Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa
File:                     12670d4d-d305-33df-8fd0-2996efbc81d5.roa (raw, json)
Hash identifier:          gAEEumolftM/fECBreQ85N/D//h7HZ3s0lAqIrvYgkg=
Subject key identifier:   43:1E:D3:66:0A:88:32:AC:4A:7C:B9:EF:AB:BA:C9:CC:2B:F8:87:80
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584AC01640AA76664896CCF1E200
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     46455
IP address blocks:        67.22.208.0/21 maxlen: 24
                          67.22.216.0/22 maxlen: 24
                          67.22.220.0/24 maxlen: 24
                          209.51.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:40:aa:76:66:48:96:cc:f1:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=7aa921f5-8bba-496d-9e19-39cafd5d6658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:ec:9c:2e:61:16:05:49:18:be:62:c7:7c:
                    fe:02:f1:e7:59:e5:34:2d:2f:6a:37:41:17:4a:c1:
                    69:a4:c3:55:b6:97:57:fb:56:8a:79:70:46:87:75:
                    44:4e:12:70:7c:50:89:40:bd:2f:38:31:5a:13:54:
                    13:d7:d2:3e:c4:95:ba:46:9c:40:5a:b4:cc:ab:47:
                    55:6b:cc:c8:f3:4e:0b:93:ef:0f:d8:07:76:5a:a8:
                    ac:bb:0c:ce:e4:b7:4e:b4:50:2d:0a:e5:a7:f5:b1:
                    d7:af:23:2e:17:bb:b4:c0:47:cf:44:e9:9a:b4:15:
                    da:d7:df:1c:2f:0d:da:c8:22:a7:15:28:c3:30:5c:
                    13:8b:f7:54:7e:78:b6:d3:18:47:b3:d0:54:8e:a6:
                    a8:6a:b9:ae:40:f2:1f:02:15:c2:e9:95:0a:95:a6:
                    a7:68:3d:5c:bf:16:83:c3:09:1b:a2:40:13:38:72:
                    5f:22:83:3a:8e:53:2e:f7:da:d7:91:55:77:17:5b:
                    6d:33:40:c7:9f:87:8e:ac:cb:4f:10:c7:f9:94:4f:
                    a7:00:3c:b6:3e:fd:e5:65:93:9a:2c:4d:ce:73:2f:
                    66:02:87:19:db:ea:da:29:ac:95:6b:55:c5:a5:8d:
                    e7:b5:e6:4e:96:82:15:ab:a5:8d:bf:a0:f4:65:ad:
                    33:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1E:D3:66:0A:88:32:AC:4A:7C:B9:EF:AB:BA:C9:CC:2B:F8:87:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.208.0-67.22.220.255
                  209.51.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:01:a8:6e:2d:35:5f:6e:07:2d:ea:eb:6f:f2:a3:4f:a4:7f:
         b2:33:34:85:e0:ec:ba:49:da:41:67:00:6c:17:73:b9:d0:98:
         74:4c:a2:a8:be:7d:6a:e1:6c:38:72:66:d6:3e:60:12:28:31:
         5c:1f:10:de:85:e3:37:e7:1f:0e:24:de:1c:c6:c8:aa:a0:29:
         0f:cc:dd:93:8f:ea:67:d3:64:89:7d:c8:1d:14:ac:88:21:f1:
         78:e2:88:fd:85:ac:82:0d:28:b4:b5:7d:38:3a:98:8c:30:f9:
         dc:1e:e5:af:f0:6f:53:3c:3c:8e:be:c7:f6:8c:69:10:67:7d:
         e6:52:f9:67:43:53:49:2b:c7:5d:63:d7:60:9b:39:31:bc:2d:
         ca:80:45:d1:eb:2e:b9:05:82:cb:90:79:43:38:8a:b3:2f:f2:
         d2:aa:5e:06:37:73:a2:13:93:99:09:eb:8e:7b:fa:fc:c5:aa:
         88:a4:a4:4d:a1:c9:bc:de:e4:7b:be:08:cc:c2:1a:55:a3:10:
         41:c2:13:13:5a:9d:38:66:26:ee:1c:0f:80:44:f1:34:54:01:
         09:0a:6e:bb:f3:24:c9:dd:6d:fe:ad:2b:63:22:dd:5e:da:51:
         83:ca:ad:c8:ab:68:32:4d:70:38:07:10:f7:ab:b6:56:b9:5e:
         67:90:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:40 2025 by rpki-client