Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa
File:                     70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa (raw, json)
Hash identifier:          FuANcSUJs6TKnEtw59M97jl4p304xx8kRgFEmSX7Cyk=
Subject key identifier:   20:F6:CF:FA:EA:0F:EB:AC:72:0F:0D:6C:2A:05:EC:A2:74:CC:7C:15
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584AC2E0F0AE2B74139B6B073C80
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11269
IP address blocks:        199.193.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f0:ae:2b:74:13:9b:6b:07:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=67b25e88-6661-458e-a929-af02b765b9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:d6:4b:e7:d4:6c:33:47:42:b0:1d:af:34:
                    6c:57:97:4f:0a:07:7b:76:08:83:f8:35:0e:1a:b5:
                    af:bf:2d:27:68:2e:4c:3d:6e:73:de:ec:4b:19:f3:
                    04:41:a5:ad:b0:81:37:83:d1:ed:5b:de:2d:ac:80:
                    0d:68:c7:51:f9:46:b2:c7:41:00:6e:10:a4:1c:90:
                    82:03:81:3f:83:6a:97:87:44:7e:c4:44:ce:82:b1:
                    c5:49:34:12:14:d8:b8:5c:e8:85:ce:56:3e:39:3d:
                    e4:ef:71:54:8f:f2:d9:0a:22:7e:f6:82:89:8a:7a:
                    77:a1:ef:db:d2:d6:f1:20:99:41:81:4a:02:1d:0d:
                    c0:a1:58:43:1f:f2:0d:05:85:ca:32:d6:d5:15:53:
                    03:f5:e0:2f:30:7f:3f:b6:97:2e:bb:f4:5d:77:2c:
                    db:7e:79:2f:e3:ca:b9:26:b4:d6:98:ac:8a:b8:1f:
                    f1:24:b1:85:79:20:95:65:f9:22:24:cf:10:04:58:
                    32:02:1f:ad:3c:36:07:8e:7a:35:4e:86:ba:2a:7a:
                    cf:9c:0f:c2:fa:ca:9c:21:16:56:f8:56:f0:38:3e:
                    77:b3:eb:99:83:3b:97:88:77:a3:eb:d1:66:d7:c6:
                    04:c9:82:00:3f:5c:b4:19:d0:68:b6:89:f3:ad:60:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F6:CF:FA:EA:0F:EB:AC:72:0F:0D:6C:2A:05:EC:A2:74:CC:7C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:0f:46:b7:ed:9f:db:e7:7d:b2:ff:3f:0a:84:72:01:75:
         e5:7c:73:f8:cd:ac:c0:18:a3:da:49:e9:0d:70:31:f0:0a:61:
         34:df:97:e8:2f:69:bb:8a:de:2d:20:2d:08:6d:ca:49:45:9e:
         19:9f:a9:d0:44:63:77:8a:af:5f:a3:eb:2b:de:a4:b6:27:8c:
         ab:32:0d:f5:e0:92:70:f6:7e:9b:13:d9:8e:f3:72:1d:34:2a:
         1b:66:a0:f1:77:b3:be:37:85:b4:17:a7:3e:22:4e:16:f4:13:
         28:ee:54:22:ad:a7:a0:6a:2d:19:6f:be:be:e0:94:91:97:61:
         74:bb:53:37:3f:10:2c:23:5e:98:9b:39:2b:cb:d1:61:75:fb:
         09:c3:5f:d4:a5:40:98:71:e6:f6:36:51:84:b4:f4:dd:28:11:
         ad:a8:39:38:54:17:cc:93:05:8d:1f:ad:c9:db:3f:c4:b3:c0:
         4f:59:e1:09:9d:64:e5:c0:1c:01:11:67:45:58:a3:56:78:24:
         3f:1b:20:b9:f6:49:c1:3d:74:04:d4:20:b4:bb:48:7d:93:95:
         be:5b:9f:06:2e:ec:f3:00:8d:58:95:c1:06:cf:a6:ef:8d:30:
         1e:e8:80:75:01:af:e8:9d:37:cb:29:51:33:48:1e:f1:4a:b7:
         72:88:ab:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:33 2025 by rpki-client