Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/7f9abead-8c76-3de1-b30a-0f3951aed54a.roa
File:                     7f9abead-8c76-3de1-b30a-0f3951aed54a.roa (raw, json)
Hash identifier:          +WmC1J1EYAZOuA2dGbci2C9jgcT7Tx/nWydE4j+Ab1Y=
Subject key identifier:   D8:2B:7C:0E:E0:3B:0B:C6:23:5A:A3:D9:39:C0:22:16:65:86:4E:08
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584AA42B70E09C8AEBE385B0EC00
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/7f9abead-8c76-3de1-b30a-0f3951aed54a.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     400196
IP address blocks:        207.22.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:70:e0:9c:8a:eb:e3:85:b0:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=32a3d7d8-d180-41d0-b6e9-92f385d0ebae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:f8:bc:9b:93:93:63:4a:3e:5c:b9:b8:13:
                    1b:96:a1:bc:31:00:a1:b1:78:43:fd:6a:fc:38:38:
                    b6:6e:0a:f9:dd:1c:b1:30:d4:b3:05:d0:e6:34:ca:
                    3e:50:77:93:81:e4:2a:56:23:83:35:f9:35:be:08:
                    bd:a6:92:1e:f6:ef:ee:d1:cc:d9:d3:22:12:34:d8:
                    75:86:62:53:ca:92:bc:14:88:55:a3:32:91:eb:0d:
                    96:25:fa:e0:06:bc:f7:92:bb:d8:dc:05:a7:9d:58:
                    39:0a:1a:c1:49:de:87:2c:07:57:38:88:2e:62:ca:
                    d9:4d:21:c8:6e:87:14:9f:1d:f0:d0:88:8a:00:d7:
                    ec:ff:be:f4:e1:7b:87:3f:27:db:53:c6:0f:da:60:
                    9f:72:bc:b0:79:af:f6:64:b8:d8:9b:2a:f9:f9:62:
                    85:d4:68:09:64:c0:ac:fa:be:7a:45:cd:0c:01:39:
                    45:04:a6:64:d3:fd:0b:40:e6:11:21:e7:4a:16:3d:
                    45:e5:b5:1f:e8:3f:36:d0:5e:e7:fd:07:ed:48:94:
                    95:ef:c5:99:d8:c4:f4:83:c2:38:16:d0:52:73:27:
                    e0:bd:0c:62:18:80:9b:7f:60:d0:a2:24:a7:37:3d:
                    94:a4:8f:4e:be:aa:9a:c0:68:d7:b2:e5:30:df:b4:
                    b4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2B:7C:0E:E0:3B:0B:C6:23:5A:A3:D9:39:C0:22:16:65:86:4E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/7f9abead-8c76-3de1-b30a-0f3951aed54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:54:13:7a:30:ad:2f:d1:53:a6:15:0c:25:65:25:d9:dd:c2:
         a5:77:8c:6d:40:b8:27:c9:d6:1c:61:80:69:ba:af:b2:68:be:
         83:69:ca:a9:b7:00:08:d7:f9:36:92:e8:4a:71:08:d6:5d:17:
         d5:2b:e5:1e:dc:eb:46:2a:2a:a0:55:40:f4:6d:8c:90:15:b3:
         1b:d4:ca:61:e6:6f:67:2e:ec:7e:54:11:8f:11:81:d0:4d:1e:
         30:ec:6d:ee:e0:e6:50:72:b1:38:d4:39:aa:d6:a4:a1:63:f2:
         e1:ae:a9:9b:a4:45:cd:8d:61:f0:35:a2:06:77:b0:53:93:60:
         67:53:bc:25:82:8f:c1:1e:15:92:c7:07:37:42:6f:3e:37:22:
         81:e6:a1:36:b5:fb:0e:e9:70:2c:a9:c6:a1:f3:2d:95:78:78:
         a4:fc:44:74:e6:ad:09:57:25:91:e2:b2:9f:b7:09:bf:fc:4d:
         5a:f5:b1:6a:8b:b2:17:93:a8:e8:70:42:e8:69:8f:51:58:2a:
         90:fe:14:bb:be:a2:b4:60:58:da:38:60:57:e1:e7:f0:a9:26:
         e8:e8:d1:81:fd:7b:6b:c1:0e:d9:a2:ec:68:be:ad:74:25:e3:
         a4:ff:53:fd:8d:46:a1:df:9c:f8:27:23:44:e7:2b:1d:96:04:
         9b:c0:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:14 2025 by rpki-client