Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/732dce7c-2697-342a-9dbe-673ec0697c4b.roa
File:                     732dce7c-2697-342a-9dbe-673ec0697c4b.roa (raw, json)
Hash identifier:          UwtAWfoT//nmJ8bo8Jb1x4CR8/WEpKmIYVL4r/MnvUE=
Subject key identifier:   F8:35:E2:21:68:A6:19:B3:FB:77:DD:76:11:79:CE:00:89:4B:57:82
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584A6DBB478D1834E94D22DFE500
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/732dce7c-2697-342a-9dbe-673ec0697c4b.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        216.52.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:47:8d:18:34:e9:4d:22:df:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=4f46ed3c-8735-4d34-9afb-5327d396191f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:eb:c0:0b:34:5e:b1:1d:7b:06:96:29:7d:
                    44:de:04:01:6a:c5:8c:b8:c2:1f:7c:4f:59:43:d6:
                    5c:3b:b2:48:b8:c3:5c:5f:9c:f6:ff:c3:79:97:ef:
                    05:04:ca:c5:0c:9a:92:1d:66:19:b2:44:57:25:eb:
                    76:3c:51:25:4a:4c:94:d5:d5:59:e0:89:f9:c8:d9:
                    b4:e8:a0:7a:0e:15:4c:60:23:34:01:49:4f:c8:34:
                    27:8b:39:a9:7b:e7:c4:f7:e3:83:df:59:21:d3:c4:
                    dd:de:2d:2c:98:59:2c:af:fa:bc:48:43:70:8e:b6:
                    88:1d:a5:a5:3a:b4:8f:c9:92:f3:01:fe:0c:b7:a7:
                    38:08:36:65:3b:dd:e0:c8:a8:41:05:38:3c:00:35:
                    0d:cb:2b:3c:b4:44:74:1e:ac:c7:8b:88:fb:9d:79:
                    c1:8c:0b:f2:df:19:47:4d:a2:c1:5c:3d:ad:df:ee:
                    fd:36:4a:9a:c6:62:7d:45:31:05:c3:ae:9f:6b:24:
                    be:d7:ba:55:c9:4e:2d:c9:8f:34:94:2c:c5:ff:5a:
                    68:9f:7f:5c:61:e5:c8:dd:8e:2d:84:d4:2b:f8:ef:
                    a4:61:93:ac:80:e5:8a:e6:1c:fb:cb:1e:1c:74:1d:
                    0f:10:06:31:05:2f:f7:11:69:c7:50:9d:25:dd:5d:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:35:E2:21:68:A6:19:B3:FB:77:DD:76:11:79:CE:00:89:4B:57:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/732dce7c-2697-342a-9dbe-673ec0697c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d2:5c:01:ec:e6:94:dd:c8:1a:a5:e0:b8:51:da:7c:9c:73:
         ee:1b:2e:df:84:3b:df:09:89:7e:5d:ca:66:84:d0:9c:01:61:
         27:43:74:82:82:3c:88:f6:f4:c6:a0:c5:92:f6:ae:61:bc:3a:
         65:14:6f:8c:58:a8:12:a8:dd:71:aa:37:70:f2:93:91:ee:0c:
         87:ab:85:07:f7:0f:d2:ab:e1:6c:11:2c:39:fa:a9:fe:be:9b:
         4f:1a:d5:5c:89:21:a5:7e:11:87:47:d6:75:20:04:8c:f0:3c:
         ec:ec:86:da:3a:23:35:f1:f5:2c:a8:a7:d5:fc:65:9d:de:f6:
         6b:06:92:cd:e1:78:01:12:42:d0:0c:50:55:99:ea:08:b1:3c:
         00:f9:f8:32:d7:da:35:b5:6a:bf:49:e0:d4:7e:19:98:96:fc:
         36:64:0e:1e:ec:b7:00:e6:58:76:77:f0:20:dc:18:c7:28:13:
         9d:79:9d:50:5b:22:2a:6e:f1:95:d1:cb:8a:48:bd:84:a9:d2:
         15:b6:09:58:1f:fb:cf:5d:49:9b:91:0a:aa:af:c7:f1:03:8c:
         50:e4:37:c0:d2:f0:c2:39:a0:0c:03:a4:7b:8c:a0:60:76:dd:
         13:6f:e2:8b:5d:26:f7:92:c0:33:84:a5:f4:81:96:49:c3:32:
         6f:36:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 13:53:23 2025 by rpki-client