Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa
File:                     5d9bac24-42c5-32f4-89cc-d256e7767bce.roa (raw, json)
Hash identifier:          Ggwc1KsNSKWd5hTJ4e467q+m/DPrTH3+BDgGB9VlYsA=
Subject key identifier:   8D:19:50:21:1C:FB:09:2C:5C:7D:15:EA:B2:74:6D:34:7B:1E:1E:42
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584A4C3B1AD46DC20B3C73C6E500
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     834
IP address blocks:        67.43.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1a:d4:6d:c2:0b:3c:73:c6:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=d18200db-8d43-4cff-af27-5d9a47729f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:f3:4d:32:6f:94:d0:0b:e3:d8:53:94:0d:
                    1f:89:67:f7:36:6b:5e:12:92:ee:6c:28:ba:34:1e:
                    22:6a:bc:91:95:49:de:b9:86:de:59:30:f7:2b:14:
                    f9:f8:c1:b8:22:e7:84:44:d2:cc:e1:10:82:c0:99:
                    a4:b7:43:78:22:82:c3:e1:03:0f:7e:cc:27:fb:e8:
                    41:73:f3:bc:c9:bc:1f:8f:f3:e2:b6:99:20:3b:fc:
                    10:10:13:4d:b3:90:d6:2c:f6:6f:f0:8a:f5:5b:4c:
                    1f:43:85:78:55:c0:12:be:f1:93:e4:24:80:30:12:
                    9b:13:7f:a5:05:c5:a2:93:75:a6:65:ad:00:31:ab:
                    81:ff:95:90:cb:c4:a6:09:ef:25:d9:00:ee:f3:fa:
                    71:1d:ad:b8:88:e1:0d:63:51:74:bb:f0:f7:d3:e7:
                    dc:a2:b2:71:a0:a2:90:7f:b5:34:3f:59:46:a3:10:
                    85:87:43:e8:92:bb:62:7a:d8:3b:b9:7b:a3:44:9c:
                    7c:43:76:3d:ee:eb:95:93:2e:f5:65:47:24:ad:1f:
                    39:e7:c5:74:d0:51:02:31:bf:2b:da:91:16:5a:20:
                    4b:7d:5b:3e:50:a0:46:51:8f:dc:d3:37:00:f4:cd:
                    96:56:92:09:5b:1b:6f:3b:71:70:3a:58:6e:5b:b3:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:19:50:21:1C:FB:09:2C:5C:7D:15:EA:B2:74:6D:34:7B:1E:1E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:a2:6d:32:4c:9b:7d:43:4e:8f:ee:f3:86:d5:07:9b:11:78:
         c2:c3:c6:65:fe:ed:33:56:dc:24:20:2c:2d:b1:7b:cd:d5:e2:
         4d:22:47:c7:96:07:d5:75:b4:87:4b:af:9c:89:af:34:95:7a:
         68:e9:b7:f8:a9:e7:f6:0f:f0:9d:7c:86:ce:94:68:25:6f:88:
         d0:c9:85:c2:16:32:05:8a:07:51:c3:3a:83:2a:f0:1b:47:76:
         69:7a:fc:4d:fb:88:93:5d:2a:34:1b:64:e6:e8:37:73:78:4d:
         08:aa:ea:b0:b7:26:9c:f0:74:9b:fc:04:c7:c9:54:49:9c:6d:
         c8:af:67:96:c0:9f:0d:44:8b:bb:a9:de:f2:3c:78:36:18:6c:
         e3:7e:70:bd:0e:0b:1d:ab:c2:b1:99:f6:7b:f9:3f:31:f3:da:
         4e:af:a5:6f:22:4c:39:60:d3:57:0e:41:9d:ee:20:b4:6f:d9:
         ef:f0:e4:d3:45:aa:51:48:fc:c4:ab:7e:94:c5:c9:eb:f8:67:
         a2:28:18:46:7a:e1:20:34:9f:08:91:1e:34:d6:4c:25:4c:46:
         27:4f:50:ca:5b:e3:cb:af:77:12:5c:94:94:56:bd:73:ed:45:
         0d:22:d6:dd:9c:05:5a:6d:eb:16:86:57:d1:4f:ba:55:2b:9c:
         ea:7f:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:36:53 2025 by rpki-client