Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa
File:                     bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa (raw, json)
Hash identifier:          LrOldt0+lbrujtxJ1MNI0+zrNxH6tanOBYOXAfeIJFQ=
Subject key identifier:   D7:D3:25:66:A4:6E:39:C2:AF:7C:49:D8:3C:CE:E0:58:18:FF:D0:5B
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584AA85BA78D32419159B9677480
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     22742
IP address blocks:        67.218.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a7:8d:32:41:91:59:b9:67:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=3529c198-c818-4e96-bead-4d9a4c8f4e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:c1:e9:2b:4c:56:8b:54:db:9c:00:e4:60:
                    72:01:c9:60:0c:88:bb:a1:cb:a6:7d:da:ae:ec:2b:
                    4f:b5:a2:3a:4e:4b:0f:e5:52:cc:f8:6c:68:dc:e1:
                    6b:97:c9:0a:63:69:31:ba:36:50:5c:e6:08:3e:3b:
                    1c:c6:35:95:35:05:0c:a1:63:cf:52:84:de:27:f6:
                    05:0c:55:aa:30:7f:ba:ee:d4:25:45:b1:5f:6f:f0:
                    d2:d8:65:ed:b7:7d:25:66:12:6f:72:c8:8a:6c:a1:
                    67:ca:7a:8b:ff:b5:fa:fc:12:4e:fc:df:31:d8:23:
                    64:6e:de:aa:72:3a:d8:2d:fc:2d:a2:0a:b2:67:28:
                    80:7c:8f:ec:4c:4f:bb:45:41:23:c6:81:a6:56:54:
                    f9:1a:c0:ce:19:ea:ae:0b:73:cd:c2:ab:53:99:b0:
                    6d:97:a2:4b:80:fa:bb:70:ce:e6:a6:45:c0:8b:b1:
                    2e:f8:d3:e8:74:c5:e7:a4:a5:53:a5:0f:27:63:75:
                    95:89:96:4e:dc:62:ee:99:0c:7c:13:a6:02:74:e0:
                    46:13:19:62:84:93:c3:53:23:bf:b0:d7:f1:0a:9c:
                    7e:06:56:68:5b:8c:a4:05:1d:92:01:62:9b:1d:6b:
                    5c:03:a7:0f:d2:7b:44:b8:58:59:6e:32:b4:87:f7:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D3:25:66:A4:6E:39:C2:AF:7C:49:D8:3C:CE:E0:58:18:FF:D0:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d5:11:fc:50:13:26:d9:92:cc:c8:03:3b:51:da:62:04:98:
         c3:89:f4:bb:13:6a:4b:ac:4b:3b:fe:8f:92:43:95:b2:aa:74:
         da:8b:fd:36:bc:43:17:a7:b6:8f:0a:17:65:48:be:f2:47:2c:
         b3:ba:38:c4:e1:40:c6:14:d2:9e:ee:0d:b6:6f:ae:77:12:01:
         48:6f:51:71:0e:df:65:68:b6:b8:d1:56:f0:9b:fd:80:86:33:
         4d:50:f0:05:a2:ad:08:6c:dc:5a:4c:fc:33:92:d6:7e:b4:1d:
         c2:41:ee:de:94:eb:fe:61:0a:bb:dc:35:68:21:31:f8:d7:ae:
         0f:b5:38:18:28:08:d7:3f:9e:13:aa:5d:05:40:78:07:0a:f1:
         a2:af:0a:69:0a:d4:45:71:e7:08:4b:3c:86:52:5b:0d:e0:94:
         3f:84:b4:0f:11:10:bd:b4:c7:c2:44:15:5f:e7:3d:19:a6:ae:
         04:9b:d6:f5:02:4d:13:34:ee:4f:0b:8f:4b:36:04:68:5d:96:
         f1:2b:22:79:c3:a9:ab:e5:bf:3c:77:55:ee:30:a1:69:85:4b:
         50:9d:39:ed:63:c1:c4:3f:98:55:18:01:db:ed:86:d5:b9:14:
         a3:e8:8e:73:30:58:4f:6d:23:e0:ae:14:b2:b6:fb:ef:7d:b8:
         bd:c5:1f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:37 2025 by rpki-client