Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32b3e951-f0ea-3845-a6c5-3a4b49ea69e3.roa
File:                     32b3e951-f0ea-3845-a6c5-3a4b49ea69e3.roa (raw, json)
Hash identifier:          IZGCHR5LVEGrp1SvbxZJwTAmRj7lIPismy0DXaAiEY0=
Subject key identifier:   B1:53:29:4C:CF:AE:67:CA:40:CD:D4:E0:2E:2E:46:B2:58:A0:10:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A9900B7999C9F34B12210C280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32b3e951-f0ea-3845-a6c5-3a4b49ea69e3.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        168.93.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:b7:99:9c:9f:34:b1:22:10:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=9ebc7067-ce96-4f03-b697-1e3c2a803e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:65:e9:48:c2:ec:2c:f1:1d:04:57:28:67:
                    d0:75:64:87:36:4a:75:a1:92:6b:03:37:8f:96:b7:
                    ee:b6:f3:20:5d:0d:b3:03:e5:3b:82:a9:90:90:28:
                    85:7c:e1:d6:ad:bc:8b:52:54:14:be:59:f4:aa:e3:
                    9d:c0:8b:57:51:9e:83:4b:40:56:46:27:c6:99:e4:
                    fc:ff:8d:4b:ee:ed:2a:0b:f4:70:ad:6b:f9:08:c5:
                    50:6c:48:75:4e:f4:8a:19:87:70:a7:21:42:42:54:
                    b0:ea:d4:f8:69:0d:bc:df:a4:93:59:2e:63:9c:b8:
                    ab:d7:87:a8:74:27:bc:62:e2:37:c7:03:fc:58:13:
                    05:ab:da:de:e1:2b:d4:ca:1f:ab:50:56:3e:6c:82:
                    bf:0c:48:b8:09:ab:83:3f:4d:c3:0d:ed:b9:34:75:
                    f5:cd:a3:1f:7c:92:1f:20:87:99:e5:a5:7d:b2:75:
                    ea:41:6a:bb:0e:21:97:e3:96:25:b4:33:b3:5a:4b:
                    11:e0:9c:43:f5:b8:5c:f4:91:d5:e6:2e:ad:a4:4c:
                    57:52:ff:64:db:26:5d:7b:c6:ba:8e:55:1b:7b:61:
                    c2:34:56:94:59:f0:43:33:2d:86:0c:b3:4a:d1:aa:
                    31:e7:a3:95:83:af:85:ca:93:e1:03:91:54:2f:06:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:53:29:4C:CF:AE:67:CA:40:CD:D4:E0:2E:2E:46:B2:58:A0:10:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32b3e951-f0ea-3845-a6c5-3a4b49ea69e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:7f:38:85:6d:17:83:59:80:95:84:a2:0b:c2:ba:43:35:ca:
         9f:9b:15:c1:b5:78:de:48:a3:bc:24:3d:bb:01:f7:c4:f2:6e:
         5e:c1:09:2a:eb:b0:0f:44:5d:a8:d1:92:1f:a2:c7:6b:0b:ff:
         67:72:4d:63:38:84:91:73:8d:1f:cf:f4:2a:e1:93:69:bb:2e:
         bc:e1:68:65:cc:5c:43:ba:f0:93:54:4b:13:dd:a2:64:54:33:
         7e:cf:f4:e0:cb:a8:62:05:2e:a3:3c:e8:eb:9e:1a:62:63:81:
         c7:9b:f4:74:08:a4:08:85:98:96:53:72:cd:e9:01:85:4c:fb:
         66:aa:fe:8b:5f:0f:2f:6a:58:75:0a:1e:5c:26:c5:bf:4b:f7:
         4c:55:56:50:e9:fa:82:fc:06:bd:85:10:ba:9c:02:9a:51:92:
         07:e3:51:72:c4:46:83:03:fc:49:f8:91:ec:ae:98:c5:7e:2b:
         cc:bd:44:fa:35:50:0e:f3:bd:f5:7e:cb:15:1e:d7:32:cb:ee:
         53:16:77:67:a0:af:1e:a5:23:c7:5a:8d:57:63:db:82:ac:f0:
         93:d1:6d:02:36:fa:eb:37:0f:ec:6b:36:96:45:55:00:96:30:
         2d:0b:89:d5:2d:ee:d1:1f:e8:85:9c:fa:10:88:06:a9:68:f2:
         28:0d:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:03 2025 by rpki-client