Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa
File:                     96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa (raw, json)
Hash identifier:          /MBtmTH3dBOVYDvT4LxntPfouKGpUbJQ5yC7ib7GSq4=
Subject key identifier:   94:3D:72:BA:DC:93:4B:76:73:91:39:4A:1C:A5:9B:DF:20:E7:A1:6F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584A480AEF3B93DB147684D2D400
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     8987
IP address blocks:        170.85.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:ef:3b:93:db:14:76:84:d2:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=2d759722-6e3d-45fe-b17e-fe49e93d0e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:d9:fc:e7:41:0d:34:36:96:fe:cf:af:3d:
                    4b:58:a9:ef:3a:0d:be:08:e7:5e:5d:93:93:55:d8:
                    c3:76:1a:19:dd:87:11:e0:05:80:9e:99:ec:95:f9:
                    38:99:7d:bb:54:91:ba:70:85:cf:eb:b6:a7:66:fa:
                    4c:37:96:a3:8e:8a:19:55:fb:11:5c:c4:6c:e4:36:
                    cf:da:8c:46:5c:c0:a7:60:71:88:dc:2c:bc:6e:9d:
                    5c:05:00:da:b2:98:a5:1c:51:46:71:4d:cc:a6:c3:
                    8e:d5:df:2b:d8:6b:69:47:ea:ad:9d:93:bc:7e:2e:
                    ee:63:3c:e6:2d:3d:c3:21:56:75:41:43:2e:dc:50:
                    4f:e3:96:84:2f:1b:0b:73:80:f9:2c:02:20:eb:f1:
                    6a:62:4e:5e:85:fd:7d:5a:2b:1e:a1:49:21:cd:bd:
                    5e:4a:22:13:6f:c4:27:ff:d5:75:c8:c6:5d:1c:b2:
                    b3:a3:de:29:26:93:f8:d4:97:b7:11:78:5c:fc:b5:
                    54:6c:d8:15:51:b3:8e:05:51:3d:d6:97:06:2d:4d:
                    f3:29:2d:a8:05:1e:3d:de:e4:2b:3f:27:69:93:35:
                    cd:99:ea:b7:f4:1d:2b:5f:f0:06:d7:61:82:db:f2:
                    73:47:fc:c2:04:b5:ce:f4:c1:03:6c:c1:48:b4:35:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3D:72:BA:DC:93:4B:76:73:91:39:4A:1C:A5:9B:DF:20:E7:A1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/96ce3e89-656f-3a76-b18d-33ba1bb341c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:87:4e:01:e0:ab:95:74:27:85:dd:59:74:ef:5f:bb:ce:
         a6:bb:c7:1c:13:78:9f:05:53:b6:4e:bf:bb:0d:4b:d6:17:34:
         6c:7f:87:6d:7e:f2:f9:73:54:08:eb:85:87:cb:6a:63:9c:bb:
         9c:41:2e:75:45:d0:cb:00:17:2a:fd:7c:e3:15:1b:3c:0b:a8:
         36:85:26:04:3a:48:83:92:55:c0:2b:6b:58:20:71:ab:00:55:
         0a:d6:a0:93:14:62:f4:7a:a7:22:01:12:25:dc:a2:d2:fb:bc:
         4b:6b:3d:1d:d0:63:0b:04:7a:da:6b:8a:eb:a0:26:b7:96:76:
         c8:c4:1a:43:97:32:a9:ed:ea:00:c4:a3:8b:83:32:97:04:79:
         d6:dd:39:f6:2a:b4:0d:e2:91:ec:c7:bd:4a:f5:ec:e4:22:ff:
         85:48:db:e8:55:24:cd:6e:c9:26:15:48:d8:fc:ff:36:02:42:
         d7:02:ae:59:cf:9c:69:ad:df:6c:98:67:9a:73:ac:fd:d1:d4:
         24:65:95:a8:21:17:9d:19:7b:f7:61:7d:67:66:21:ed:2c:b1:
         11:a7:1f:0d:c9:06:78:a9:32:99:0b:50:ac:d3:44:b9:d8:d8:
         47:59:0a:7a:0e:51:10:44:8a:bf:fb:7e:6a:88:67:ab:4f:8d:
         81:e6:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:56:24 2025 by rpki-client