Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/2accdeca-a2f8-366c-b1cf-50d64c9e319f.roa
File:                     2accdeca-a2f8-366c-b1cf-50d64c9e319f.roa (raw, json)
Hash identifier:          cnnLdDr7oS5SyqKAb8sUxZ6hJ/oNo19ESYWdHmeGBe4=
Subject key identifier:   FE:54:E9:F1:0F:F1:C4:A3:FD:AD:F8:75:1E:C6:B6:FB:0B:97:93:B6
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584AB594C90525F0E17ACB88BD00
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/2accdeca-a2f8-366c-b1cf-50d64c9e319f.roa
Signing time:             Fri 01 Aug 2025 06:41:51 +0000
ROA not before:           Fri 01 Aug 2025 06:41:51 +0000
ROA not after:            Thu 30 Oct 2025 06:41:51 +0000
asID:                     55720
IP address blocks:        172.93.165.0/24 maxlen: 24
                          172.93.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b5:94:c9:05:25:f0:e1:7a:cb:88:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Aug  1 06:41:51 2025 GMT
            Not After : Oct 30 06:41:51 2025 GMT
        Subject: CN=2c7680e8-f1f9-4e3f-9a5b-f20ba78ace08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:b4:47:2b:d5:cc:80:e4:d7:59:1c:2e:d0:
                    5d:4b:52:f9:d1:41:15:4d:db:d9:7a:9d:85:92:27:
                    0a:df:d7:c8:0f:86:a5:bb:60:9e:d1:cb:94:d1:bf:
                    d8:1b:b4:c0:85:f1:db:3b:c0:c3:b0:b3:3d:ed:90:
                    6d:6c:77:e0:01:d1:59:24:16:24:32:b9:db:a6:25:
                    44:8c:58:ec:f2:3b:b6:0d:8f:80:ef:b4:2e:4f:fc:
                    49:b6:0e:02:f0:c1:d5:c3:f7:b0:df:33:7f:78:da:
                    57:f4:40:8e:9d:3e:14:7a:69:bf:a9:1e:29:25:c2:
                    59:15:62:25:02:dc:84:31:26:46:83:7a:b3:01:07:
                    89:ee:88:1f:12:47:c8:98:95:d1:e4:85:dd:b7:e4:
                    23:a1:f6:7a:19:1b:a6:34:be:26:9c:50:94:be:68:
                    80:43:6a:0b:a3:3c:4f:00:f6:6c:81:c3:99:36:ce:
                    ca:8f:d4:dc:03:85:9a:75:66:db:10:5f:ba:39:9f:
                    08:8a:06:5c:2d:99:5f:cb:4c:ea:4a:20:73:29:d1:
                    22:9b:e5:81:7d:24:66:2f:5c:07:3e:96:f8:02:c6:
                    79:29:af:53:a6:fb:a3:63:27:43:25:a4:b5:53:d7:
                    d6:92:46:21:1e:f0:ef:ed:de:20:c3:9b:4e:b7:c9:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:54:E9:F1:0F:F1:C4:A3:FD:AD:F8:75:1E:C6:B6:FB:0B:97:93:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/2accdeca-a2f8-366c-b1cf-50d64c9e319f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.165.0/24
                  172.93.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:87:a6:c3:37:80:87:0b:32:02:85:c4:6e:30:7b:aa:2e:34:
         9c:a5:cd:38:3d:ac:76:04:90:a6:06:a5:5c:6c:14:7a:7c:5b:
         9a:0f:85:9d:ed:c7:8d:53:ac:d8:fd:25:cb:77:db:08:59:fe:
         e1:26:35:1b:cd:55:80:cc:64:d1:88:a8:dc:43:93:da:aa:10:
         0a:52:a0:80:64:9c:f1:10:a6:82:06:8d:cd:c0:de:81:1c:06:
         3d:8c:da:6a:3b:7e:13:2e:aa:88:74:09:de:32:32:27:cc:ad:
         7b:f4:28:00:c3:8b:4d:d7:9d:d1:50:c2:3a:c5:ac:87:47:ca:
         47:10:5c:1c:18:cd:fc:cb:b0:90:ae:c0:13:07:97:4e:4f:c8:
         29:9b:ac:f6:90:f2:ff:fd:b1:a3:36:1a:34:c3:8d:29:5e:3f:
         a8:a5:64:ed:26:9d:b9:f1:d3:a8:d5:13:21:60:ba:30:4e:62:
         21:ba:d6:c5:54:3c:61:ce:f1:e1:03:84:93:ee:e9:fb:37:74:
         c6:3e:e5:ef:77:08:79:2a:82:30:2a:36:1e:15:aa:f3:1b:5b:
         ea:48:7e:41:e8:a7:60:b7:91:d7:82:06:db:58:7f:81:de:46:
         90:a6:b5:f1:4d:a3:65:fe:dc:6e:2a:a9:7d:5d:33:b4:31:1c:
         0b:8c:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:41 2025 by rpki-client