Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa
File:                     dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa (raw, json)
Hash identifier:          Kl8CMe1U7KPdhyCcJwswnYtQ1O3SmkIuxHOfJubmUlU=
Subject key identifier:   35:A2:FE:B3:75:1E:7D:9A:27:AF:B2:BE:A8:9F:0C:F5:0A:FA:D3:B9
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4B985A667B26242877A880
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        24.89.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:98:5a:66:7b:26:24:28:77:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=b3048053-024e-45c6-aa9a-bd8dc75820d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:0b:61:ff:29:26:35:c2:26:aa:2a:07:ff:
                    e7:ed:e7:36:40:d2:5d:30:a1:81:80:8b:bc:de:1d:
                    56:ee:ad:bd:84:18:e2:26:01:1b:fa:14:b1:97:ad:
                    b5:63:71:81:dd:1c:24:94:67:3a:51:49:c8:61:19:
                    8c:e7:b9:cd:28:a7:ba:39:67:9a:9a:a8:95:f4:46:
                    69:e7:19:3d:d9:04:64:0f:3e:2e:5d:a3:e7:1c:17:
                    d4:83:c2:bb:e8:e7:98:f8:ef:0b:10:ec:a0:16:4e:
                    80:4a:44:57:e1:0b:51:98:bd:17:73:f4:ff:b8:40:
                    7f:66:43:41:c6:cc:c5:36:25:2e:d3:8d:a0:1e:26:
                    ba:a0:f6:59:19:d6:71:71:83:83:f3:f7:76:35:f4:
                    ff:55:38:52:ba:c1:58:87:b9:69:1c:af:e7:83:16:
                    c3:5a:68:fe:a7:5d:20:0f:3f:26:4a:e3:fa:55:0a:
                    32:15:61:9b:fd:c1:63:38:bc:80:72:1e:2f:2c:60:
                    83:78:ea:d3:e3:66:4c:02:d4:80:dd:e2:de:19:03:
                    79:b0:c3:a8:5e:f9:64:a2:d9:78:f4:a3:f6:96:a0:
                    05:f2:60:6a:6c:35:d6:bd:9b:34:11:9f:62:32:36:
                    75:26:e3:ce:c8:7f:61:34:85:c8:86:56:4b:30:b5:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:FE:B3:75:1E:7D:9A:27:AF:B2:BE:A8:9F:0C:F5:0A:FA:D3:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/dac369a8-f4de-3aaf-bda6-1b83c31f2ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:6d:cf:34:a1:63:63:0e:bd:06:41:b0:c8:67:e3:57:fe:
         57:e3:7c:c9:dd:5f:24:b0:9b:3c:78:18:fa:a0:b7:b0:19:79:
         1f:11:0f:28:82:c1:e1:6a:62:95:22:8d:9e:d5:50:a5:75:63:
         d4:fc:5d:05:31:f5:44:3a:bf:38:9c:a8:12:6e:46:9e:7d:c8:
         0e:36:1b:0d:ff:30:18:e1:90:47:d3:7a:77:e7:28:f4:d8:be:
         4b:f6:86:1b:02:45:2f:27:ca:e2:16:3a:21:bf:0f:4f:43:1b:
         44:5b:a8:b6:f2:64:b7:46:24:1d:ba:f9:95:4c:dc:69:1b:db:
         1f:f1:c7:c5:0a:bd:af:ce:14:3e:ea:f6:be:df:f3:b5:24:30:
         22:75:ff:4b:1d:5e:4d:d3:bd:8a:c6:d6:6d:4d:a4:ed:ed:15:
         34:08:6b:1a:b0:ef:f8:27:69:df:8b:4e:e8:69:75:e3:1b:fd:
         b3:15:77:57:db:88:b9:cd:21:3d:d4:dc:f9:b4:cc:e0:a9:49:
         0c:75:f5:f6:75:25:c7:54:d3:52:97:40:13:f0:e4:4a:6f:9c:
         1a:33:9a:64:ab:b3:cc:0d:2b:06:7b:69:50:2d:02:6b:a0:4b:
         87:02:cb:2e:4f:fe:cb:78:ac:25:a5:6d:65:0d:82:31:92:f8:
         66:a1:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:45:52 2025 by rpki-client