Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
File:                     db6c28c7-3310-3a30-a759-80e2eb7282e0.roa (raw, json)
Hash identifier:          TifC/hvRqdRJM92Ku3/wT9fH9sL7trlFZ/vP6Gg/TDI=
Subject key identifier:   69:3C:0D:C2:AF:81:2C:C0:5B:9A:42:3E:73:AE:29:A2:54:69:BE:9C
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584A62909242DC3E667CFBDE1840
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     22926
IP address blocks:        67.43.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:92:42:dc:3e:66:7c:fb:de:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=a3eabd39-aa4d-4c40-bd0f-a8f5ec720107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:1b:31:45:d6:8c:af:1b:bb:a7:50:80:d0:
                    7f:73:58:c3:77:51:9e:73:c7:af:61:5e:81:63:5f:
                    ac:6a:16:ce:8f:32:c2:93:df:02:f0:52:ab:c3:4b:
                    f6:2f:f1:4c:35:e7:bf:fd:e7:94:33:26:cf:b4:2c:
                    b9:79:b0:3a:e9:8c:71:34:bf:69:f3:63:3b:ad:ba:
                    38:de:1b:e3:37:c8:5b:15:22:62:b9:5a:58:ae:21:
                    e2:94:a8:13:e1:14:20:51:1a:f6:f5:ac:ea:d2:b4:
                    4e:26:b9:d3:f5:30:01:ca:c0:e9:aa:4a:1c:bf:10:
                    f6:ec:77:fe:51:84:4f:a1:d7:63:f0:88:03:c6:23:
                    5a:a4:4b:9d:de:8d:33:40:e0:97:c8:ea:ee:d2:96:
                    4a:a6:53:74:ef:3f:6a:cd:db:fc:6c:d4:54:01:fa:
                    20:1b:9d:4f:b0:48:65:c4:29:6d:0f:f9:66:3a:41:
                    ce:fd:e3:98:d3:41:8c:c7:76:69:e0:c3:f9:d1:01:
                    01:75:5f:d3:5a:38:06:e9:56:6f:a4:37:29:65:c7:
                    5d:79:66:4c:31:58:d5:eb:b1:09:e4:a2:4a:37:b5:
                    2c:16:98:05:75:07:3d:7c:c9:fe:b1:a6:b0:f0:0e:
                    d6:71:e4:9a:36:2f:55:d6:3c:09:44:96:91:8e:94:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:0D:C2:AF:81:2C:C0:5B:9A:42:3E:73:AE:29:A2:54:69:BE:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a5:b9:b2:00:c1:7a:8b:7a:6a:17:2d:88:a2:00:73:53:df:
         28:bc:89:49:70:5f:25:49:0d:84:6f:a0:17:8e:14:93:f2:88:
         36:92:8f:56:7e:36:fc:56:ec:17:74:a8:6e:40:e6:22:bc:11:
         96:40:f5:bf:15:30:a2:e4:ca:c6:ac:15:6c:42:41:6a:f0:1f:
         17:b5:d4:ba:0b:6c:81:8e:5a:4a:b2:ab:00:36:b6:b1:03:78:
         50:89:9c:8d:c1:cf:56:e0:2e:85:80:97:ae:48:66:79:5c:7f:
         5f:ba:8f:d1:c2:c9:13:e0:5d:83:ac:f4:c5:43:77:95:46:38:
         4c:a9:40:3e:50:77:a5:24:49:97:1d:10:a6:d1:a2:2c:65:7e:
         63:a3:86:dd:57:24:20:3f:32:58:35:55:d3:ac:63:69:f1:f3:
         58:76:45:d0:f5:27:d2:c4:d5:cc:bc:d7:b8:f6:d6:5a:7b:9e:
         c5:ac:e7:0b:ff:2a:a7:7d:4f:f1:ab:b6:91:79:3d:ba:60:26:
         75:ab:d3:e8:a7:19:92:17:4b:79:e2:37:d3:26:99:47:73:d1:
         fc:98:73:a4:d6:72:48:d2:07:da:85:fd:19:a9:cb:9d:51:cd:
         b9:ca:38:b0:00:72:a7:12:17:b0:a7:56:27:ac:3a:b7:24:1b:
         b7:8e:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 14:14:45 2025 by rpki-client