Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa
File:                     f182be9d-b8f9-3157-a816-20982907b3f7.roa (raw, json)
Hash identifier:          QoJVt8kHqdG408BrmnJ80THF2gy/Yt1ySMwSvP/jGco=
Subject key identifier:   95:1E:65:BD:B0:F0:EA:8B:BB:82:C9:A0:D9:5B:09:C6:24:03:88:82
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584A119AB0F621C51D131AB27680
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     13213
IP address blocks:        67.212.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b0:f6:21:c5:1d:13:1a:b2:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=3041cf9a-a9dd-47b9-a7d3-84d927a8b17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3b:cf:01:38:5c:86:9b:59:b5:98:90:cc:ad:
                    3f:46:71:9a:4e:36:72:77:0b:07:19:8b:be:40:dc:
                    52:2d:2e:1b:cb:1a:72:89:49:7b:7d:7c:9f:10:f7:
                    64:9b:a1:ce:d5:17:96:98:ae:a1:e6:60:ca:46:34:
                    0a:1b:c5:a7:0d:d0:69:c4:9a:0c:9e:4a:bf:ff:83:
                    ee:9f:8d:dc:ab:39:c0:4d:e2:6b:84:70:77:fd:8b:
                    c9:02:50:d7:69:fb:68:8c:73:1b:47:d1:2d:95:08:
                    fb:c6:7b:ba:ae:f3:ee:4f:a2:87:a5:00:cd:5c:76:
                    24:af:7c:15:8b:48:1f:c9:fb:b2:78:f2:5d:4f:c0:
                    51:40:30:ab:34:a5:4c:61:78:df:b5:4e:f3:59:48:
                    5a:33:ad:4f:91:2a:ed:1f:d2:59:0f:fd:20:5b:5b:
                    6b:9b:bd:fd:13:8e:f5:12:0e:f7:c7:73:b9:49:4e:
                    57:c3:9c:e6:87:a8:73:33:a2:a4:87:02:22:73:b0:
                    c7:ae:76:2d:e9:b1:e2:93:76:84:76:4d:f2:23:02:
                    5c:f3:37:16:15:cf:51:31:c1:ae:5e:72:63:60:de:
                    c6:a2:e4:f7:17:08:6a:a6:3c:0c:cf:c4:3e:20:70:
                    14:3f:fd:bc:bc:47:69:16:26:36:66:35:aa:2c:fa:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1E:65:BD:B0:F0:EA:8B:BB:82:C9:A0:D9:5B:09:C6:24:03:88:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a5:5a:9e:ba:6f:30:c9:c5:eb:56:7f:30:55:7e:13:7d:b3:
         3c:bc:ba:07:31:92:8a:2d:3f:c5:a9:e4:6e:a7:a1:2d:21:a9:
         48:35:b7:68:c5:42:b7:ab:63:f3:a4:60:6e:c4:58:72:46:4c:
         ae:9b:4f:e9:c3:9c:80:4b:fb:b6:c8:69:b5:32:0b:65:7f:65:
         76:f3:32:54:1f:38:ae:c6:85:a8:a2:f2:45:f8:63:36:9d:9a:
         6a:2b:39:ff:05:61:46:12:07:7e:0d:8b:97:6b:2e:4d:53:e5:
         db:80:87:be:49:2f:62:05:5b:be:b1:e5:6c:0a:b2:37:39:78:
         ac:d8:d6:b6:16:9f:6c:9c:74:7c:7a:7f:45:e2:c3:52:e4:fc:
         2b:f0:b7:dc:b1:0a:58:7a:b6:6c:73:23:b1:86:3b:b5:8a:ca:
         43:51:89:9f:9d:f6:ef:97:0e:ab:6a:02:7a:30:dd:0e:a8:bf:
         ad:f7:e5:17:a9:4a:e5:14:c5:61:ec:24:64:3f:ef:e0:92:46:
         56:31:d5:54:1e:4d:b4:c6:17:e1:87:06:de:fb:bd:28:05:8c:
         8c:00:2f:ab:e9:89:3b:d2:8b:c5:36:b1:35:ad:23:75:9c:8c:
         75:99:2a:1d:3b:c2:a3:5f:bb:d7:0d:a4:01:d8:ea:de:e4:f0:
         37:b7:aa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:29:42 2025 by rpki-client