Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa
File:                     3882367a-4385-354c-b426-03b9c22717da.roa (raw, json)
Hash identifier:          /Bknebrztv8ua5mliOHzS0OAIrwnVdKPS3/BVTZ2VKA=
Subject key identifier:   5A:F8:35:23:2E:35:B8:D5:B7:83:01:C2:8B:E7:5C:1B:C3:E0:D4:F8
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A7BB0B2C48CD48D1923CA3920
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     32043
IP address blocks:        173.232.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b2:c4:8c:d4:8d:19:23:ca:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=72f1d300-1165-437e-8274-a7c0bca65242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:0c:c3:9c:e6:34:4c:21:27:a5:c2:6c:4f:
                    32:d4:81:85:36:d3:40:5b:9a:3c:b5:68:26:d1:78:
                    ff:cf:79:a9:72:e8:c8:24:37:e8:85:c0:52:8d:f0:
                    9d:f0:e3:13:ba:89:d9:5f:ce:81:bd:61:41:ea:4f:
                    35:48:5a:6c:a2:2a:bc:32:18:f8:59:bd:90:37:c6:
                    3f:71:52:39:00:6f:94:30:8a:6a:d2:ad:f0:2e:1c:
                    ac:4a:64:2f:0b:0b:f4:13:6c:83:21:c9:bf:0b:6b:
                    ee:0c:cb:3c:1a:a5:f2:dc:7f:9b:e3:57:c0:bf:12:
                    34:e2:b4:79:73:64:67:22:5c:b9:c4:ee:fa:07:f9:
                    66:93:b9:59:ca:44:75:8f:2b:78:68:76:ae:63:47:
                    03:e4:ac:54:4d:16:23:d7:9f:d3:d1:24:7b:75:71:
                    63:81:f0:42:3d:a5:1f:bb:8c:ee:cb:e5:a9:53:8c:
                    14:b2:ae:c3:12:29:16:27:f7:43:27:64:45:88:61:
                    02:56:2a:e3:ff:41:7a:71:26:78:68:1b:7f:0c:b2:
                    eb:48:bc:8e:61:9d:f1:2b:ca:0d:82:a6:2a:de:a9:
                    c5:22:d2:21:97:5d:f7:19:93:00:49:a7:6d:42:33:
                    9a:34:7b:5a:e4:79:40:57:b9:0b:d8:99:bd:57:1d:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:35:23:2E:35:B8:D5:B7:83:01:C2:8B:E7:5C:1B:C3:E0:D4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3882367a-4385-354c-b426-03b9c22717da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:0e:40:b7:fd:ee:05:d0:1f:64:44:ce:e0:12:f6:ff:5f:
         c5:32:aa:4f:d5:45:22:ab:47:63:86:09:26:0d:7d:d8:b4:d9:
         f3:33:47:9c:56:f5:90:5f:82:e7:33:72:e9:94:a0:39:81:d3:
         c2:61:1d:a4:e6:e0:6c:fc:a7:fc:d4:dc:98:b4:95:30:a9:3b:
         f3:f6:34:87:79:3f:f1:43:41:36:93:93:9d:7c:be:0c:3c:a6:
         f1:18:65:e6:03:78:1b:cc:b5:c0:e9:45:0c:94:c7:10:33:40:
         94:94:62:c5:66:2c:99:34:aa:69:75:e6:cb:a8:30:b4:70:16:
         74:62:23:6f:3b:35:7e:42:f1:bf:9f:14:46:2d:b3:00:e6:75:
         c0:3c:55:f2:73:62:e5:32:4c:9a:0a:bc:11:37:08:ba:f0:b9:
         cf:41:55:fc:cf:0c:b4:01:38:b9:74:b8:4f:6d:33:03:fe:9e:
         07:80:5a:34:2c:69:0e:fb:66:32:fc:87:fa:c7:fc:93:39:44:
         f7:bf:3a:a4:92:e8:e0:05:1b:07:af:51:76:ae:b3:18:59:cf:
         50:3f:cb:c8:51:93:d7:e8:d3:cf:e8:6e:2b:e5:6d:69:03:5f:
         e0:c8:d7:5e:7f:b5:8d:dc:f0:d2:a8:2c:47:e2:a5:74:2f:ad:
         07:54:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:45:55 2025 by rpki-client