Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1624a723-78ba-3f1f-8c17-ef450241d3df.roa
File:                     1624a723-78ba-3f1f-8c17-ef450241d3df.roa (raw, json)
Hash identifier:          nkVFtCIkjfUgI4Rb6g3byw5NUgK9ApVWMTc0FKBBD0g=
Subject key identifier:   D0:38:2A:91:95:A8:20:AF:78:95:FC:AF:AB:DA:51:F8:79:53:5E:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCF0775A06A5D1FF40AB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1624a723-78ba-3f1f-8c17-ef450241d3df.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     20214
IP address blocks:        96.71.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:f0:77:5a:06:a5:d1:ff:40:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=7876e6c3-971a-407f-a6e9-9d6bbd9dc23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:50:54:34:39:ef:72:09:17:7f:a0:af:f1:
                    ae:67:ce:b3:83:81:38:c8:30:8d:12:33:6f:66:a1:
                    01:15:63:16:11:94:39:c9:f7:87:b5:65:70:92:df:
                    67:6d:c9:1a:c7:41:02:29:a9:bc:83:1b:18:1f:6c:
                    c0:f2:c3:ab:ec:c1:3c:ce:86:a7:14:c4:cf:78:d3:
                    a6:61:62:f3:0e:1d:2e:23:25:b8:20:4a:2e:69:0e:
                    7e:3d:c5:0c:e2:58:4d:8c:2b:14:3f:8b:3b:6f:06:
                    bd:a0:a2:1d:fb:58:44:3d:78:47:cc:60:d6:f4:51:
                    ec:ae:90:e4:f7:56:79:f9:bd:7e:cd:51:22:f2:10:
                    68:85:99:59:ae:82:48:c3:fd:9b:7f:c9:61:d5:54:
                    09:49:e6:1a:a7:54:b7:2a:9b:65:13:26:21:96:15:
                    a9:48:8a:bc:3c:6d:d2:31:f3:81:03:81:5b:bc:65:
                    92:d3:56:a2:55:b1:05:0e:c7:34:1e:48:4c:82:55:
                    fc:6d:94:de:eb:25:cc:71:a0:8c:d4:18:58:25:2a:
                    d0:bd:87:e3:9f:da:26:f2:37:a3:77:e0:7e:20:60:
                    54:9a:98:7c:2b:4d:c1:a9:fe:4b:9a:08:0d:b7:04:
                    88:4b:ce:41:4c:68:2e:53:4d:f0:c3:34:4e:c4:9d:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:38:2A:91:95:A8:20:AF:78:95:FC:AF:AB:DA:51:F8:79:53:5E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1624a723-78ba-3f1f-8c17-ef450241d3df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.71.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:92:2c:b4:89:37:59:93:06:68:5f:4a:f3:41:d9:39:45:
         58:49:7b:9f:6c:c7:a9:dd:e8:6c:ef:29:76:b5:67:f3:13:a6:
         e2:86:48:3c:12:8f:d5:97:fe:38:82:04:4c:0d:60:2c:a7:42:
         a7:cc:41:0f:7e:e3:43:aa:72:4c:c4:1a:db:ab:64:2b:dc:77:
         22:5d:7a:00:1d:8e:ad:fb:9b:a5:0e:84:b5:86:2f:f9:3c:17:
         67:8a:48:88:d2:7f:0f:cc:5c:d5:3c:57:ec:db:68:54:98:69:
         f0:de:7a:07:48:ea:4d:5c:71:b5:0c:c3:35:d2:ea:8b:f0:d9:
         71:3a:ce:ab:96:53:05:45:1c:83:81:88:f0:7d:e1:6e:fe:6e:
         7e:aa:2c:1f:4b:3a:d4:f9:1f:6f:d5:a1:ca:d9:24:fe:25:25:
         37:db:e3:f1:0d:71:98:42:79:94:66:a6:d6:31:d8:ff:12:aa:
         56:08:d3:ed:04:17:66:c4:48:8a:4a:1c:7f:e2:ce:cf:5a:ae:
         65:63:d1:ff:11:e2:86:77:ad:93:14:29:01:9e:eb:d5:58:d4:
         11:bf:46:fd:d8:c8:0d:14:f9:8a:bb:07:c4:d8:21:d7:fe:e6:
         a6:bd:8b:5e:fa:c8:42:54:84:2a:d6:3c:d8:3d:2b:be:dd:c0:
         25:b2:69:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:11:57 2025 by rpki-client