Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa
File:                     9a747c3b-3fd9-3e48-a4c5-c02174460043.roa (raw, json)
Hash identifier:          M1qR0qyVYNEyxC4WhIeLGNlO0bhqS0YYPZzAj8fq5WA=
Subject key identifier:   74:70:1E:3A:4C:32:C0:E6:E4:78:98:D5:88:43:3F:35:40:6D:96:28
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A96368A05B5F9B2ADA9BC7E40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     31898
IP address blocks:        67.217.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8a:05:b5:f9:b2:ad:a9:bc:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=4238b8fc-f87e-4a81-9fc7-d73f48e9dd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b9:e5:7c:eb:31:57:af:7d:83:cb:ae:f2:b9:
                    6d:06:99:23:4b:62:ea:ed:eb:00:b7:64:48:f4:d5:
                    83:d5:c7:eb:b5:60:7d:dd:f5:7a:93:06:96:5e:4c:
                    3e:dd:6d:d2:73:92:1d:4c:1d:41:d7:a5:8d:32:01:
                    e0:6d:bd:60:f0:82:cb:0f:6b:d0:e8:e3:12:1c:14:
                    ac:98:92:22:9c:d3:be:7b:8a:ce:72:b7:18:8b:de:
                    5f:a1:6b:00:1f:32:e2:dd:84:94:5e:3e:bf:57:be:
                    0b:bd:86:fd:7d:80:61:f6:3c:75:d1:84:c1:75:e6:
                    76:e5:7b:1e:4a:cf:51:39:99:31:28:7a:eb:cf:3b:
                    e2:d1:c8:4c:b2:62:0c:74:08:6d:68:96:84:ab:40:
                    03:6f:c9:5c:90:f2:fd:3d:49:36:53:e7:d2:ab:36:
                    fe:13:19:6d:72:15:86:a7:61:94:eb:2a:66:fa:f1:
                    b4:33:2f:ad:4e:47:1f:eb:8f:e1:ba:39:cd:37:79:
                    a3:7e:35:11:d9:f0:46:85:5e:5b:a8:43:b6:45:8a:
                    c3:e3:12:55:a2:15:f1:e0:2c:68:dc:9f:52:2c:40:
                    af:4d:ae:24:f9:43:44:7d:a4:4f:00:e8:09:29:55:
                    67:18:32:0c:1b:d3:5c:03:0b:af:47:2d:3c:f4:60:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:70:1E:3A:4C:32:C0:E6:E4:78:98:D5:88:43:3F:35:40:6D:96:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:8c:ff:f3:79:ed:4e:86:fe:01:60:d6:db:4f:7d:c8:6d:
         7d:d1:99:28:cb:20:32:40:63:48:4f:80:42:8b:0a:b5:61:15:
         63:5b:ca:f6:fc:4e:fa:32:39:74:21:10:86:92:9e:ce:c0:56:
         ee:1b:aa:d3:ac:fc:54:c4:ad:10:56:a7:6d:d6:2d:c0:8a:ee:
         74:c9:1d:a4:2a:57:bf:63:6b:47:c6:fd:cb:e2:11:e7:23:0a:
         9f:cf:98:28:00:9c:6a:bc:75:75:02:75:88:92:99:41:61:86:
         8e:f9:26:70:c9:9b:14:0f:fa:55:13:49:3e:8c:55:f8:c3:0c:
         af:c8:69:0c:b2:0f:00:6a:00:f8:54:f7:a6:e1:38:cd:53:f4:
         ae:17:fc:e0:5f:25:0d:29:f9:a0:34:9e:ac:14:fb:fd:f5:d8:
         45:fe:a6:ff:8a:ed:0b:07:b7:d4:96:09:09:08:c7:a5:a8:39:
         66:a1:9a:ad:c9:bd:bf:b9:1a:15:75:29:4e:02:98:b9:2a:c2:
         75:1e:76:24:2f:9f:f4:b3:60:75:ef:2b:a4:e0:c1:12:7f:f9:
         0e:9e:8f:0d:8a:71:a2:42:0a:c1:7c:e8:40:20:5a:f1:39:b1:
         72:97:3f:8a:67:64:6b:7c:0d:80:89:78:af:df:a5:2e:bd:7b:
         fc:8b:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:50 2025 by rpki-client