Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
File:                     af6da1df-6310-375d-ba7f-a2f60512f77a.roa (raw, json)
Hash identifier:          TgjPWCPTm9/KK+d0fBc6oEnEuMoYbqlx1kujqp8qvXg=
Subject key identifier:   CF:2E:B4:41:04:FD:A1:9F:F1:A5:F3:DD:ED:9B:4C:CA:E4:7B:22:1B
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B1F01675C38113213C582B680
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     31898
IP address blocks:        67.217.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:67:5c:38:11:32:13:c5:82:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=96f6749d-7287-45c8-8b84-8f10fb0b0147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:d7:3c:a9:fe:20:75:48:5e:ea:d3:0c:64:
                    e2:92:aa:2c:6f:1a:a7:10:f4:f6:36:41:ad:21:a8:
                    16:77:9f:fa:5e:04:f6:5b:25:c2:8c:0c:2c:0f:ac:
                    39:b5:73:75:4e:49:0f:9f:02:ef:82:b1:3e:f4:f1:
                    76:d6:39:4e:79:93:c1:e3:57:69:10:14:48:6d:fc:
                    52:48:83:18:be:13:58:c7:cc:f1:15:6c:cf:73:78:
                    1b:05:df:ce:7c:57:4a:46:a5:53:1d:52:3d:61:43:
                    83:c6:9f:b4:93:d8:8c:d1:6e:13:d8:9d:1d:2a:90:
                    cb:e3:65:2a:7a:62:d9:dd:23:10:e9:ee:2f:1d:da:
                    a5:d7:19:e3:bb:bc:bd:a9:7f:68:ba:2e:47:17:48:
                    43:bb:1c:d0:19:8a:15:1f:7b:d6:40:6c:fb:11:93:
                    42:a1:db:96:8a:16:c0:bf:c8:74:26:3f:34:2c:9c:
                    d2:b0:4d:77:8e:1c:eb:e9:55:a7:77:c1:0e:f4:c2:
                    18:2f:a0:70:a5:ce:4a:1f:60:44:8e:c5:2a:2b:70:
                    cc:98:54:ce:2e:02:81:ef:d4:11:72:96:57:50:25:
                    b3:32:4b:05:e7:d6:90:11:c6:3b:cb:5c:96:11:12:
                    52:14:6b:23:1c:12:95:d0:71:26:74:39:8d:70:87:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:B4:41:04:FD:A1:9F:F1:A5:F3:DD:ED:9B:4C:CA:E4:7B:22:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ab:fc:33:79:df:ee:01:77:f6:0d:84:95:be:98:b3:f1:06:
         98:5a:f1:b9:9f:cc:1f:b4:96:40:94:93:28:7e:37:0f:31:91:
         48:46:d4:d8:e5:70:d1:9c:c8:6d:8a:29:42:c0:23:b0:b4:df:
         98:95:7f:7c:19:2d:0a:86:c1:c5:10:45:dc:d4:90:35:12:1c:
         33:02:3f:ef:da:e8:39:4b:b1:00:ba:5e:d0:c6:db:6c:6e:8d:
         5f:e2:5b:85:c1:b3:50:ed:1d:7a:63:78:2c:b1:08:03:5f:f0:
         3d:12:44:29:47:6f:1a:f8:aa:ae:ad:d4:1b:0d:19:67:c8:64:
         7d:53:ce:8d:9f:e1:8d:0b:44:76:06:31:5b:46:32:f3:9a:ba:
         ee:4f:7e:4d:03:7a:1e:0f:d2:49:5b:38:4c:1e:eb:a5:41:2a:
         20:ca:6f:78:59:b1:66:2d:3a:ea:ad:36:86:05:9b:49:2c:52:
         1f:69:46:e1:9a:db:0d:e7:b5:f5:67:79:7e:2e:57:dd:ff:03:
         56:40:ea:22:07:17:30:17:3d:d6:1b:6b:9f:84:8e:a8:7b:42:
         df:92:cd:bd:de:34:98:dc:fe:3f:f1:48:89:40:5a:2d:ef:83:
         84:11:4d:7f:92:33:83:56:d2:0d:ea:e4:38:fa:80:56:e1:85:
         ab:03:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:55:49 2025 by rpki-client