Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa
File:                     0db3b563-3287-3841-a396-41461b2172ba.roa (raw, json)
Hash identifier:          HoGgl773+FTZvyVBOaeUtLMXSj5xSkgTd+G+IH/cNtc=
Subject key identifier:   B3:5E:F9:B7:7C:5A:A8:71:A1:1A:FD:0B:11:A7:FB:CD:07:00:7E:7A
Certificate issuer:       /CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
Certificate serial:       010D0C9F4328584AB38623E39D75A3769A4207C0
Authority key identifier: AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     29894
IP address blocks:        216.122.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:23:e3:9d:75:a3:76:9a:42:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=ab77596c-7435-4401-a90d-a19245ebcda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:6a:ae:cf:9e:3a:9a:0e:a3:f2:42:4d:8a:
                    0a:c1:1a:ee:30:f8:c6:9e:17:b7:a2:a2:6b:b1:8d:
                    ce:00:14:11:bb:09:b1:04:a7:90:71:b3:ca:35:2e:
                    e0:d1:30:b8:d9:8c:83:0e:a4:21:28:5a:68:55:93:
                    0a:99:1b:e3:a0:92:6d:8a:5c:96:4d:7f:1c:54:50:
                    02:6e:f8:75:fe:fe:a7:a6:e0:6c:0f:95:f3:ae:8f:
                    d0:82:35:73:57:b3:b6:d4:d1:8e:e3:08:5a:39:1a:
                    59:ef:c7:c7:c6:71:dc:8e:85:16:45:84:89:9c:3f:
                    8e:b7:32:c6:7e:87:c6:0d:25:ef:cb:e1:63:80:b1:
                    97:e3:be:22:27:18:57:0a:8c:78:bb:ab:0e:23:48:
                    ef:16:02:21:2c:a8:0a:12:30:f7:1f:a3:6a:e9:8f:
                    3f:9c:7b:d5:ef:40:d2:50:9b:7e:60:28:47:8c:35:
                    09:6e:6f:fd:98:16:42:c6:25:1b:ec:e5:36:a0:e8:
                    46:43:2b:7a:c5:f2:13:9e:37:f2:c6:75:9d:77:c4:
                    f3:3f:e6:f5:be:64:35:b3:2c:ac:9b:e8:26:16:8e:
                    94:fa:22:9d:f2:ba:7b:ea:14:f5:2e:79:bb:ec:96:
                    bf:04:75:f6:ff:c2:8b:2c:76:db:a3:5f:97:d3:3c:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:F9:B7:7C:5A:A8:71:A1:1A:FD:0B:11:A7:FB:CD:07:00:7E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/0db3b563-3287-3841-a396-41461b2172ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl

            X509v3 Authority Key Identifier:
                keyid:AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:99:37:a5:d8:35:b8:e8:bb:f4:13:6f:61:d9:54:03:c0:9b:
         fa:fe:f3:84:4b:18:1f:46:9b:ba:7b:c9:7d:8a:28:4f:cb:5a:
         25:3d:60:1f:ca:ac:9f:ab:39:a0:05:53:da:d4:5f:c8:78:13:
         aa:ee:4b:c8:42:13:e7:9b:cc:64:21:7a:99:5f:64:ac:0e:a2:
         91:b4:b3:2c:ef:de:d5:32:33:1d:3c:31:0c:34:d6:34:2a:7b:
         f6:78:59:e2:f2:96:95:14:18:3a:d2:60:1b:f2:ab:75:12:89:
         5a:10:50:62:1f:cd:45:2e:43:d2:d0:08:fe:a1:45:56:85:36:
         71:0c:b7:d3:66:2e:6c:19:31:db:9f:2c:4f:5e:56:e6:a9:81:
         07:55:36:04:46:1c:74:52:bf:8c:b7:28:a6:31:97:30:b4:89:
         db:59:5b:38:fa:1b:4c:e1:52:8d:69:06:49:94:6f:00:f7:ad:
         fe:36:52:b5:7a:6d:7e:1f:87:5a:9d:57:21:7f:5e:ba:6e:bb:
         ad:41:7b:05:fc:fe:57:1a:66:96:3c:13:69:ed:12:6b:01:8f:
         d5:97:44:90:61:9d:a9:9d:ec:00:88:e7:1f:3d:33:e1:cc:ab:
         a3:39:f1:82:fe:8d:a4:1a:4c:62:c7:fe:ca:e8:b4:81:21:0a:
         3b:be:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:44 2025 by rpki-client