Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a4314edb-6d37-3b27-907c-cb2b46b12a66.roa
File:                     a4314edb-6d37-3b27-907c-cb2b46b12a66.roa (raw, json)
Hash identifier:          69XSh5y7jWTjY61k/xG57XxcH2OeTFJxfZo4ED2npus=
Subject key identifier:   8B:F2:46:9D:D0:EF:83:3B:20:C5:9D:C8:A1:B4:AC:FB:FE:E3:80:53
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A8410F3FD6CF923CC848C1080
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a4314edb-6d37-3b27-907c-cb2b46b12a66.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        170.114.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f3:fd:6c:f9:23:cc:84:8c:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=292e3889-b0c7-4e30-bfb9-cc73b36c97f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:e3:0a:04:dc:5d:78:92:67:1e:08:63:95:
                    00:fc:14:8d:9b:2b:0a:10:9f:24:33:96:0b:c3:b1:
                    e5:d7:bf:85:75:34:10:e9:b9:03:aa:ff:96:49:6a:
                    91:34:2d:f5:c4:99:0a:8c:00:40:6e:bd:01:2a:92:
                    6a:f3:34:48:4f:a7:32:29:45:47:d5:e0:d6:2a:5a:
                    12:74:7c:b1:a8:d1:3c:30:a8:e4:41:24:02:7b:0a:
                    bb:c9:de:61:c1:c9:bd:c6:c7:44:6a:c1:5e:9a:42:
                    51:d0:9c:ce:f2:e7:57:7b:10:19:aa:4c:b9:d8:b3:
                    c5:37:db:bb:84:59:01:1f:d3:8d:62:71:59:16:09:
                    67:c2:57:e9:9f:2d:d7:da:6b:36:fd:1c:21:8a:6b:
                    24:fe:e3:53:54:67:28:20:7e:05:20:e1:1b:53:ad:
                    00:6a:83:4b:f3:15:f3:3d:45:2f:03:a5:19:2a:85:
                    b4:0c:dc:65:81:4e:fb:d0:e9:9b:21:84:86:12:b8:
                    de:76:ae:c0:66:7d:3f:74:c3:f0:7f:e7:a6:29:b8:
                    85:13:4e:04:35:f8:16:5b:d7:00:e8:a7:bc:ae:9c:
                    83:df:58:1f:22:72:d8:d1:e3:82:b0:eb:fd:8d:42:
                    c4:12:9c:fe:ea:12:ac:81:f8:52:af:23:2c:3c:a1:
                    89:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F2:46:9D:D0:EF:83:3B:20:C5:9D:C8:A1:B4:AC:FB:FE:E3:80:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a4314edb-6d37-3b27-907c-cb2b46b12a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f5:38:89:57:17:2e:71:3d:5a:a1:96:45:67:7a:d5:95:62:
         aa:8a:b8:32:fd:76:9b:88:99:52:aa:df:ae:7a:8f:a8:a6:a5:
         c9:68:cd:4f:30:c6:c2:c3:8e:ad:a1:38:31:fb:0b:16:74:b3:
         25:f3:93:93:bc:06:a0:56:69:9c:85:f9:c8:05:9f:8d:31:4c:
         d1:d0:97:5d:7c:0f:94:b2:2f:3d:8b:b2:a7:66:14:31:8d:a4:
         90:c2:20:59:62:a9:ae:d4:f3:86:4e:aa:3a:3a:4b:1c:fe:21:
         10:02:42:1a:dc:89:34:e5:97:b8:06:4d:c6:d2:1f:d1:55:af:
         95:0a:d9:d2:41:93:f7:da:7d:91:83:d7:dc:62:2d:99:f1:7d:
         d2:fe:07:bb:e7:35:b0:6c:7b:48:21:8b:b5:2e:72:36:5b:2e:
         99:91:c7:d4:94:9a:e0:72:ab:63:d1:11:df:ab:b9:a8:e2:67:
         e9:88:03:50:92:3a:0d:36:f9:74:a6:9c:ac:3d:36:af:78:c2:
         d8:fd:1f:85:8b:53:93:0b:62:c4:de:40:18:26:c7:d0:63:f7:
         92:84:ea:3c:08:8a:6b:ea:47:23:40:7a:84:e9:7f:3c:59:a5:
         ab:33:b4:b7:c9:d1:43:aa:24:b0:27:9d:df:b6:45:a7:1c:15:
         18:5d:d7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:34 2025 by rpki-client