Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c8298ee6-0379-39f8-8713-fadb808d3779.roa
File:                     c8298ee6-0379-39f8-8713-fadb808d3779.roa (raw, json)
Hash identifier:          e34nTWv2WMOLhySnucyKffeWdmrnk2XEKEwdnsG44ag=
Subject key identifier:   F1:3B:8D:64:04:8F:96:E5:67:04:93:93:95:A6:6A:AC:1F:43:D5:36
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F4328584ABD4BB1760C48B9B0175CE190
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c8298ee6-0379-39f8-8713-fadb808d3779.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16527
IP address blocks:        162.211.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:b1:76:0c:48:b9:b0:17:5c:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=2a177dd3-aa47-463b-a238-1a96d80007a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c8:d1:42:6d:fe:3b:59:e3:11:33:3f:eb:5f:
                    25:78:7a:d3:2f:a0:cb:40:28:93:b4:44:0b:b6:c0:
                    37:1a:d2:51:d5:03:74:2b:e7:e6:c2:97:3a:cc:4f:
                    80:3c:d7:c6:62:bd:fa:c8:c3:09:56:7c:24:bf:74:
                    08:55:0f:0f:7b:6d:d0:f7:0f:b5:ca:ff:fd:57:04:
                    64:34:6f:6b:19:ce:aa:48:24:db:f8:28:32:43:4e:
                    55:ac:e9:cc:df:35:23:d9:46:8c:d4:78:b5:50:90:
                    97:42:25:80:35:36:fa:ed:56:1e:f1:17:f3:70:54:
                    86:a0:f7:80:95:0f:00:33:b2:35:fb:1c:2b:3c:73:
                    81:e1:a4:04:48:2d:93:e3:43:e6:e2:02:cb:2c:a7:
                    97:36:a2:bb:9b:84:63:31:42:7e:9b:a4:82:24:e3:
                    e1:1e:92:c6:14:89:95:d5:4b:17:14:34:22:3b:27:
                    bf:c5:3a:0d:57:e0:dc:58:43:9c:5a:0a:e8:28:0b:
                    e5:ed:d2:c1:95:b4:9b:23:dc:3f:6c:b3:8f:09:3f:
                    95:c7:ec:3f:89:91:3d:63:b8:e7:5a:12:5d:72:8d:
                    48:1f:79:50:27:56:c4:2d:38:57:b5:95:c0:fe:81:
                    7b:03:c2:01:2e:dc:d7:fc:a2:4a:99:4f:42:c4:48:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3B:8D:64:04:8F:96:E5:67:04:93:93:95:A6:6A:AC:1F:43:D5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c8298ee6-0379-39f8-8713-fadb808d3779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:06:25:e4:5a:fa:63:07:08:33:06:bd:93:e5:c7:2c:a7:
         8a:fb:4a:8d:04:af:21:91:3d:47:c3:71:62:1c:22:0b:b5:69:
         5c:88:65:59:ec:37:84:ca:fb:b4:ed:80:99:bb:49:f4:9b:70:
         c6:9c:d4:e1:5f:04:e9:e4:35:b5:db:bb:1d:ae:cb:cc:a7:54:
         3c:d3:f4:5e:13:a9:0f:52:f8:73:7d:65:44:8a:ba:2b:34:3e:
         a1:77:7c:04:07:7f:38:5a:9f:04:d1:f1:51:a2:7f:d9:3b:9e:
         44:95:a4:df:f4:20:d6:b1:63:27:18:c4:65:41:e6:60:cd:7d:
         d4:fe:8f:93:ea:1d:f7:93:09:32:de:51:15:e6:c9:1d:d2:bb:
         df:33:34:e1:c9:fc:32:58:29:1a:61:b2:4d:62:e5:7f:d4:ad:
         30:79:cf:9e:8d:7e:40:f5:f9:93:e0:22:2b:c5:ce:a4:5d:80:
         5a:c8:af:0e:50:e3:17:91:bd:aa:cc:1b:d8:b2:d4:8e:5d:bb:
         33:5f:72:03:ab:e1:57:e0:fa:47:5a:33:95:95:52:a0:38:cb:
         b6:eb:e0:23:ec:ff:a3:b4:21:bb:17:e8:3a:b1:53:c5:e1:2f:
         f6:d6:8e:2b:38:c7:db:5b:95:2b:44:31:bb:da:a6:db:31:c8:
         8b:6d:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:19 2025 by rpki-client