Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/54ffbc13-c857-3f3b-b5d2-79d974a0e52d.roa
File:                     54ffbc13-c857-3f3b-b5d2-79d974a0e52d.roa (raw, json)
Hash identifier:          pKZiso2FfJrcs0qdgcRWCFb8fCQGlr/i/opI1HBaJZI=
Subject key identifier:   B7:84:37:13:38:12:30:40:B8:D4:EA:FA:1D:6B:80:E3:82:62:7C:8E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A396551EE02475CF8D226E780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/54ffbc13-c857-3f3b-b5d2-79d974a0e52d.roa
Signing time:             Tue 17 Jun 2025 19:05:59 +0000
ROA not before:           Tue 17 Jun 2025 19:05:59 +0000
ROA not after:            Mon 15 Sep 2025 19:05:59 +0000
asID:                     401152
IP address blocks:        96.126.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:65:51:ee:02:47:5c:f8:d2:26:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 17 19:05:59 2025 GMT
            Not After : Sep 15 19:05:59 2025 GMT
        Subject: CN=9ecaae39-9110-4a9f-9674-b51a16581f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:7d:58:e0:77:70:aa:65:b2:b5:ec:7f:d2:
                    d3:0c:db:83:c1:4e:47:ab:2e:55:70:39:f5:31:36:
                    05:af:71:2a:e3:cc:f5:ca:0b:7d:9a:8b:da:fd:0d:
                    12:1c:5d:f4:1f:bf:ed:d8:6a:c4:01:7c:f3:d9:f2:
                    86:3e:2a:e9:3c:c0:aa:18:4c:54:4c:a5:f4:a7:8d:
                    59:72:bb:fa:72:91:6e:78:90:61:24:77:37:c5:6b:
                    b6:e6:f2:18:82:98:d1:bc:92:18:6e:86:f8:a3:db:
                    07:f8:93:86:a0:73:23:e0:70:6f:9e:b2:43:7d:16:
                    6e:ca:76:e3:d1:bd:84:5b:eb:fa:bc:79:a7:25:1b:
                    1c:97:74:12:71:1a:8b:2e:fe:ac:7a:76:b3:ce:d3:
                    76:26:b9:b8:57:71:f6:36:68:c1:74:51:d8:da:18:
                    6b:72:65:81:c9:0f:aa:f4:8f:e4:88:bf:66:50:76:
                    85:4b:d7:92:ed:fc:c7:04:ed:d6:a4:56:ca:46:37:
                    14:3b:e2:36:1f:12:8a:c3:10:79:e1:2d:03:1c:59:
                    8c:8b:a9:db:52:07:a0:3e:df:fd:14:2b:b6:85:a6:
                    c3:fd:60:72:34:7f:7b:a5:6b:17:5b:d0:42:55:12:
                    1f:81:f5:50:67:df:70:49:a4:54:96:38:b0:11:bc:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:84:37:13:38:12:30:40:B8:D4:EA:FA:1D:6B:80:E3:82:62:7C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/54ffbc13-c857-3f3b-b5d2-79d974a0e52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:47:35:12:55:8d:e4:52:47:d6:52:a3:d7:2f:a7:80:fe:47:
         0d:a9:d2:78:0c:59:a2:27:22:1b:da:e7:7e:62:0e:ab:20:6e:
         75:c3:9f:d2:f6:a6:0a:5d:f7:b1:87:ba:52:f8:c7:59:2f:97:
         e2:89:6d:25:02:68:5e:b9:f1:a6:4a:f8:3d:f3:09:e1:52:62:
         d8:66:dc:89:4a:c5:42:c9:fa:09:3e:25:ec:4f:be:f9:99:6a:
         b3:e8:af:c2:ad:17:a7:5b:13:95:08:a0:47:31:6b:06:3d:9b:
         31:50:c5:a9:04:6c:65:50:24:d4:52:c3:c1:d7:91:9c:91:0f:
         65:8d:f7:79:11:cd:fb:c6:8c:f4:ae:0f:c7:56:be:83:99:74:
         70:c3:30:5a:fd:a0:ac:a1:51:6d:08:ff:50:ab:ec:f1:9b:c0:
         f2:88:ee:99:8c:3b:33:de:0b:0f:c7:81:b2:66:1a:85:18:a7:
         c0:3a:85:99:65:f5:c7:ba:9a:03:2d:a3:c1:39:5b:d2:30:a0:
         ec:11:8d:dd:3f:4a:3a:c7:19:e1:c2:e3:c9:43:a6:03:05:e8:
         23:a9:0c:fe:ac:04:3b:1a:7d:c3:f8:53:a2:78:b8:94:52:6f:
         d1:24:0a:41:fd:ae:77:3a:23:e8:bc:b0:74:08:56:3f:78:bf:
         12:45:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:45:17 2025 by rpki-client