Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa
File:                     1a781c28-0942-31de-bd94-cb1c908194c5.roa (raw, json)
Hash identifier:          I46m5rUTiT7m4IB6NbB2KyKs4iw4gIIB3onvmL14f74=
Subject key identifier:   88:F3:C8:14:7D:E8:42:7C:FF:F4:58:59:9E:87:B6:F6:0A:57:98:73
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584A6C55E22FA8192C3B6CB13940
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     397373
IP address blocks:        67.21.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e2:2f:a8:19:2c:3b:6c:b1:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=bdeaa9e2-c1c4-4d57-b9f3-4a00dc8e80f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:e8:ef:96:7a:9b:36:39:e9:e4:88:88:77:
                    f2:fe:c7:ca:05:b3:6b:8a:03:08:3d:0d:57:12:02:
                    fb:4e:5d:b4:f0:3b:ee:8b:91:8d:17:6f:de:4e:e6:
                    d6:81:b3:ec:f5:52:55:dc:62:27:41:2d:e8:3a:31:
                    30:f3:44:89:35:c5:29:cf:4f:ce:a6:f8:28:28:a2:
                    8e:1e:59:7f:9c:8c:96:9b:9b:2b:11:9f:01:ae:1a:
                    f7:e5:18:ff:5c:f4:df:aa:86:bb:9d:94:36:e0:31:
                    c9:ea:d4:0b:55:7b:d4:08:27:83:b8:93:c2:23:e5:
                    e8:20:0f:83:b3:af:48:ce:0d:52:a0:31:ec:3a:cd:
                    9e:90:6f:68:89:b7:12:71:ef:4e:d4:66:7d:e3:f6:
                    e2:a7:ef:5e:bd:ce:65:25:12:34:44:95:c9:0c:0f:
                    7c:33:fc:e8:ba:17:c8:75:73:5b:7f:24:15:8d:54:
                    5b:ac:49:c3:33:7b:78:e5:d1:c6:66:0a:bc:bb:f0:
                    95:5b:bc:0b:6a:28:57:14:ae:2d:57:97:3e:18:0b:
                    1e:7e:ad:94:ee:e1:6a:99:5e:41:e3:c5:0e:6b:c0:
                    ff:49:0b:ee:df:4c:66:46:c4:9f:c9:54:94:38:ff:
                    63:ca:c4:8d:9f:b5:45:ee:d7:dd:a9:63:50:c2:33:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:C8:14:7D:E8:42:7C:FF:F4:58:59:9E:87:B6:F6:0A:57:98:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.21.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:5c:b3:b1:74:27:ef:57:9e:c5:59:91:0d:03:34:37:45:
         ae:23:eb:3c:30:4e:e1:b2:54:03:25:39:43:b6:42:19:cd:23:
         24:73:c0:94:5f:5c:78:62:64:ed:39:9c:e9:88:17:e1:27:93:
         ee:9a:8a:1e:bd:15:cc:35:0c:bf:eb:d9:d6:00:73:eb:7c:61:
         fe:66:0e:7f:ed:cd:64:ee:61:be:a1:84:af:64:6d:5b:75:c2:
         86:39:48:49:18:d4:b4:55:e3:b7:13:12:4f:0d:12:4c:74:aa:
         7e:44:f9:e6:e6:46:a4:8a:cd:28:7d:d3:56:d1:24:08:14:51:
         3e:87:c8:e0:bd:ee:ef:fa:3a:62:f6:60:8f:ff:3b:7c:f1:cb:
         e3:87:ac:91:93:80:a6:2c:1e:67:7f:f6:72:e6:e6:30:d6:1f:
         fd:1e:83:76:9a:24:f7:fc:fe:30:1f:a9:73:11:50:4e:c3:b8:
         2e:b9:a7:e6:20:ce:8c:b2:c7:6d:eb:ba:d1:61:d4:bf:9a:ac:
         81:9c:12:9d:cc:8f:a3:a9:7d:42:4a:e8:00:35:4c:c5:e7:b3:
         3e:d9:eb:7d:33:68:ac:40:ae:4b:54:03:6b:e9:cf:ca:0e:43:
         61:b2:fc:42:a0:50:8d:80:ec:8b:0f:ba:b9:fe:87:c1:81:93:
         3b:10:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 14:10:25 2025 by rpki-client