Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebe18e84-222b-3cec-96e4-661d8ca3cc20.roa
File:                     ebe18e84-222b-3cec-96e4-661d8ca3cc20.roa (raw, json)
Hash identifier:          /Qzx74vhI3LyCx1Q9V+gHmLEqRKqASbJp3Qn8ETaycg=
Subject key identifier:   F6:03:71:5A:18:80:CE:FF:C6:F6:81:97:AB:77:24:FE:E4:99:DB:58
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86C7FDC49D924CC335505B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebe18e84-222b-3cec-96e4-661d8ca3cc20.roa
Signing time:             Tue 15 Jul 2025 12:22:02 +0000
ROA not before:           Tue 15 Jul 2025 12:22:02 +0000
ROA not after:            Mon 13 Oct 2025 12:22:02 +0000
asID:                     19905
IP address blocks:        173.22.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:c7:fd:c4:9d:92:4c:c3:35:50:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 12:22:02 2025 GMT
            Not After : Oct 13 12:22:02 2025 GMT
        Subject: CN=f62a138d-f2ec-48c1-b5cc-978201f5b116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:29:67:89:50:2d:cf:11:30:2b:15:6b:99:55:
                    5a:08:6b:a1:0b:de:7f:41:5a:5c:b3:2b:1b:c1:0f:
                    33:e2:46:c7:35:75:a1:8e:87:22:bb:4a:e7:25:55:
                    f1:59:ce:dd:21:9a:29:d6:f8:f8:f9:a8:0c:f3:0a:
                    01:92:82:b5:10:5e:44:72:c6:a0:93:69:4c:f0:50:
                    84:96:cb:3e:90:1f:09:0e:94:ac:c0:cd:ac:1f:b0:
                    9e:a0:fe:8d:37:0c:1b:91:ab:13:fb:b6:dd:fc:57:
                    43:d9:2b:64:2b:0f:10:98:a0:53:23:c4:5c:e3:4e:
                    60:df:0e:77:cf:0c:c2:9a:41:f2:62:78:3e:d6:39:
                    17:31:d1:6f:7e:75:b3:cc:86:a3:25:9b:5e:b3:8e:
                    56:00:b4:37:12:7f:34:60:9c:fc:a6:71:28:e9:9d:
                    f3:c7:4f:d3:73:af:56:5f:f6:db:f4:9f:38:ba:f9:
                    02:dd:98:4b:e4:3e:d8:fb:a0:e8:6b:b5:7c:9e:a4:
                    c3:62:31:b4:8b:89:63:d3:ce:13:86:65:69:c2:f6:
                    57:3d:81:85:b4:d1:d2:31:4c:f0:00:32:8f:91:d0:
                    6e:d9:fd:ae:61:46:5f:de:13:13:a3:79:61:ed:58:
                    47:91:50:34:03:5f:7d:3b:8d:35:b4:6c:f5:50:9e:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:03:71:5A:18:80:CE:FF:C6:F6:81:97:AB:77:24:FE:E4:99:DB:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebe18e84-222b-3cec-96e4-661d8ca3cc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5d:6d:3a:d2:c5:ae:7b:a1:88:54:de:55:34:fc:34:4d:c4:
         ad:12:4c:6a:60:a7:16:f2:d4:20:7f:03:45:8f:c0:4b:48:6b:
         79:e9:52:bb:ef:4c:9d:0d:57:a3:db:8f:95:79:42:db:c2:c0:
         b5:0b:7c:9b:7c:8c:2e:10:55:99:42:9a:fb:47:0e:22:82:b7:
         fa:7b:0f:c6:14:1f:d7:44:98:cd:f2:64:f5:26:ae:c4:4f:28:
         a6:f7:eb:85:fc:da:2d:3f:81:77:4c:7f:5a:a1:70:eb:c5:ca:
         77:31:16:46:c4:75:76:dd:a1:24:30:9c:f3:02:80:e7:f8:60:
         45:93:ad:51:e8:02:97:ed:71:ef:55:31:d6:8b:40:cc:05:b3:
         c1:b4:e3:da:14:03:3a:e0:10:9a:ed:fd:b2:04:8f:ed:eb:01:
         e3:4f:80:30:76:7a:d2:f2:cc:a4:de:8a:8e:2d:1e:b4:f4:ba:
         a3:a9:bb:50:dd:a6:98:bf:3a:7f:5f:2b:4e:ae:2f:a9:bc:8f:
         02:71:07:c6:90:21:93:32:07:c0:8f:3c:d4:41:26:30:6e:f7:
         e8:00:c6:09:34:c8:d3:db:46:f8:86:76:c2:33:f5:af:a0:d0:
         14:4d:3f:fc:60:cf:7c:c2:45:22:6d:2c:a0:87:67:45:81:d4:
         01:32:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:43 2025 by rpki-client