Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa
File:                     3ccb2ccd-6776-345a-bf6d-3805674a638a.roa (raw, json)
Hash identifier:          jHCwXor0WR8BMnbHTDugpJQ+znmBfkng7zYbLT6uAMI=
Subject key identifier:   7A:42:F5:14:53:1C:AC:F2:70:5B:F7:72:65:FF:D7:14:22:52:18:49
Certificate issuer:       /CN=61b23514-b37d-4216-9f76-1988ace05318
Certificate serial:       010D0C9F4328584A920634465A0871D508B89380
Authority key identifier: 46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     32329
IP address blocks:        199.4.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:34:46:5a:08:71:d5:08:b8:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b23514-b37d-4216-9f76-1988ace05318
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=ebd3b59c-8a97-4f19-9a5f-2c86a283e7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:71:9b:c6:55:6e:0d:08:24:3c:d8:8a:7a:
                    b1:76:31:34:82:59:46:5e:61:08:8f:31:75:f2:54:
                    bd:ad:90:66:a0:9b:f6:88:d9:f3:09:6e:17:71:a7:
                    91:bc:77:48:ae:f6:d7:46:f6:c5:25:2c:c2:81:ca:
                    22:07:91:86:65:b2:f7:43:ee:65:49:9e:ab:79:15:
                    98:f9:57:0a:82:28:53:5a:3a:1a:52:90:b2:1e:bb:
                    2d:d1:1b:a6:ac:24:35:b8:89:d5:83:b2:e8:5a:60:
                    2a:09:04:86:78:7a:2a:99:b7:c7:63:31:d1:60:4b:
                    d2:be:85:4d:ec:0e:cf:7c:5c:d5:51:3b:c4:1c:f1:
                    a9:1e:a6:22:2b:6a:96:83:74:33:2a:28:bd:c8:81:
                    03:f8:5e:f9:e8:2b:b2:21:6b:42:08:52:6a:31:38:
                    28:9e:d8:06:3d:f6:ea:df:32:ac:a3:48:08:46:9e:
                    01:d3:51:7c:79:e8:e3:55:a7:a1:cb:e9:df:d7:55:
                    71:84:bf:30:8e:4d:ed:9c:9d:fd:f7:99:e5:c7:28:
                    b5:52:a2:68:7c:4b:f6:ae:fe:43:26:1c:a0:97:ab:
                    89:60:87:98:de:f0:f0:5d:fc:30:f9:01:d3:f1:67:
                    01:b7:1b:32:54:bd:3b:3e:b3:b4:2a:4d:26:b2:cb:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:42:F5:14:53:1C:AC:F2:70:5B:F7:72:65:FF:D7:14:22:52:18:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl

            X509v3 Authority Key Identifier:
                keyid:46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0a:03:b1:c8:6b:82:4e:10:13:f5:31:20:00:ac:29:4e:64:
         36:b1:1e:f4:ab:c5:da:92:a4:24:a4:aa:b0:0c:c8:71:f2:b6:
         52:a4:0f:c5:1e:2d:a3:b4:b1:81:b7:40:52:db:53:3c:d2:06:
         76:ee:2f:a1:13:e8:d4:4a:a5:15:70:dd:3d:88:79:40:86:e0:
         85:69:90:37:33:79:5d:ec:a0:12:c2:22:50:d1:c3:e5:38:08:
         9f:44:68:1c:ca:63:38:ec:50:65:1a:c0:7a:61:d4:fa:f2:5c:
         e3:15:e7:99:c3:fc:84:c1:87:f8:89:63:15:1e:7d:54:57:55:
         71:9c:a3:35:65:25:7d:6e:59:55:61:c3:0d:5f:cb:41:98:8e:
         96:ec:58:af:2c:02:d1:bf:a6:a5:c1:60:2c:bd:83:82:74:f1:
         3d:4d:87:c3:da:00:43:5f:79:90:e8:10:86:ce:52:5e:bd:78:
         1a:d6:d4:9f:42:d6:86:4c:b5:eb:fb:e8:9d:b4:58:c6:c1:5d:
         a2:06:e2:e1:2a:ce:3b:3e:f7:ad:88:9c:20:2b:3b:20:e2:43:
         d4:30:47:d4:3b:5e:78:55:f8:d5:ab:eb:34:71:ff:3c:26:fb:
         e2:20:04:2c:d7:d3:dd:71:23:52:98:d4:53:9f:61:38:64:4c:
         1e:9f:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:53 2025 by rpki-client