Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa
File:                     10d49d5c-b633-3f67-8315-94c511151349.roa (raw, json)
Hash identifier:          tlF4cNrmeo8LQ8ah5/b4SWrNz9Ekj0+NrPbJjRmdqAY=
Subject key identifier:   66:CC:E9:F6:C0:3C:68:F0:22:61:83:A3:95:47:73:78:FA:40:E6:C8
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584ADECBC5DF74E184007158DC80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16839
IP address blocks:        149.96.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c5:df:74:e1:84:00:71:58:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=932040c0-e210-4edd-8bc4-306c0b9ac8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:3c:60:57:5d:1e:c2:01:4b:f9:3b:ad:fc:
                    79:01:7c:06:1f:af:30:9b:25:bf:19:6d:63:e8:4e:
                    c7:83:0d:63:47:ef:87:55:18:57:5e:40:72:b7:f1:
                    8c:bc:69:74:66:bd:7f:09:f9:96:c0:a8:9b:11:6d:
                    b4:30:97:f7:1a:e2:b3:21:99:69:25:e2:15:86:5c:
                    5b:67:42:24:3e:2e:e0:b7:c0:03:e7:a6:4a:f6:b2:
                    f1:19:16:56:f8:ce:72:99:03:d7:f3:be:59:49:c9:
                    cb:25:89:a5:22:0c:92:22:e7:05:4e:70:d5:bc:a0:
                    8b:22:fa:c9:04:9b:94:44:ee:35:bb:93:28:ef:ea:
                    90:bf:fc:9d:6a:29:9f:64:d5:64:8d:84:3e:46:2e:
                    07:f8:12:e7:9b:2c:b3:d6:f4:82:b9:e0:d6:cb:de:
                    74:dd:24:84:cb:e4:41:37:97:37:31:38:af:1a:3d:
                    77:cf:8b:40:cd:a0:79:b3:ac:3c:55:85:81:5a:7e:
                    83:62:cf:82:b5:86:aa:67:32:cd:88:2c:c4:cc:24:
                    a2:45:68:d5:70:3f:51:e7:0d:97:9d:f9:17:47:7f:
                    9b:94:83:00:70:c8:f5:2e:3d:f9:55:62:82:32:a0:
                    4c:53:be:a9:2c:e2:71:5e:f4:92:42:1b:13:ea:a7:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CC:E9:F6:C0:3C:68:F0:22:61:83:A3:95:47:73:78:FA:40:E6:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:4a:1e:65:da:d5:09:74:59:d7:9e:41:ec:df:b5:75:da:e4:
         f0:36:67:e7:b5:d6:77:3e:69:ae:58:d0:7e:d3:b2:21:e8:74:
         e7:f1:20:0b:22:b9:bf:9f:6d:5a:3c:87:e1:1c:54:b1:b1:9e:
         72:c1:fc:e0:92:8b:93:6d:76:56:36:94:a7:40:86:80:40:4c:
         98:8c:9c:71:0e:c4:ba:48:b8:49:0f:3b:26:ec:cc:9f:a0:3e:
         d3:1f:bd:99:af:00:c1:9c:54:16:b2:80:38:d6:72:5a:bb:9d:
         34:77:a1:c9:33:78:48:54:1b:64:bb:c7:03:37:19:05:68:d7:
         75:c1:f6:ba:d2:d9:78:59:d1:9c:1e:35:1f:1e:58:df:32:64:
         d4:51:11:b0:97:40:54:50:79:b4:79:e0:52:b0:74:a0:b0:2a:
         14:bb:36:58:6c:c0:c5:f1:2b:43:8f:5f:0e:1f:57:2f:6c:7c:
         9c:74:c8:66:a9:61:17:ba:2c:00:82:21:53:c8:51:21:76:d4:
         7a:e2:7e:77:c8:c9:ae:a1:8a:8a:49:34:5a:7c:ce:55:a6:0d:
         78:15:44:24:67:d3:30:48:7b:ac:56:b2:c3:58:4b:b1:75:e9:
         9b:59:a1:c0:11:10:c6:96:b8:73:5c:26:29:89:ff:f1:85:ca:
         ab:0c:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:26:07 2025 by rpki-client