Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0b70690d-e5f1-32d7-8555-335c57d89fb6.roa
File:                     0b70690d-e5f1-32d7-8555-335c57d89fb6.roa (raw, json)
Hash identifier:          wOJBU1ErBafoDBpgSZ2LTET4OEZxhJnnBHzX9fg9ZSc=
Subject key identifier:   58:AB:52:9B:81:F4:7B:25:A8:57:CD:F0:F9:7D:ED:63:26:04:B9:ED
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584ABBE64137505E11684E39BFE0
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0b70690d-e5f1-32d7-8555-335c57d89fb6.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     14618
IP address blocks:        160.32.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:41:37:50:5e:11:68:4e:39:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=a9b6ddad-54b8-4d20-9ec3-8a1f072922e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ac:dc:52:b4:2f:35:84:c1:1c:a1:54:fc:82:
                    78:7e:c3:e5:f8:f8:68:ce:07:0e:6d:39:6a:b0:8d:
                    13:3d:21:3e:04:7b:a1:d1:07:55:19:09:50:52:81:
                    3c:2f:db:9c:3d:05:5d:83:e4:96:c1:1e:7d:01:cd:
                    f2:59:86:51:26:d2:59:ed:89:f4:d3:1a:86:0e:74:
                    ae:bb:a3:d2:a2:c6:1f:ff:21:08:a1:c3:35:e6:96:
                    af:8e:da:fc:fe:d9:5e:95:39:43:a0:dc:62:eb:dd:
                    11:b7:ed:76:29:b8:8b:55:83:d2:36:a1:65:8c:f3:
                    21:77:90:43:9c:9b:84:a0:46:3d:84:73:01:63:31:
                    c3:62:61:9b:79:2f:c1:2c:b8:ce:07:15:f9:f5:39:
                    e4:30:4b:ca:05:04:01:26:02:6a:ef:66:c0:20:53:
                    84:3b:94:44:35:fa:a9:e9:da:cb:ed:45:2c:19:3b:
                    12:28:8e:1b:cc:71:ad:d2:09:d0:f3:be:c9:c5:9e:
                    48:c9:d3:d4:39:ef:79:60:3a:0e:c5:19:8e:ba:64:
                    26:aa:45:78:b9:a7:d9:9a:ca:47:d7:de:27:33:3a:
                    c2:7f:4e:17:2b:e8:a0:5d:99:67:d9:4f:b6:3e:81:
                    a8:df:fd:f3:1d:e4:1e:2a:68:a9:6a:1d:d7:15:ab:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AB:52:9B:81:F4:7B:25:A8:57:CD:F0:F9:7D:ED:63:26:04:B9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/0b70690d-e5f1-32d7-8555-335c57d89fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:d5:0e:86:5a:a4:43:6e:a3:95:73:bb:dc:2f:09:30:b9:82:
         67:44:3f:62:35:a9:22:f9:05:70:81:5a:fa:6e:77:0a:64:5a:
         45:e7:39:92:81:e7:9d:d3:18:ed:2b:04:e0:0a:f0:65:0f:5d:
         aa:99:39:d6:d0:80:da:f8:05:be:63:83:97:c8:43:72:6d:ec:
         9b:9c:ca:9f:c9:e2:cc:16:36:90:0c:38:d9:42:08:aa:ae:61:
         0f:16:b7:a1:16:13:09:78:99:a8:9f:54:3b:fe:a4:aa:63:85:
         f3:50:0a:09:1c:9c:8a:f2:44:02:d1:72:2c:d6:64:39:c0:78:
         11:0c:ca:73:0a:51:fd:df:56:03:5c:26:d4:a3:df:51:e7:11:
         89:49:9d:e7:7a:a2:c9:ce:35:30:8a:68:ad:a7:11:dd:c9:41:
         28:0a:71:57:f1:9a:5c:2e:b6:ed:c9:66:16:d3:5a:8a:cb:cf:
         44:5f:bb:59:3a:4f:71:89:ef:c5:45:03:59:cb:be:20:b3:59:
         73:ce:25:9f:57:ae:69:49:12:03:9c:52:46:9e:b6:31:49:6c:
         47:b6:3b:ea:d4:d5:c7:13:58:92:be:33:27:80:ae:6b:6e:91:
         5f:b6:9b:9f:ff:8c:4c:1b:c2:84:b3:3e:af:ae:db:f4:24:78:
         70:55:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:59 2025 by rpki-client