Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4763d001-9039-3f71-b490-d16081d9a367.roa
File:                     4763d001-9039-3f71-b490-d16081d9a367.roa (raw, json)
Hash identifier:          dXcsJUEpvjwNvNf/UkYzNdzsxy5k7msYS5JhXbvGcik=
Subject key identifier:   F4:B7:0E:D5:53:F4:BE:AB:D6:D5:8B:1A:4C:2F:F7:18:EB:9F:0B:9A
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584A94D0EE5AA487950399A49BA0
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4763d001-9039-3f71-b490-d16081d9a367.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     399629
IP address blocks:        69.67.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:ee:5a:a4:87:95:03:99:a4:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=eb9ce73a-3548-4ca4-ad96-1977b9f821af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:20:1c:0f:7f:d0:f5:1b:99:de:34:2f:6d:16:
                    61:17:c8:16:74:e4:85:ab:37:f6:cb:f4:1b:30:d0:
                    11:b4:33:cd:ac:50:eb:a3:52:2c:6e:f0:f5:dc:8a:
                    5e:77:12:c2:9a:2a:4a:e9:46:d8:c1:71:62:59:f1:
                    38:54:47:1f:b7:51:f8:62:73:2c:ac:e9:6e:be:db:
                    11:78:9b:7f:ee:cc:30:25:5f:a6:0e:41:07:dd:69:
                    5b:cb:36:46:0c:1b:fc:a8:fe:55:46:67:98:ef:05:
                    d5:62:87:60:ab:22:6f:45:22:d6:6e:bf:6e:b6:b8:
                    15:38:1d:fb:b1:3b:24:fe:d7:2f:2f:97:52:07:be:
                    8f:fd:6d:8e:b6:06:e4:e3:7f:e8:6f:47:6a:e4:f0:
                    f3:5a:1e:6e:f0:ac:ce:74:2a:55:5d:99:82:a6:ac:
                    4f:38:8e:96:c4:f3:2c:44:80:7a:c7:0e:43:73:58:
                    60:4a:34:ef:b8:4a:51:6f:c4:01:4c:a1:ad:e0:6f:
                    b4:76:52:5e:6f:1a:a0:74:13:ce:24:67:8f:a6:47:
                    ba:e7:62:f9:db:09:bb:31:04:0d:57:53:58:d3:aa:
                    13:24:86:06:ec:e1:c8:4d:8a:4e:65:4b:e3:36:a5:
                    1c:7c:4a:19:7c:09:51:da:23:7f:16:2d:a7:db:7f:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B7:0E:D5:53:F4:BE:AB:D6:D5:8B:1A:4C:2F:F7:18:EB:9F:0B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/4763d001-9039-3f71-b490-d16081d9a367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:66:6d:b4:54:0d:0e:a7:a9:2a:16:00:31:73:79:d0:ec:96:
         fd:b0:7d:f3:5e:3b:9e:2e:a4:40:2f:b4:05:e1:16:60:0d:6e:
         fb:f2:4c:2e:b7:fa:d8:03:b8:d2:36:88:97:db:bf:ee:30:0b:
         49:66:2c:12:bb:11:da:3f:d8:84:3e:3a:31:77:7c:81:00:05:
         dc:bc:a7:ab:80:6c:b4:62:2c:74:cf:74:b9:2a:1c:fe:21:b0:
         99:8a:48:ac:02:f0:74:5c:fe:81:b3:76:6f:0d:b4:b3:de:49:
         90:37:cb:df:99:1e:96:0b:0f:17:b4:5e:d3:47:70:30:cd:e4:
         0a:13:92:cc:6f:98:a1:d7:05:ce:f7:ec:dd:ab:48:89:05:2d:
         24:0a:48:51:f0:66:cd:d4:eb:5e:d4:95:4a:47:2a:9d:53:f7:
         73:a5:63:71:7b:23:a7:c2:46:fc:67:df:70:ac:6b:96:8f:da:
         3e:4a:fa:17:9d:2d:7a:d7:78:9a:a5:5e:7c:10:e5:b5:a1:15:
         77:29:f2:4d:4e:1e:7c:36:e5:ef:ad:13:e1:4f:1a:39:97:c6:
         75:11:18:55:b7:cf:df:47:00:3e:7b:6f:71:92:42:9f:cb:40:
         d9:79:be:fa:2a:8b:cb:96:6c:26:8a:27:0e:86:05:bd:43:58:
         cb:6e:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:21:59 2025 by rpki-client