Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa
File:                     32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa (raw, json)
Hash identifier:          nJEbrHmjyQQYEhDkPNgDtC/E2p2QXgPbeTUElYyGbYM=
Subject key identifier:   EA:B2:9A:23:17:DA:AE:0A:06:B8:76:33:42:B3:9B:2E:48:FD:87:7D
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584A71EB67B9562E314CFF0B7580
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     14114
IP address blocks:        157.133.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:67:b9:56:2e:31:4c:ff:0b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=6faa329e-8b77-4966-82ba-5f0df566f8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:de:c2:5b:b2:d7:7e:e5:d1:8e:86:24:27:
                    d5:b0:ee:f0:01:9e:38:63:5c:1d:9f:70:c2:43:44:
                    bb:90:f9:c5:1e:8e:1d:05:a5:7e:8e:f7:fb:16:12:
                    15:22:be:02:61:8d:2c:4b:13:cb:1d:8d:07:60:bc:
                    8c:08:d6:e1:8b:85:81:1d:d6:7f:e6:eb:c9:9f:a3:
                    c3:c1:c3:31:5c:57:17:67:83:da:0c:17:5b:91:5a:
                    07:fc:63:f0:30:56:6c:e4:50:c6:a8:4d:6b:10:25:
                    a3:c6:37:3e:87:c7:c9:88:4f:20:06:ba:66:c2:f4:
                    91:e6:58:d5:c7:d3:bc:8e:fe:1d:b1:48:e6:e8:42:
                    43:50:16:89:3b:3d:a1:70:ff:5e:3d:93:6f:3b:87:
                    a6:7c:18:42:45:3e:94:ca:a0:93:46:c0:4c:35:76:
                    e6:f7:7c:d8:e7:cd:31:07:64:c6:1f:8b:ce:ed:71:
                    34:d5:39:60:7f:38:26:a4:54:7c:10:63:9e:5b:8e:
                    f3:90:ed:4b:9f:9c:d2:26:0f:59:11:8a:23:04:de:
                    09:37:67:6f:3b:45:1d:a0:73:a1:0e:ad:f8:22:76:
                    c9:a6:bf:b0:0b:4b:b7:16:3e:1c:3e:4f:9d:8d:b3:
                    b1:b6:75:90:3b:61:ee:1d:80:09:8b:4d:91:f9:47:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:9A:23:17:DA:AE:0A:06:B8:76:33:42:B3:9B:2E:48:FD:87:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:42:88:2b:23:8e:1f:f8:52:dd:4b:2d:21:0a:78:0b:ae:e7:
         20:11:0d:ce:97:f5:4b:53:e3:0d:b4:84:d3:53:d1:90:2b:d8:
         d0:f6:e6:35:a6:44:b9:54:bd:36:0e:33:09:c7:17:5d:06:88:
         43:55:53:8b:b4:7d:42:94:0a:d9:29:0f:0d:bc:45:ba:59:fe:
         85:32:e3:9c:5b:bc:00:01:f0:75:34:82:9a:0d:18:40:95:16:
         84:59:60:f3:df:8a:41:f3:61:d6:20:c1:98:a5:49:c7:92:d0:
         a5:ef:44:c4:0f:8b:8e:56:2c:46:cc:27:66:79:de:49:cc:f8:
         b9:14:27:5e:e3:ed:4e:8f:eb:eb:88:98:bd:1a:72:f5:ab:23:
         6e:da:a8:56:84:cd:7d:12:56:b1:30:f9:9e:c8:01:4c:d2:da:
         c3:f0:b6:44:f6:48:35:68:0f:00:40:63:4d:8a:28:9c:15:87:
         49:db:3e:4d:70:5f:a4:15:43:88:36:ad:5b:46:1c:d4:d4:b6:
         7a:28:ad:96:36:3c:0d:9a:f2:20:2d:d0:b2:7e:69:62:1b:f8:
         3a:b2:b4:00:10:1e:93:0e:d1:e5:01:97:0f:3c:bc:5b:a2:3d:
         d5:3a:40:e8:f8:48:f7:53:6e:15:1c:8a:03:ed:5b:4d:81:19:
         5d:d4:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:01:16 2025 by rpki-client