Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa
File:                     bdd949a7-e0e1-3b8e-81bc-94238a595155.roa (raw, json)
Hash identifier:          VweEHm2V+h9rL7gWMywtp7aDhriquh1/gbZltkOP8ao=
Subject key identifier:   DA:E7:25:37:85:48:BE:13:4A:15:27:F9:FB:EE:26:52:25:E1:0B:26
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F4328584AA42B7F1DB398B244211C12C0
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        67.226.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7f:1d:b3:98:b2:44:21:1c:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=5bc9f003-d5e3-439f-bd31-0d3408a81649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:59:e3:9b:a7:38:7e:5c:e1:ab:98:45:fc:
                    49:e1:5e:6c:9b:64:e5:8f:6d:91:fc:a8:e9:c2:fa:
                    ff:c4:f5:b9:0f:d5:2b:68:ad:1f:6f:a6:02:aa:a6:
                    5c:19:8e:b2:aa:62:cb:8d:7e:01:9a:3c:e7:51:2c:
                    36:47:90:d9:a8:74:b8:23:f5:11:50:09:4d:c3:a6:
                    a8:34:4e:0a:fc:e6:fb:25:47:d7:24:61:46:c9:d3:
                    c7:0e:e1:1b:1f:2d:f4:5c:22:da:f5:7f:dc:54:51:
                    7b:3b:08:73:7c:fa:ef:22:fa:20:82:c6:10:1f:ab:
                    bd:2d:c1:d3:20:20:d1:6c:76:70:b1:09:50:61:cd:
                    2a:12:04:a1:a1:65:f4:b4:5a:44:76:a3:2b:52:6f:
                    c5:72:f9:d2:f9:62:0e:aa:02:f2:39:fa:fb:41:4e:
                    69:5a:37:83:b5:32:a3:87:60:52:52:70:9c:e1:42:
                    e6:08:44:cf:79:6f:b5:f8:65:27:1d:c4:95:42:10:
                    c3:85:f7:9e:2b:c3:4e:b5:c2:39:d6:b8:81:9b:f5:
                    a3:64:5f:48:5d:d6:58:e8:dd:46:4e:79:3d:5f:c2:
                    bd:81:5f:cc:11:c4:cc:a1:ec:c0:17:5c:ac:92:22:
                    ed:d6:24:29:0c:ca:df:72:b2:86:98:4f:8d:39:61:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:25:37:85:48:BE:13:4A:15:27:F9:FB:EE:26:52:25:E1:0B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:30:46:18:8e:0d:cc:25:35:16:18:d0:da:d9:18:ff:0e:
         91:c8:de:af:de:0d:eb:4f:8b:94:2e:3f:4f:61:7b:4f:f3:ed:
         6c:69:b2:cb:57:cd:5f:6c:48:3e:0e:6b:a2:bc:06:7f:8b:39:
         50:24:9f:c1:5e:f8:96:f7:5c:a6:24:08:77:19:13:a4:f8:3e:
         dd:7b:19:90:ff:47:f4:20:cf:0e:31:ff:ff:9d:3f:52:cc:e2:
         d0:80:8f:e1:9b:03:b2:2a:5c:d1:ad:b7:a1:8d:94:a8:8a:25:
         44:71:46:98:77:73:2e:35:70:ab:dd:d8:a4:26:c3:2e:8f:76:
         98:f7:5b:f2:83:4a:fb:13:8b:e2:18:6b:42:5c:61:79:16:ff:
         63:73:42:25:8c:f1:76:55:c3:87:38:dd:22:12:66:1d:0d:0f:
         ba:ab:0b:33:86:a7:46:13:d1:30:32:86:a9:79:fd:c3:0c:d5:
         b8:6e:8b:27:1f:8d:31:5b:7d:c2:0b:ab:b3:b7:74:9f:24:21:
         99:27:7a:d2:02:fa:b8:b6:b2:98:fa:da:bd:52:0c:43:c7:97:
         72:28:d7:55:09:ab:28:1b:eb:d0:d1:49:9c:e3:22:58:ab:38:
         d4:28:0a:b0:d7:d6:77:9b:39:71:ae:d5:70:51:23:18:da:1c:
         84:bd:f6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:57 2025 by rpki-client