Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f40a3ad-e839-3615-92c5-0a5b36043f37.roa
File:                     7f40a3ad-e839-3615-92c5-0a5b36043f37.roa (raw, json)
Hash identifier:          NHqQrVhPwovs+9PZ/s/dD2gEd1FTmz2d03px11JMdxo=
Subject key identifier:   74:6F:EC:E2:E6:02:CB:33:E7:EB:32:29:99:2B:79:82:0D:22:A3:D4
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584AF5214FAB035807A35FB00080
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f40a3ad-e839-3615-92c5-0a5b36043f37.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     58182
IP address blocks:        216.52.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:4f:ab:03:58:07:a3:5f:b0:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=be4d61a4-bf4c-4474-9247-0605daceb867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:1a:5b:ed:e5:99:f1:59:f3:6b:59:87:23:
                    91:97:62:85:a4:25:03:b7:cf:fd:84:55:4e:54:7b:
                    c1:b5:67:1e:2f:b7:11:a2:82:83:68:5e:6e:97:22:
                    f9:13:bb:73:67:10:b3:fc:ae:e2:4b:bf:c3:c9:c1:
                    81:ad:49:18:23:cb:2f:25:50:fa:c1:ee:32:2d:6d:
                    b3:6d:49:45:6c:06:11:29:00:ed:a1:9c:3d:b1:88:
                    d1:e9:7b:b5:92:40:61:e7:93:14:a4:9c:31:17:41:
                    e2:fe:42:58:40:36:01:c7:b1:cf:ff:3e:d9:9a:2e:
                    f6:48:32:62:ae:55:d4:0e:ae:0a:d8:f4:a2:8f:f0:
                    f8:fd:93:75:23:e4:ec:10:34:7d:24:7d:7a:32:c9:
                    29:8e:13:c6:fb:62:45:bd:c8:5f:66:af:ba:bd:d2:
                    bd:83:11:b1:fe:39:75:73:eb:52:6b:6c:20:7d:5c:
                    d5:af:71:72:b7:94:95:15:8e:6c:f5:91:9a:b8:03:
                    59:5c:43:bd:f9:4a:5a:dd:eb:d5:ec:4c:e2:e1:a7:
                    90:e7:89:e4:40:2a:a8:42:68:61:19:22:fe:99:ba:
                    ca:29:0f:26:9a:35:eb:c6:36:c2:c0:e9:03:3a:0e:
                    f3:83:c2:0c:b7:6c:75:b7:01:d0:a8:69:12:20:1c:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6F:EC:E2:E6:02:CB:33:E7:EB:32:29:99:2B:79:82:0D:22:A3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f40a3ad-e839-3615-92c5-0a5b36043f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:da:db:41:64:b2:d8:a1:4e:d3:48:29:38:7a:c1:87:33:5c:
         6a:d6:21:2f:86:31:58:99:f0:8d:dd:55:f5:59:d0:b9:f7:e9:
         5c:d3:0a:5a:86:2c:0a:94:db:3e:a9:97:fd:fe:b1:df:b6:65:
         02:cf:af:78:b9:7a:db:9b:3c:f3:97:ef:cb:36:db:48:41:24:
         5f:d2:d7:fb:a5:60:7e:28:f4:2c:cb:19:56:df:58:fc:03:34:
         ef:09:94:d4:ae:8c:de:fe:4f:c4:5a:cf:6b:a5:f9:9d:13:35:
         71:7c:70:38:d8:c9:92:0a:82:11:73:06:60:63:95:d8:f6:9f:
         c2:c8:03:20:bc:e8:63:ba:01:06:2e:73:1e:15:3e:01:c8:a5:
         0e:3c:d4:43:ad:c8:7e:56:9c:15:86:97:ef:8d:cb:3d:19:0d:
         4a:8d:d8:c0:11:3d:20:dd:b6:89:6b:8f:66:5f:09:8a:51:57:
         34:be:94:af:68:ba:07:1c:8d:fc:26:d8:a8:bd:da:ee:01:0f:
         32:b9:dc:a6:2d:6e:10:ce:b0:f7:b5:8d:3f:5c:9d:d8:b0:ff:
         da:fe:be:36:4e:80:df:67:5e:b0:23:b7:3c:b8:83:0a:6b:aa:
         12:98:5b:e0:16:5f:6a:ce:9f:62:ca:81:8d:c7:17:18:5c:26:
         29:35:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:31:01 2025 by rpki-client