Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/ccc02be3-e111-3185-9ac5-7d2b007373cd.roa
File:                     ccc02be3-e111-3185-9ac5-7d2b007373cd.roa (raw, json)
Hash identifier:          kmliArbflrV1szxQw5gzy9ClSTt1W+480p6Fzbxp4yg=
Subject key identifier:   E4:5C:FF:1D:8F:72:9C:FD:21:97:D5:C5:7A:BE:07:B4:D6:7A:42:AF
Certificate issuer:       /CN=e02eda8d-679a-4d59-95c2-5097086d9468
Certificate serial:       010D0C9F4328584B9177841D9A470A3178CC96C0
Authority key identifier: EB:CC:92:05:D7:EB:EE:E2:83:D2:F3:66:F4:6B:35:74:41:D6:E0:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/ccc02be3-e111-3185-9ac5-7d2b007373cd.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     33647
IP address blocks:        67.213.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:84:1d:9a:47:0a:31:78:cc:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02eda8d-679a-4d59-95c2-5097086d9468
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=8fc8eb67-42ed-4535-824c-2f7163908551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:ef:38:4e:7d:81:bf:77:9d:c1:cb:d2:d5:
                    72:74:54:1e:b3:03:91:7b:a2:3c:ed:e1:61:77:48:
                    b7:ed:d6:d7:72:fc:38:15:80:b9:40:7f:e7:1b:5c:
                    7a:1e:d1:08:7e:38:1b:41:8d:32:60:86:b2:82:a0:
                    11:16:60:87:ee:93:ee:a0:53:b8:a5:76:1e:1a:73:
                    ef:11:e0:14:55:7b:48:79:cd:3c:db:2f:0d:2a:a0:
                    6f:36:c3:9c:31:72:de:7b:f6:6b:d7:ab:2f:81:e8:
                    01:01:c8:b4:5c:f4:02:94:c8:81:fc:64:bf:72:fa:
                    20:16:af:38:da:fe:71:b6:01:f6:aa:69:1f:6e:1d:
                    51:5b:29:35:b0:cd:c1:3d:cc:1a:07:95:e7:09:9a:
                    06:d3:55:e7:0b:76:48:2f:f8:0a:c8:f0:f1:06:a9:
                    89:31:f5:e8:eb:63:14:4b:f5:e1:41:37:f9:5d:83:
                    1f:41:20:20:9f:16:65:92:74:0f:bc:58:f9:3a:1a:
                    82:6e:d2:9f:6a:a7:04:bb:93:84:09:69:aa:a2:9e:
                    e5:93:55:38:2d:ba:af:5f:bb:c1:8b:6a:e2:43:b0:
                    f4:35:07:f1:19:a9:cc:17:b6:8c:98:52:d7:4d:10:
                    b2:40:56:60:3c:8a:79:1f:63:c1:41:96:8d:82:2c:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5C:FF:1D:8F:72:9C:FD:21:97:D5:C5:7A:BE:07:B4:D6:7A:42:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/ccc02be3-e111-3185-9ac5-7d2b007373cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.crl

            X509v3 Authority Key Identifier:
                keyid:EB:CC:92:05:D7:EB:EE:E2:83:D2:F3:66:F4:6B:35:74:41:D6:E0:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:48:31:fc:25:7c:fe:f7:67:70:cd:79:ce:8b:00:4b:99:
         bf:39:dc:0f:2c:bd:c7:ee:b6:5b:9d:38:5e:d9:c9:c1:c2:7b:
         6d:1b:85:70:a2:0d:d9:a5:3c:ec:0e:85:95:78:40:06:f4:c7:
         98:72:25:fb:ba:fb:f7:0b:19:32:cf:fd:73:2b:8f:bc:c1:12:
         21:c7:fc:2d:7c:eb:58:d9:ff:62:2e:db:60:3a:65:7b:4a:48:
         9c:7c:1a:3d:2c:4f:79:6c:c7:a0:6d:2f:46:0b:64:37:8f:ac:
         90:29:c4:a9:df:3d:21:d4:37:f8:8f:2e:68:16:e2:fb:fa:f5:
         64:57:88:67:40:c6:f2:84:d2:c6:69:25:02:c6:86:1f:a8:a9:
         d8:ce:a6:6b:23:65:c1:f1:e9:f6:22:cf:a0:fc:5a:8c:97:aa:
         80:18:c8:82:84:57:32:af:27:29:c9:65:9d:d0:8e:84:9f:c0:
         0a:f2:46:05:43:35:2b:c7:bd:d5:75:14:e7:75:ce:b5:22:77:
         b7:7e:bf:d2:58:85:e1:f5:3e:b6:73:91:55:61:1d:74:7a:65:
         3d:24:a7:13:a8:cd:99:24:4b:25:4b:16:73:13:e2:47:28:c5:
         96:9b:a2:bf:bd:c9:9c:02:9d:5e:9f:b3:10:df:aa:91:dc:d3:
         ed:2e:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:16 2025 by rpki-client