Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa
File:                     d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa (raw, json)
Hash identifier:          RiUXXp2otxybpwjWG8piMAYuIEopaZDKJNlUq0UriLM=
Subject key identifier:   79:76:B1:47:89:B2:83:9D:98:9B:F6:24:5C:77:B5:5F:0C:21:E3:78
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584B2066CF4B3ECBE402DF818780
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     21782
IP address blocks:        67.209.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:cf:4b:3e:cb:e4:02:df:81:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=af470fbc-99be-4b79-9b77-2e731508fa5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:29:dc:ac:65:b8:da:af:0c:15:51:71:b6:37:
                    c5:88:5c:7f:57:c0:7b:93:3c:9a:9a:1c:20:a7:77:
                    ec:62:ac:81:73:ac:6a:4e:bc:2c:f4:98:de:88:a1:
                    e6:a3:b9:1c:b9:b2:29:8c:2d:ab:b1:2b:98:68:48:
                    5c:9d:6b:b2:d0:c2:5f:e8:21:d2:e0:01:09:43:06:
                    d8:8c:84:10:12:64:23:2a:98:a7:76:b9:1a:b7:2b:
                    e0:c7:35:b1:e3:9e:ff:87:3f:19:89:41:d7:a2:69:
                    dc:9e:8e:80:bf:db:b3:08:02:15:53:80:94:fb:74:
                    60:1c:f6:48:0b:ab:bc:4d:33:d7:a2:78:be:fd:17:
                    a5:b9:b4:39:53:d9:cd:01:f2:e9:c9:0d:b7:59:0f:
                    12:5d:05:93:eb:bf:79:71:23:e9:5c:1e:6b:97:da:
                    37:cd:ba:44:e1:22:8d:8c:8b:1b:65:84:8d:52:09:
                    be:b4:bb:99:ac:b4:43:ed:ae:bb:9b:34:4e:b2:16:
                    11:00:37:1b:7f:f5:75:fc:db:ae:ed:ba:9f:83:2d:
                    c7:f2:01:1e:ce:8f:f4:e4:cc:90:93:f0:b6:d7:14:
                    a4:6c:1a:51:3b:1a:27:8e:53:fc:e7:51:0e:56:d8:
                    a2:96:c3:a5:79:74:22:68:c4:4b:4c:cf:82:71:9e:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:76:B1:47:89:B2:83:9D:98:9B:F6:24:5C:77:B5:5F:0C:21:E3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.209.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:62:b1:a7:c7:40:1d:e4:3f:43:d7:46:f3:db:b0:a2:cc:
         62:5b:13:fb:e2:26:05:d5:2e:20:65:20:68:84:29:2d:ab:87:
         48:2f:b7:ed:9d:a0:4e:89:c5:30:7e:6b:0d:34:14:89:8b:90:
         07:46:98:c6:b0:6b:a6:25:0d:d4:5d:ea:d5:d9:bb:02:aa:03:
         c9:9f:05:58:d2:f3:0d:51:ba:56:47:78:4c:b5:1a:a0:20:46:
         a7:88:c8:77:3b:32:a0:7b:ce:61:d5:b0:9d:a0:a0:90:33:d4:
         d3:13:6f:02:9a:e9:04:ab:9c:d5:1e:ec:41:8e:82:22:0a:45:
         47:c2:f4:d7:b0:44:83:da:32:ee:ba:5d:e3:05:34:73:29:66:
         a8:10:f7:d7:ba:1c:8b:e2:29:f6:51:5a:09:dd:30:c2:9c:71:
         10:fc:cb:52:e9:ac:da:c1:92:63:36:78:39:98:7c:f1:9f:4a:
         af:dc:68:0e:98:db:da:d6:b5:16:45:51:46:0b:72:7f:51:c1:
         75:43:0f:65:8a:73:f5:01:1c:5c:19:44:a6:6f:8d:da:3f:de:
         4c:c2:5c:46:c5:91:b2:1d:aa:34:47:ca:46:c4:c4:6f:c0:fe:
         27:45:2f:7b:ed:94:5c:5a:ba:1b:1b:a1:98:4a:66:3d:5d:fd:
         b7:b7:51:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:21:54 2025 by rpki-client