Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa
File:                     270e83cd-3da3-324a-a778-d4c20816c3ca.roa (raw, json)
Hash identifier:          FHIbzb34RneMxvv8jMndwWNJMD7xeCjYDuIeD/wwkcc=
Subject key identifier:   D3:2C:09:E6:10:E4:48:7D:61:28:CB:1E:0C:7D:22:4F:30:FE:8C:8F
Certificate issuer:       /CN=3daec053-17f8-47be-a17c-d2007ce5700c
Certificate serial:       010D0C9F4328584AB650F86A40AC682BDC059400
Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     32775
IP address blocks:        167.253.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f8:6a:40:ac:68:2b:dc:05:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=bb3ba74b-8509-45c5-a6ed-00bb0b66bdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:a4:82:7a:58:17:6e:94:9b:84:87:1c:84:
                    54:b3:7b:ed:2b:90:5d:6b:a1:6c:36:6b:e0:a4:3c:
                    bf:4e:68:de:1c:28:28:57:32:f2:17:aa:26:8e:35:
                    49:e4:b1:5f:da:14:fd:6d:f9:12:40:93:a7:41:a1:
                    97:6f:f7:96:5d:55:1c:c7:c5:72:6b:fc:59:f9:a0:
                    c4:bc:e0:bf:1e:93:2a:0c:af:89:22:0e:0d:f6:df:
                    7f:41:65:94:54:31:f1:21:d7:0b:ce:22:d3:61:6d:
                    2b:dc:77:1f:41:4a:f2:cb:14:76:02:b0:ba:45:de:
                    f0:8f:04:5c:7f:e4:9a:fd:78:f0:e7:02:de:47:b4:
                    99:b4:99:eb:ba:17:56:4f:62:56:c0:ad:9f:72:1b:
                    1e:17:d1:54:fd:f9:36:ed:0d:29:f8:bf:9e:86:53:
                    26:b5:ae:5f:06:9f:59:a7:88:72:79:f8:36:39:21:
                    d6:59:b6:2b:f8:e5:f6:be:84:b4:51:ee:a2:96:06:
                    2b:1d:72:f4:42:12:f8:03:27:c7:34:d7:bd:b3:83:
                    03:6f:f9:10:c0:ff:39:6c:38:b0:7f:27:8e:da:3e:
                    aa:e1:69:64:eb:25:e9:09:29:32:12:2b:3c:a1:d7:
                    6d:76:ee:00:95:f1:f0:8b:cc:9a:30:c2:64:83:cc:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:09:E6:10:E4:48:7D:61:28:CB:1E:0C:7D:22:4F:30:FE:8C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/270e83cd-3da3-324a-a778-d4c20816c3ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1e:8b:6d:19:a4:a0:b2:55:88:e7:62:dd:97:ad:ab:73:53:
         8f:ab:22:6a:ff:b0:fc:ae:5a:3c:9e:8a:1c:d0:ad:87:57:82:
         e8:51:ef:2e:14:c9:90:92:0a:bd:73:00:fb:94:2b:e1:f8:a0:
         f7:58:52:29:1b:dd:23:3d:74:19:48:ba:c5:6a:16:10:75:99:
         8b:c3:c6:46:24:65:76:00:9f:14:01:fe:01:98:67:e2:d3:72:
         28:18:0e:20:4f:19:88:0b:3f:a7:05:54:f8:02:ed:b5:3d:d7:
         9b:88:34:dc:2f:50:4a:fa:80:4f:14:74:19:34:ce:1c:f9:8a:
         ab:c4:32:db:b6:e7:12:54:8f:60:9c:56:c3:04:5a:96:73:fc:
         37:62:24:8d:d7:1a:1a:34:bc:7b:bf:51:87:29:6b:6b:7b:4e:
         8a:fd:ef:67:63:d4:1d:dc:43:52:0f:bd:32:bd:5c:81:73:53:
         a3:6d:fc:fa:2b:ad:49:a6:71:3d:67:cb:e2:56:27:4d:dd:47:
         86:6a:1b:bb:02:42:d9:45:08:79:69:e0:99:6e:d9:d7:bc:b2:
         1b:f1:e7:88:f1:9f:c8:9b:0b:47:d0:35:4e:a1:53:76:9c:29:
         42:34:8f:11:b8:dd:8e:e6:ce:48:d9:1e:85:ca:9f:fd:cc:86:
         4e:b3:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:29 2025 by rpki-client