Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1ca08956-dede-3899-a28b-0e0c904cf504.roa
File:                     1ca08956-dede-3899-a28b-0e0c904cf504.roa (raw, json)
Hash identifier:          tzdbBHtev4aE/ecBrcnOtEmnW3xlHmpjmX/SLQkskbo=
Subject key identifier:   52:42:A6:97:13:9C:AC:79:71:88:B6:06:D1:2D:A4:C2:3D:8C:DB:AE
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285849D594D8996283F31B5F5673C0
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1ca08956-dede-3899-a28b-0e0c904cf504.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     20278
IP address blocks:        172.93.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d8:99:62:83:f3:1b:5f:56:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=93eda753-470a-4dd4-8130-6cef0f9af7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:02:82:f7:c1:c7:9d:c2:4a:61:e8:31:c1:
                    34:6e:ec:50:12:78:16:92:55:cc:6e:11:14:be:36:
                    81:7c:bb:09:80:ea:8c:28:9e:81:f2:bd:0a:d6:41:
                    09:0a:f7:16:16:e7:fe:04:dc:83:be:cf:f2:cb:97:
                    86:11:f1:bd:db:76:55:05:06:34:bc:34:15:3e:bb:
                    a3:76:26:bc:62:dc:82:ef:a5:66:6c:91:d9:ce:f3:
                    dd:e0:b5:3d:2b:7d:08:b8:c1:06:22:90:e4:3b:d6:
                    93:88:0a:c8:84:83:a8:7a:3f:f5:2d:e5:27:7d:72:
                    f0:40:ea:6d:37:40:11:5f:2a:7f:da:f1:92:02:94:
                    55:fc:28:ed:54:89:27:c7:27:35:35:c7:ed:07:99:
                    68:c4:0f:9f:fe:d0:2b:97:e2:f7:aa:3f:d7:7c:a3:
                    90:59:5b:b2:66:c2:13:33:46:7f:e1:9d:ce:b2:bf:
                    2d:f6:41:9d:da:6f:c3:49:46:1f:7c:d9:d5:ba:66:
                    80:8f:be:41:d5:33:00:a6:1d:7f:77:a1:7d:2d:cb:
                    f2:31:93:a9:7f:be:b6:44:3b:75:48:36:5f:7a:df:
                    02:5a:f4:a9:a4:d7:15:16:49:b3:d2:f1:a8:9b:a6:
                    17:66:9d:c3:c0:ba:2c:26:26:d1:4d:6f:9d:f0:c6:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:42:A6:97:13:9C:AC:79:71:88:B6:06:D1:2D:A4:C2:3D:8C:DB:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/1ca08956-dede-3899-a28b-0e0c904cf504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:2f:68:b9:c5:4f:a6:04:f8:da:ee:42:7a:4e:8f:33:ed:
         ca:34:cd:5a:2b:2c:5d:9f:65:5d:f8:9e:0a:30:78:7b:68:6c:
         0f:44:e1:0e:b9:bb:0a:12:fa:af:1a:c3:4c:01:2d:1b:36:0a:
         10:35:6a:c1:8c:61:da:1f:6d:3b:30:34:e7:ad:74:f4:73:ad:
         ba:03:1e:c7:7e:b1:13:f7:f4:ee:a6:da:b2:7a:5b:26:9b:e8:
         0f:a8:ad:fc:ae:46:71:6e:a7:50:4a:69:cd:c7:04:fa:a9:54:
         1d:7e:61:ac:93:33:44:7b:bc:b4:59:31:17:f9:ac:9a:ae:cf:
         b8:8e:9b:18:35:01:06:eb:9b:7c:54:ac:81:77:d1:15:56:de:
         ac:a9:24:6c:ce:28:22:62:30:e6:21:eb:4e:54:08:b3:a7:21:
         e5:29:8c:db:47:0f:fd:7e:79:8f:50:0a:fa:8b:8b:ae:85:41:
         ef:26:55:4a:1d:32:34:17:b6:7a:d3:1d:5a:0c:ac:1f:38:ba:
         d5:0f:37:04:1d:69:a7:91:95:3a:a7:1e:1a:9b:eb:5e:d5:5e:
         13:59:f0:55:08:15:b6:5f:be:aa:cb:8c:a9:27:6d:17:8e:b1:
         5a:ee:3a:9d:15:77:ca:0d:b8:17:3a:1c:12:1c:f2:4e:a3:b7:
         ac:df:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:10:25 2025 by rpki-client