Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
File:                     2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (raw, json)
Hash identifier:          lFT7glMpKUR+pVLYKoLisvxV69I1wZKGFs+N+HCIRw0=
Subject key identifier:   B3:B6:5D:F5:17:E9:72:56:F5:27:C7:3C:18:34:F3:20:CA:48:6E:CC
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584B21CC1931076240A2DDD0B670
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     32329
IP address blocks:        162.218.224.0/22 maxlen: 24
                          164.152.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:19:31:07:62:40:a2:dd:d0:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=22ba33e9-f379-430b-ba63-f1da92acb30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:0a:74:e8:be:b6:35:c3:85:5e:f7:3e:b7:
                    61:0c:f6:6b:12:b8:2c:7b:ad:0a:ad:d5:7a:1c:48:
                    c0:38:ff:72:f6:c4:4f:47:98:5e:ae:de:df:85:2b:
                    f8:d8:15:48:1e:f1:3f:95:9a:87:3f:15:1c:95:f2:
                    f6:8e:e8:16:23:44:41:e9:fc:22:5d:6b:da:3d:17:
                    15:1a:e2:02:27:27:11:3d:17:8e:26:71:86:6c:96:
                    9b:57:3f:fa:c2:07:27:30:1a:7d:da:33:2e:a0:6f:
                    9d:0c:1f:01:ea:54:90:77:6a:72:00:04:d9:2d:62:
                    9e:dd:e9:39:63:f8:e4:5b:98:d4:8f:38:c6:77:30:
                    2e:f3:f4:76:57:1b:03:43:0c:44:14:21:52:71:4d:
                    20:ea:7a:27:04:6f:68:fd:fa:fb:e8:df:5e:6c:11:
                    5b:a2:0c:67:b4:2e:55:34:8b:6b:b8:0a:15:02:a0:
                    87:68:ad:67:67:57:03:0a:18:aa:5e:98:0c:6d:9c:
                    a7:1b:90:9e:0b:cc:ea:1f:1d:20:95:04:4e:8c:4f:
                    36:08:9c:a6:e3:d7:ee:b5:ab:5c:82:34:58:c1:eb:
                    f0:12:a7:13:99:2f:6b:13:95:a5:d9:6a:8e:b7:20:
                    93:da:32:c5:2e:fc:57:e9:1d:05:9a:22:84:a1:bb:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B6:5D:F5:17:E9:72:56:F5:27:C7:3C:18:34:F3:20:CA:48:6E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.224.0/22
                  164.152.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:55:43:0a:a5:82:59:6a:c7:96:c9:55:a2:db:a1:b5:2a:
         e3:91:bd:25:d9:cd:35:48:92:a2:2a:1b:54:72:14:52:d1:fe:
         2b:04:fe:f3:5c:94:e2:47:5e:22:5a:27:cf:a7:4e:82:93:6b:
         fc:25:c3:53:ff:c3:58:0a:c1:c3:27:0b:a8:db:bf:00:e1:9d:
         43:03:62:e6:32:d8:0b:45:a0:5d:7e:e2:f2:e0:41:03:c4:38:
         eb:9e:93:00:ae:af:8e:64:f5:48:15:d2:ff:7e:6c:68:5b:24:
         b0:95:43:7f:88:48:7d:e2:d1:70:1c:ca:ef:c0:3b:7c:71:69:
         d2:4c:b3:c7:de:d3:fa:ba:f5:57:9a:46:6e:bd:dd:33:ce:6d:
         74:f5:3c:87:c2:72:e2:b6:d4:10:74:66:ad:51:f3:fb:35:43:
         e8:0a:21:f2:2c:4d:79:82:a6:d0:20:c4:e7:57:c1:cb:0f:44:
         be:7e:5b:61:62:ba:88:7d:73:35:ab:b6:92:1a:0e:37:04:ce:
         7c:36:ff:22:40:5c:86:20:e6:26:69:11:fd:cd:99:20:d5:29:
         e0:24:15:50:36:ab:ed:c3:ce:42:95:1b:9d:fc:e3:2f:5b:0d:
         35:26:60:33:11:1d:c9:0d:c9:a7:e9:c8:1a:b7:3d:8b:d5:32:
         d9:b7:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:53 2025 by rpki-client