Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa
File:                     48d069ba-5ef8-3f64-a653-d806fe8fd001.roa (raw, json)
Hash identifier:          UIGmtw/oYJCb2qbmffjJxeOJGM/9YGXwgc3leCyF98E=
Subject key identifier:   D1:F0:B1:0B:AC:A1:76:04:1E:D7:84:1A:67:BD:FE:5C:9A:F4:2E:5D
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584AAB265BEDA3917A569CD26080
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     32329
IP address blocks:        207.53.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5b:ed:a3:91:7a:56:9c:d2:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=8a2340f8-13aa-45d2-bbfb-0adea672ff44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:19:d2:e8:e0:a9:ac:18:6f:c4:d1:84:c8:
                    64:15:fe:b7:9b:24:cb:e6:e0:56:a9:93:34:e6:21:
                    b4:71:8e:4d:6b:db:de:f0:a9:be:7a:37:a6:cf:b6:
                    7f:2b:f2:d5:77:1b:0e:e0:3f:f4:f4:77:45:05:fe:
                    34:47:8b:3b:50:f5:74:e8:9b:27:8d:47:56:72:5e:
                    c4:87:93:dd:a9:27:ec:70:db:b0:01:90:54:64:9b:
                    e3:35:7e:98:0e:90:98:00:bc:5d:75:1b:be:a5:8e:
                    a5:d2:dc:84:71:2e:0b:d1:3c:6e:bf:d6:95:25:d1:
                    8e:f0:7a:e8:b3:67:96:54:5c:b5:c4:55:79:65:26:
                    ac:23:50:16:79:7c:e9:aa:df:a0:2c:43:6a:d9:3f:
                    1d:07:96:e3:16:04:9a:b4:12:20:94:f7:b9:ae:81:
                    0f:4b:86:e7:4e:6e:a0:2f:d4:41:3b:56:d3:39:d0:
                    fb:4c:28:f6:ef:d2:95:30:e8:6f:88:97:5c:87:f2:
                    86:10:d1:33:80:42:5b:bd:0c:4a:32:bf:af:b6:7b:
                    8e:37:be:9f:29:73:8a:2c:a4:5f:18:2b:7f:7f:98:
                    10:c2:a3:86:ce:c8:dd:63:14:bf:fa:99:db:52:92:
                    7a:4d:46:f1:47:aa:32:8a:cc:87:ac:e9:1f:33:25:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F0:B1:0B:AC:A1:76:04:1E:D7:84:1A:67:BD:FE:5C:9A:F4:2E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.53.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:71:9c:19:e3:7e:69:41:48:6d:dd:a8:c9:11:6c:54:75:16:
         19:4a:46:9e:6a:c0:40:01:31:95:4b:3b:6b:f4:3c:b0:ec:1d:
         e5:86:8e:cf:b7:0a:c6:3f:a7:e9:7b:76:2b:0b:9d:a4:95:20:
         b7:36:ea:0d:73:6e:7b:b3:95:bd:64:59:b0:f0:8e:18:95:58:
         08:58:27:b2:86:14:5e:55:48:74:9e:4d:79:db:b8:0b:84:8e:
         de:b6:14:20:ba:1f:bc:f2:f0:b9:2c:1c:2a:af:6a:67:35:89:
         09:69:23:39:85:1e:40:26:19:c9:a2:1b:e6:3a:d4:96:d3:73:
         02:47:d6:70:04:4c:5d:5d:a0:ad:54:1c:67:4e:24:24:6a:bf:
         53:f1:f8:79:4d:26:e7:49:c3:84:a8:9e:f1:14:85:9a:f8:e1:
         1c:c2:ab:79:43:ab:eb:64:45:f7:da:35:5b:69:92:21:30:34:
         df:88:95:a3:17:29:02:9f:cd:ee:ea:21:eb:67:b1:81:2d:c8:
         4c:3a:5d:fa:0a:17:ce:f4:35:c1:d4:b5:72:74:4d:e6:c7:41:
         ed:64:66:27:d4:04:cd:f5:f9:51:ea:b9:51:02:ca:64:c8:b0:
         c4:03:0a:f6:2b:d1:7e:b3:c4:32:a4:8c:8b:66:37:49:94:2a:
         f3:5f:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:47 2025 by rpki-client