Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
File:                     6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa (raw, json)
Hash identifier:          17fiaNMkMGAp+TG0m3RJyU3FBB80Mip571hyrYWlRZk=
Subject key identifier:   D8:2A:AF:E2:43:71:71:73:5C:F1:8F:EF:2E:9A:CF:7F:3D:87:63:7D
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F4328584A9BCB704FBA8580F738274DC0
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     393950
IP address blocks:        104.167.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:70:4f:ba:85:80:f7:38:27:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=1f7ae7b5-03d0-4559-b2e2-f3b95953c86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c5:a9:66:d9:ec:bb:16:4b:85:d2:d9:31:e4:
                    c2:8e:fe:9a:01:7e:93:c3:88:97:fd:2c:7c:cd:11:
                    3f:4c:cc:7e:26:9b:09:3c:84:69:2d:5f:68:34:b5:
                    de:52:dc:9e:8f:32:e6:c7:b3:ff:f9:d9:ea:11:95:
                    53:6e:0b:8e:93:33:8d:37:b8:15:ab:00:0e:96:2a:
                    53:30:e6:80:93:d3:92:c5:ba:47:e7:6c:d4:34:a3:
                    7d:54:eb:8d:cb:8a:c9:4e:e0:95:6a:77:e4:2d:cf:
                    9b:f3:46:01:36:01:6c:f8:27:3e:c8:70:33:9b:df:
                    1f:80:71:8e:70:09:b4:6c:72:21:a3:48:f2:c8:47:
                    eb:d2:5c:42:66:98:e5:11:4e:f0:6d:c9:fc:ee:5c:
                    aa:19:be:6f:95:8f:10:e1:5a:e2:ee:33:fd:d8:32:
                    55:14:c3:fa:47:52:a4:f1:3a:18:ce:b3:83:1e:4e:
                    cb:90:7e:16:bf:35:fe:35:1e:6e:08:8d:65:7d:ea:
                    59:09:a6:bb:41:e9:25:d0:0a:7b:be:4f:06:e9:ab:
                    b5:60:b6:36:2f:33:fd:4b:13:c0:5f:fe:08:8d:1b:
                    a5:77:65:bc:32:92:d8:e2:46:8c:07:ca:7b:13:36:
                    b6:ef:78:7c:dc:1a:20:f0:6e:a5:b4:28:43:ed:33:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2A:AF:E2:43:71:71:73:5C:F1:8F:EF:2E:9A:CF:7F:3D:87:63:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/6b94e802-cca4-3afd-a7e8-3a6bda15a552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:38:4d:8c:1d:35:2d:7f:47:a5:00:59:e5:9e:76:12:76:
         eb:2d:8d:8f:ee:e2:15:7d:ce:92:0f:89:a6:2f:c7:82:57:3e:
         e2:71:57:0a:bd:e2:2b:3e:b9:7f:dc:81:de:0e:3d:bc:85:45:
         b9:be:72:d9:ee:4a:5d:14:6c:bb:c7:80:d4:83:e2:15:7d:b7:
         67:a8:3a:5b:5b:fb:cf:13:60:ce:ef:da:11:ee:48:2e:c0:b2:
         71:52:05:42:b0:ba:c1:b1:7e:71:7a:6d:23:99:4d:39:60:fc:
         58:57:11:31:a2:ce:79:36:b3:40:fc:5e:a6:e0:73:da:e2:94:
         5a:6e:6f:97:9e:df:a7:8d:e7:58:77:1c:90:38:0d:eb:16:80:
         61:29:4e:d9:52:df:b3:08:c5:2f:f7:f8:39:b7:6e:ac:77:6d:
         11:96:1d:eb:95:6b:d6:4e:f4:24:8b:c1:fb:de:38:0c:5e:09:
         f0:77:03:ea:9b:4c:f4:4f:af:1e:8f:3a:7a:a0:80:6a:23:46:
         cc:44:2e:ab:28:7b:d0:a1:34:eb:f6:89:5b:ba:54:66:78:16:
         d4:5f:51:99:0f:b3:f4:aa:88:a2:d1:13:88:77:73:01:ab:8b:
         d8:7e:6a:27:ca:61:96:b6:a0:79:aa:02:73:78:2d:07:5c:4e:
         3e:53:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:02 2025 by rpki-client