Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eaae303c-90ea-3328-a9a6-49b6e4bf9cdb.roa
File:                     eaae303c-90ea-3328-a9a6-49b6e4bf9cdb.roa (raw, json)
Hash identifier:          QPZI70cBv73h7juBDODXqvDqVQArQUqx/bLC8zuveRw=
Subject key identifier:   D9:79:F2:BF:A2:94:3C:07:E6:2B:7A:00:07:B1:A9:D2:A9:AC:25:E2
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584A9900C6D838EDC6C071D68680
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eaae303c-90ea-3328-a9a6-49b6e4bf9cdb.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     5645
IP address blocks:        24.52.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c6:d8:38:ed:c6:c0:71:d6:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=dfae1b39-a672-49b7-8449-2294325d9020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:a9:d2:7d:c6:b0:9c:25:09:5e:c9:61:f6:
                    e2:35:3f:fd:e8:a9:63:12:47:00:df:87:a0:aa:30:
                    73:2d:b1:69:79:d4:43:50:0d:8b:bf:ba:f2:77:54:
                    a2:8c:7a:df:29:f4:87:74:5d:91:1d:86:13:6b:2f:
                    08:2f:08:9b:b1:f3:4d:85:6c:70:ad:2a:a5:9a:10:
                    b3:0c:d9:4b:67:22:68:bc:7a:b9:b9:b5:ba:12:4f:
                    55:ac:ed:83:e0:9e:e6:9b:d7:0e:f1:4a:91:6d:0a:
                    49:2f:38:23:2f:b2:c2:76:b0:00:b2:dc:1e:c0:5b:
                    8e:90:c6:32:1c:dc:46:c8:d1:29:8b:6d:f2:42:56:
                    85:5c:83:dd:81:2c:62:1f:4c:c3:50:e5:e6:f7:cb:
                    16:3f:03:f8:03:c4:bf:f7:bf:2b:a6:88:be:1a:dc:
                    2e:6a:c5:60:9b:c4:b8:bb:b0:0e:9e:71:5a:c1:eb:
                    f7:26:c1:2b:5f:85:7b:1a:1e:4b:a7:d9:8a:fc:0b:
                    34:3e:f1:24:50:ff:cb:e5:0f:3b:8c:fa:1f:01:41:
                    3f:d4:72:64:eb:f6:90:a7:e3:d7:89:2c:a8:dd:a3:
                    84:4d:6b:e7:17:43:cd:0e:1f:52:d6:fd:32:03:f7:
                    63:66:81:53:13:bb:2f:45:c2:7c:d4:5e:2f:92:b2:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:79:F2:BF:A2:94:3C:07:E6:2B:7A:00:07:B1:A9:D2:A9:AC:25:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/eaae303c-90ea-3328-a9a6-49b6e4bf9cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:83:07:d5:e9:0a:f9:a8:15:93:e8:a2:e7:5d:35:85:a9:43:
         22:3e:9d:6b:9c:ca:17:22:18:29:0e:51:0e:b8:6f:6f:41:c9:
         15:fd:b2:67:d8:48:09:73:8b:30:d0:86:8e:2a:60:0a:19:d3:
         5c:5d:c1:c5:b2:21:b9:34:85:82:68:99:34:63:fa:4b:cd:5a:
         ac:d7:4f:77:88:5c:98:26:d2:e1:ee:50:d2:d5:e4:9a:d7:3b:
         c3:f9:76:91:63:f8:ea:f8:01:5d:0b:41:40:7b:76:a2:fd:2c:
         e9:bb:84:0c:09:a2:28:ef:90:3f:eb:9b:f4:ad:8c:55:b6:87:
         0d:8b:0e:a3:eb:7a:c4:88:cf:7b:44:54:e9:77:50:a5:b2:58:
         55:a0:b9:fa:66:c1:7e:38:f1:dc:a1:35:95:58:5a:f2:ae:e9:
         2b:c3:01:86:57:03:9e:58:7b:c5:9d:9a:f6:c1:c2:23:7e:86:
         10:31:b6:17:b5:2c:05:f8:1b:01:92:16:16:a7:a7:57:85:2a:
         21:4f:aa:a7:19:58:6c:94:23:cf:75:f0:3f:a1:08:36:1e:52:
         6b:49:c0:7d:ea:be:87:b8:60:e9:94:b5:52:e3:eb:74:59:48:
         a4:a8:2b:82:f9:a3:ca:de:9c:03:0b:cf:ef:92:d1:31:86:df:
         e9:fd:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:12:30 2025 by rpki-client