Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7cd3bf6f-ba6a-39c0-a5d5-2b2c72ba347f.roa
File:                     7cd3bf6f-ba6a-39c0-a5d5-2b2c72ba347f.roa (raw, json)
Hash identifier:          mhTf9qN0WDvwjZbWg/hcld87SSgrOrFO/Re6v1F/c4k=
Subject key identifier:   BB:15:2E:2D:84:0A:22:B3:39:EC:06:1F:5F:EE:E2:D3:6D:26:B1:B4
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584A58CB04F6E272798BD7A82F40
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7cd3bf6f-ba6a-39c0-a5d5-2b2c72ba347f.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     32592
IP address blocks:        67.217.208.0/24 maxlen: 24
                          67.217.209.0/24 maxlen: 24
                          67.217.210.0/24 maxlen: 24
                          67.217.211.0/24 maxlen: 24
                          67.217.212.0/24 maxlen: 24
                          67.217.213.0/24 maxlen: 24
                          67.217.214.0/24 maxlen: 24
                          67.217.215.0/24 maxlen: 24
                          67.217.216.0/24 maxlen: 24
                          67.217.217.0/24 maxlen: 24
                          67.217.218.0/24 maxlen: 24
                          67.217.219.0/24 maxlen: 24
                          67.217.220.0/24 maxlen: 24
                          67.217.221.0/24 maxlen: 24
                          67.217.222.0/24 maxlen: 24
                          67.217.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:04:f6:e2:72:79:8b:d7:a8:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=eabaef11-8d87-4803-bc57-1de66581d83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:51:0d:38:a8:50:93:2c:8f:cb:1f:fe:95:
                    39:05:f5:e7:5b:6c:16:8b:cc:21:08:f5:b2:a4:ee:
                    bf:69:a6:b6:53:d5:83:13:99:72:ec:94:2f:b7:68:
                    78:ed:9c:81:8c:b9:05:84:5b:c3:01:d3:80:11:76:
                    ee:84:8d:df:6b:0d:c4:8e:e9:e0:2b:b1:3d:ae:c6:
                    6a:5d:f1:89:1c:75:6e:5a:59:a2:f3:3a:42:53:85:
                    c2:e9:92:75:82:1f:40:cc:f1:76:1b:2a:ad:b5:df:
                    e8:bd:c5:8b:11:01:49:94:13:c4:c8:35:c6:8b:0e:
                    ae:ad:6b:f8:c7:99:e7:1f:95:84:4a:3b:5c:d4:fd:
                    58:d8:5c:30:90:70:b7:8d:fc:99:9a:dd:3e:ee:1b:
                    3b:46:84:4b:ab:e9:a6:e5:b8:e4:20:28:af:60:56:
                    90:ca:bf:f2:e5:8f:70:e3:3c:55:b6:ed:fe:95:0b:
                    40:5b:0a:32:2e:e0:3f:1c:0b:6c:56:73:dd:5c:f3:
                    3b:68:57:e2:2f:5a:4e:f6:5c:8a:d1:14:fe:46:8c:
                    8c:78:c9:84:81:98:eb:3d:00:54:15:26:84:03:73:
                    51:85:46:8c:ff:65:34:78:f5:f8:06:39:90:cc:3c:
                    c3:bc:70:72:20:cb:85:86:fc:86:a2:92:88:cb:e6:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:2E:2D:84:0A:22:B3:39:EC:06:1F:5F:EE:E2:D3:6D:26:B1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7cd3bf6f-ba6a-39c0-a5d5-2b2c72ba347f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:db:ac:a4:30:14:1f:4e:4f:95:3b:f5:0e:e1:ee:87:c3:23:
         7c:b0:db:1d:97:24:60:28:64:f2:36:d8:a8:09:1b:2c:b8:f1:
         84:57:c7:51:60:df:f8:9d:66:2c:7d:58:c4:3f:95:0c:d8:d4:
         81:be:65:80:7b:01:ff:9a:a0:e8:eb:35:cd:80:3c:a8:bc:7b:
         18:3e:45:48:d1:dc:a8:c0:07:16:72:dd:f0:40:a6:d6:95:d3:
         57:d9:f4:ca:52:97:29:63:24:db:a6:4a:77:bb:18:e6:e8:59:
         ee:74:41:8b:47:ca:b3:86:e0:9d:40:dd:a3:4d:39:f0:69:3c:
         06:9b:e7:db:96:59:db:4d:a1:b8:ad:62:c9:6e:6e:e6:8a:16:
         55:dd:7a:cb:27:ac:e6:88:ef:a3:bb:cc:fc:8c:31:e8:28:09:
         e8:32:46:2d:46:f1:da:0b:32:a5:bb:82:cd:5f:0f:9a:15:d5:
         3a:6d:e7:6e:17:14:b7:59:8c:b7:85:6d:3f:47:2f:06:43:4e:
         4f:cf:b0:5c:a1:45:ed:4b:44:8f:1b:0d:78:c4:08:4f:1d:36:
         fa:75:81:bb:c8:90:00:c6:3b:30:3b:20:da:18:65:27:5f:fc:
         ff:4c:3c:13:cd:2b:8c:a5:aa:7c:01:1f:ad:64:bc:7a:4d:e3:
         66:8a:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:00:23 2025 by rpki-client