         2a:ed:a5:15:82:e8:13:f4:c9:05:5b:d1:d3:ef:17:b1:e0:0a:
         c7:32:ff:bc:08:fa:3f:4c:ef:b6:55:f2:74:0c:31:95:11:a2:
         c5:84:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:39 2025 by rpki-client