Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa
File:                     3bca850c-a082-395e-b6b3-a870cbd395cb.roa (raw, json)
Hash identifier:          E55n+nwpnt53BCKpm4+CEpqkYnwNZYMeYyymSZGAUFc=
Subject key identifier:   9F:A9:A3:40:22:93:39:A7:DB:9E:FB:07:87:C7:6D:FF:3E:FC:B0:18
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AAB26488D629B347D98ACCA60
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     42
IP address blocks:        67.22.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:48:8d:62:9b:34:7d:98:ac:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=3e6d1dfb-d284-4422-b90c-2d461cea23d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:18:22:7a:11:95:91:4b:32:71:48:42:28:
                    ca:1a:bb:e1:86:72:fd:1a:68:e3:48:a8:db:e4:ba:
                    fe:f6:55:06:21:b0:29:ad:c6:a5:ce:d2:2c:d9:fc:
                    2a:00:b9:0c:86:20:a4:70:bf:64:6a:58:7d:4e:3b:
                    33:87:1d:ee:c1:16:b9:57:ea:89:44:70:8c:9c:f3:
                    62:3a:56:41:dc:e8:33:35:ec:f9:d4:7b:45:86:89:
                    91:1d:eb:2b:a8:d2:3e:eb:bb:cc:ab:54:c8:b9:14:
                    61:07:6b:31:f2:86:17:47:58:7d:c7:d0:5e:de:06:
                    cc:97:53:29:a7:f4:6d:eb:ac:2f:5e:c6:4c:80:2e:
                    01:e1:8c:f9:45:db:ad:bb:f3:8d:b0:99:c6:2b:46:
                    9b:c3:62:8e:9f:1d:35:27:98:a8:ff:00:eb:a9:c9:
                    fc:82:a3:c4:7f:2e:ac:f8:58:38:88:6a:39:ed:f2:
                    9b:bc:80:7c:c9:9a:3c:03:65:e3:fb:d9:cf:ef:a1:
                    86:5e:8f:d4:6c:e2:5d:4f:4d:b9:b0:9b:a7:d6:ac:
                    75:42:8d:0a:d6:b1:68:fe:bb:5b:c6:77:3d:94:82:
                    72:67:f5:97:62:51:53:be:58:58:06:fc:f8:8b:0b:
                    a7:fe:38:26:38:87:71:a4:e1:a6:ae:56:d5:b6:18:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A9:A3:40:22:93:39:A7:DB:9E:FB:07:87:C7:6D:FF:3E:FC:B0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:f1:10:8d:12:a6:68:e7:a8:9c:64:4e:e9:f8:e7:d9:ae:
         9c:3e:6d:a9:09:7e:9e:f5:78:b9:30:90:37:8a:35:2b:dd:74:
         0c:fd:f6:3e:b7:1c:25:0b:52:7f:0f:82:22:65:7e:4e:83:37:
         46:b9:df:18:0e:d3:a4:f7:82:a2:a7:91:d4:61:fc:5a:03:f5:
         70:80:31:0d:4d:f5:20:fb:27:a2:9a:5c:5c:00:95:08:b5:d2:
         7c:17:7b:43:95:a7:50:3f:5e:06:99:dd:dc:31:89:d2:58:bf:
         1d:46:88:40:3c:5e:3e:cf:68:26:3c:60:98:5f:ed:ea:31:d2:
         26:b8:d7:e5:00:59:76:7c:64:5e:99:ce:cf:92:3b:8d:af:7b:
         a3:1c:77:00:65:ca:5f:f5:1f:63:50:23:09:4b:f7:d9:b9:5d:
         72:62:a7:2c:f4:2a:e8:27:d3:f8:4b:d5:e2:d5:5c:fd:2d:a8:
         78:6c:d4:a1:23:88:b6:d2:ff:02:98:76:2e:43:31:65:c2:19:
         b4:50:3e:bd:60:51:6e:38:ff:d0:be:72:ff:6d:53:43:3f:d5:
         ca:5c:b2:bc:4d:b0:9c:84:d4:47:40:48:e0:3f:5d:4e:f0:c8:
         e2:d1:9f:c4:69:f4:c0:23:b5:b7:d0:bc:89:68:c6:ec:62:f7:
         d6:e6:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:45 2025 by rpki-client