Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa
File:                     32fd2aed-084b-34c3-ad42-8399607ba2b0.roa (raw, json)
Hash identifier:          FWU0i1kVybWcPK0FcKuKTHDiIhvTQPvEe2oBIXKQQHY=
Subject key identifier:   15:F3:76:34:45:1E:4A:85:E2:2A:2B:76:2B:A0:D9:92:1A:DF:24:EB
Certificate issuer:       /CN=8b973e20-42b5-497e-831b-66d353f928d7
Certificate serial:       010D0C9F4328584AF256AA17D3EF567553BE0B38
Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     6341
IP address blocks:        156.76.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:aa:17:d3:ef:56:75:53:be:0b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=f9a02e5d-39d5-4e35-8778-5632f08b4bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:71:33:7f:35:9c:36:4b:0f:1d:45:34:93:
                    69:7e:dd:c3:b4:97:8c:14:48:ed:7e:ac:32:e3:64:
                    b6:89:e1:b1:5b:53:4c:2a:be:4d:15:40:31:1e:c5:
                    b0:60:11:f9:56:9b:10:e6:fc:1d:da:dd:ab:b2:0e:
                    6d:0e:a6:9b:f1:e2:c5:fe:1b:b7:ef:73:6d:26:8c:
                    d5:08:f6:a7:19:7d:1f:cf:d7:76:82:03:63:d2:c7:
                    36:81:0c:eb:34:0b:fd:83:85:0a:4e:23:a2:6f:38:
                    66:46:4c:f3:27:7a:0c:c3:47:e6:99:90:1f:60:cc:
                    a4:27:df:56:6d:4f:05:32:79:fc:b9:64:a3:29:1d:
                    94:4f:df:d5:4c:0a:1b:f2:46:d5:75:ed:6b:44:27:
                    13:16:49:b6:4c:f7:b2:cd:42:92:55:66:2a:02:8f:
                    7c:3e:9e:aa:d7:ef:39:25:fb:34:98:de:9a:61:40:
                    8e:31:96:29:bf:c7:fc:06:28:05:64:c5:fd:23:bc:
                    c6:1c:dd:5c:2d:54:0e:2e:f1:14:b8:98:41:e3:ba:
                    8e:43:6c:84:40:be:d6:96:a4:22:48:f4:58:fd:ae:
                    27:84:c9:e9:e3:eb:16:a7:d1:65:d3:9d:d5:a0:30:
                    c9:27:94:c2:8a:2c:cb:cf:fb:42:a6:30:49:48:99:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F3:76:34:45:1E:4A:85:E2:2A:2B:76:2B:A0:D9:92:1A:DF:24:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.76.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:b6:44:e5:44:9f:7a:3e:0c:ab:15:e6:97:2b:d6:c8:4d:
         9b:16:f8:05:7d:61:77:7a:4b:c7:b4:63:72:fb:4a:ea:d7:fa:
         43:a5:5c:b9:93:9c:23:24:2c:dd:3e:48:29:9a:95:ae:8e:48:
         ad:81:0e:a3:10:8d:36:86:64:d3:02:f5:49:4c:c7:62:97:cf:
         7e:98:fe:0d:d4:20:8b:e5:ae:91:9d:a1:11:9a:66:43:fb:8b:
         35:1b:1a:17:1f:5c:1b:8c:4a:0e:34:6f:ff:c3:b1:d5:53:bb:
         06:cf:c8:01:07:cd:e3:ad:d8:0b:2d:a0:4e:1b:e1:bf:1d:6f:
         ed:7f:41:2d:43:97:81:4f:af:fd:9c:9c:c5:76:56:70:01:e9:
         cc:c0:30:9a:76:b1:d7:29:d1:1c:13:59:19:9e:ec:02:d5:20:
         bd:ec:30:f3:a2:27:47:b5:9b:63:c2:0b:1a:ca:8b:1d:41:17:
         ed:32:dc:f3:ac:f5:a6:ce:28:7a:d1:94:12:ad:7c:59:2a:67:
         84:19:7c:2e:5c:c2:0e:e6:15:b7:af:1c:91:52:c3:e0:17:b0:
         df:80:2c:2c:30:92:0f:ca:80:be:78:37:27:52:4c:df:66:d3:
         fd:dc:d9:b6:e8:ec:ca:75:36:a0:0c:54:01:d7:24:ea:14:81:
         4c:62:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:22 2025 by rpki-client