Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa
File:                     4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa (raw, json)
Hash identifier:          kXwPtiWBXGkoUvOVz+fJDsGgvWPl08OWnkHZyPV+2DE=
Subject key identifier:   97:D0:5A:61:86:7D:F7:24:1A:FF:62:C6:6B:69:5B:6E:D9:2A:DD:5E
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584ACA333E246B145AD8FA5DC860
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa
Signing time:             Fri 08 Aug 2025 15:57:18 +0000
ROA not before:           Fri 08 Aug 2025 15:57:18 +0000
ROA not after:            Thu 06 Nov 2025 16:57:18 +0000
asID:                     32806
IP address blocks:        208.114.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:33:3e:24:6b:14:5a:d8:fa:5d:c8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Aug  8 15:57:18 2025 GMT
            Not After : Nov  6 16:57:18 2025 GMT
        Subject: CN=ba4dda56-0bdc-4e2b-944f-10c270dc7e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3d:53:85:2f:4c:c1:2f:b8:2e:9a:4c:54:0e:
                    48:20:bc:72:e3:84:61:26:47:7c:65:50:42:0b:26:
                    f6:2a:f6:14:92:66:be:4c:31:c3:e0:0b:7c:e8:f7:
                    5d:61:20:e1:ea:67:81:ad:cb:bf:4b:d3:68:66:f6:
                    e5:8c:03:71:69:68:64:54:79:71:c7:3e:3b:6b:66:
                    ec:92:88:e2:c5:3b:a9:2c:7f:fe:c9:fd:65:f7:2a:
                    27:d4:d7:83:c5:a0:25:1c:dd:36:26:5a:f1:57:db:
                    95:ee:9b:1d:a8:9c:71:2a:1f:1f:a9:e0:56:6f:3f:
                    5e:3b:32:bd:3a:36:45:7e:e5:3f:5a:20:e2:8a:ff:
                    b7:12:73:1d:34:b1:cb:0f:86:ea:10:a3:95:23:4d:
                    b6:91:ca:d8:ac:15:64:fb:dd:9c:3e:79:cf:00:7c:
                    e6:49:a8:33:bb:66:5e:76:01:96:be:9d:eb:6a:9e:
                    d0:37:ba:33:dc:ed:3a:0b:35:e3:45:d2:be:ef:e8:
                    87:37:ba:ae:ea:4e:12:12:1a:f0:83:0f:3a:b0:32:
                    17:d3:ee:ad:a6:f9:fe:e9:38:c7:5a:f9:92:44:d6:
                    91:b1:4c:17:4f:ac:0c:ef:26:5d:1b:de:57:0d:80:
                    da:a5:13:9d:d2:b9:a4:87:52:5c:f4:01:48:94:ca:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D0:5A:61:86:7D:F7:24:1A:FF:62:C6:6B:69:5B:6E:D9:2A:DD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/4f770b0a-2011-34d7-bf5e-54e1f6f96f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:8e:dd:f6:72:4e:80:4d:1e:70:b4:f1:e0:e6:79:18:e6:26:
         83:e8:4a:3b:76:df:7e:a9:5f:17:76:88:c0:5e:84:31:be:52:
         be:21:21:51:df:75:4a:79:42:5e:e7:7e:8f:7b:2e:d2:b5:18:
         a4:8e:4b:f8:1f:c5:e0:b3:fc:42:ce:ca:a1:94:bb:31:f7:f8:
         43:45:4f:98:f8:3a:06:41:35:d3:c2:c4:14:5f:bf:a7:69:fb:
         e9:fb:e3:45:79:a1:ef:cb:1d:8c:10:be:f8:5a:47:75:5b:9f:
         8a:e3:d9:4e:98:d5:1c:45:e2:92:c6:2f:30:82:1b:82:3f:f4:
         d9:e6:13:5a:3d:fb:ba:72:e4:b5:68:dc:aa:7d:0c:da:c5:f8:
         8f:29:01:57:60:ca:07:8a:3b:52:15:87:fe:b7:f6:f0:b0:d6:
         95:67:9e:13:f7:84:25:e1:0e:1b:f1:ac:d8:7c:cc:e3:8e:5b:
         13:6a:09:2f:99:fe:a8:15:bb:0f:6d:cd:c6:91:26:2a:1e:20:
         0d:e4:b2:ec:56:77:c7:49:34:1d:43:0e:c2:48:f5:b9:30:3b:
         27:64:92:0d:21:07:88:14:ba:83:fb:4c:f8:7d:0a:86:7e:7b:
         12:2a:51:18:32:96:93:46:3a:82:f2:4f:c3:99:4d:2f:ee:13:
         21:95:ee:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:09:16 2025 by rpki-client