Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/ddb32578-7165-3d68-aecf-a69d2d7cff1c.roa
File:                     ddb32578-7165-3d68-aecf-a69d2d7cff1c.roa (raw, json)
Hash identifier:          UCHxDcHIPHWSnGTz7Im60PTFY2TmN6ndSzavWDh0GSE=
Subject key identifier:   58:BB:78:91:67:63:2E:87:D4:CD:C3:5D:33:2C:A0:BD:89:FC:E8:81
Certificate issuer:       /CN=c1ca327a-71b9-47e5-b718-53788c38e86c
Certificate serial:       010D0C9F4328584AE1971B7718777D0EEC4EE580
Authority key identifier: CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/ddb32578-7165-3d68-aecf-a69d2d7cff1c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     399821
IP address blocks:        67.202.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1b:77:18:77:7d:0e:ec:4e:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ca327a-71b9-47e5-b718-53788c38e86c
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=7e3a2022-74eb-4087-abc0-42dd237a361c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:91:53:68:da:4f:ad:34:0e:15:63:40:16:
                    e5:dd:9e:d6:88:b1:c1:1d:59:10:21:4c:6e:a0:60:
                    41:42:08:f5:48:c9:8c:9f:41:56:b7:ce:a7:83:9a:
                    46:9a:d9:29:ac:65:f9:f0:c2:9a:15:bb:3f:c9:93:
                    ed:05:b3:68:fe:8b:a6:39:ed:e0:43:78:3a:08:d5:
                    48:cb:02:49:44:7f:18:76:41:8b:b0:c6:b0:66:de:
                    c8:21:11:e0:0a:d9:53:b6:dc:00:ed:df:62:e3:36:
                    dc:44:a2:67:c7:4e:cf:c1:4c:5a:7e:14:7b:7d:ed:
                    4b:2a:9b:02:1f:b1:1b:16:08:d2:a7:de:69:3b:0c:
                    e3:1a:84:e6:4e:32:9f:b9:2d:19:39:2d:c5:f0:35:
                    f9:8d:69:e0:c3:01:57:c1:7f:da:2b:d7:a8:85:72:
                    aa:09:a3:66:2a:58:6f:72:09:37:ac:2a:78:43:69:
                    b2:e6:71:b9:e0:cc:94:1e:fa:bb:39:c2:3d:04:40:
                    dc:0f:fb:3f:e0:e5:43:34:12:8f:5f:a4:ad:2d:87:
                    2a:10:cc:84:83:72:e0:16:86:c0:63:d1:c0:a2:d1:
                    ed:10:38:d3:75:31:af:62:10:23:ea:d2:6d:b5:db:
                    74:ef:70:b9:f6:65:66:8d:a4:ac:d3:77:4f:e0:af:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BB:78:91:67:63:2E:87:D4:CD:C3:5D:33:2C:A0:BD:89:FC:E8:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/ddb32578-7165-3d68-aecf-a69d2d7cff1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl

            X509v3 Authority Key Identifier:
                keyid:CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f0:4d:f7:d2:23:8f:6f:0e:6c:ca:49:47:7b:2d:a2:f4:de:
         cc:42:90:05:02:2a:9f:0e:65:1e:e8:af:e9:03:c7:ce:ac:3b:
         54:23:c0:43:30:e9:0e:80:a3:bd:cd:ae:b7:20:61:4a:b1:8c:
         3d:bc:b6:8b:62:38:94:c7:b3:f1:5e:e9:cf:f2:58:3f:a2:56:
         1d:22:f0:cd:b1:3f:dc:ac:45:cb:ff:39:fe:8a:30:59:d0:1b:
         52:40:49:76:28:7f:0a:43:95:3c:bd:0c:3b:9b:91:76:7b:22:
         e7:53:cf:35:84:17:ef:98:3e:fa:b3:fc:c1:c5:77:a8:bf:0a:
         f9:8d:db:c4:e1:5f:87:ac:7b:69:fb:1d:c6:73:30:7e:45:53:
         5f:68:40:7e:29:a7:8b:5a:33:0a:57:88:17:5e:c9:4c:80:42:
         76:0f:0c:85:67:da:a7:42:d1:e3:91:32:29:06:1d:a7:1a:25:
         6a:48:b2:72:ac:6d:d3:05:d5:73:ae:0f:84:ac:ad:35:a4:03:
         11:6a:9c:56:c1:cd:7f:23:af:ba:af:00:ab:87:91:e8:4f:fa:
         cb:50:b9:ed:d5:7c:99:9b:e9:58:76:f1:97:46:80:07:d1:1e:
         db:d5:48:83:79:62:db:34:09:67:1e:01:1f:6c:01:b2:f0:82:
         38:d2:bc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:38:53 2025 by rpki-client