Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa
File:                     8095b80c-f559-3348-96e7-8524fb77cdb9.roa (raw, json)
Hash identifier:          Wde6GPcJ+DdTjSAkf8NRUOi+yzOhri6uutX8OJVsBjQ=
Subject key identifier:   AB:CE:27:5A:05:99:00:3C:B2:98:50:47:99:57:13:D6:83:22:1E:0F
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584ADECBC5CB5FECB33B5AD1FC00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16839
IP address blocks:        149.96.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c5:cb:5f:ec:b3:3b:5a:d1:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=4f55c6c7-0347-4b37-aa48-9c2bb24c60d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:68:45:f7:ad:0f:b8:5c:7f:56:76:32:05:
                    03:f7:e3:16:ba:53:de:ea:19:a9:bc:7b:2b:b1:19:
                    09:73:d9:11:11:91:de:fd:bd:69:8d:6b:f0:f7:dc:
                    b9:83:80:81:d1:f7:50:19:96:4e:21:a1:f0:2e:21:
                    33:04:60:93:07:6b:85:da:74:25:7e:3a:b3:b3:62:
                    9f:2e:3e:2e:f8:91:78:fc:c0:4f:ac:a9:52:cb:b7:
                    31:89:48:7b:1b:3d:18:46:f5:59:02:43:91:7d:b5:
                    ee:c5:32:f2:55:00:74:36:cb:be:47:1f:85:b9:06:
                    ca:af:eb:7c:3c:5d:6f:11:a2:5d:ee:9c:f2:8a:09:
                    6b:1d:38:17:8a:51:7c:08:d1:ab:2b:df:8f:dc:f9:
                    17:7e:67:18:97:1d:d2:9f:16:36:2e:bb:6a:4a:f6:
                    4a:46:e2:ee:f5:4f:fc:eb:9a:6a:14:ce:f8:19:05:
                    67:01:37:26:4f:db:38:f9:80:9c:7f:5f:46:8d:30:
                    e2:19:75:d7:95:12:ff:33:8e:9e:66:37:6b:c4:4a:
                    0b:09:69:52:ea:b6:93:76:f1:d3:ea:86:c6:26:0a:
                    a3:93:79:56:eb:ac:c2:15:d5:b7:46:a4:c7:10:7f:
                    35:cc:ba:31:d2:b9:f8:d8:27:a5:13:85:80:b0:5d:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CE:27:5A:05:99:00:3C:B2:98:50:47:99:57:13:D6:83:22:1E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:56:b3:02:ce:2c:51:2e:d0:8b:c4:75:9e:41:3b:77:93:a6:
         46:35:ca:93:7d:62:45:02:70:e5:1b:da:1c:9e:cb:83:36:cb:
         c7:7e:86:39:28:65:b0:74:0f:23:8f:6c:07:32:5c:0f:c5:30:
         f7:0a:ec:21:5e:09:e7:f1:12:3f:0e:5d:93:71:76:b5:f0:db:
         c5:e2:4d:4d:a1:97:e2:c9:3a:65:c9:26:1d:07:6a:04:fc:40:
         46:db:c6:1b:47:1b:68:48:0c:cd:d6:47:11:42:2a:e0:9d:ee:
         fc:65:3b:4b:9f:07:3f:dc:6d:bc:90:e7:40:5a:18:e8:dd:02:
         95:03:63:46:a1:04:b8:e7:17:e0:b7:d5:e8:82:ed:01:67:33:
         6f:eb:fb:c4:07:f3:ac:2e:bc:62:2a:0d:21:4d:3d:f6:3c:7e:
         e9:73:5b:8c:2d:6b:00:73:71:ab:6c:5e:13:3b:6d:9a:79:2e:
         bf:e6:91:3a:a4:08:9b:de:c5:fb:1f:9d:0a:c6:7e:40:ea:2b:
         8f:a2:a1:78:5f:80:9a:c9:b0:93:e6:17:18:ff:45:d7:38:a6:
         51:d9:59:f3:f6:d6:26:ba:71:26:6a:9f:c7:c9:d5:bb:8a:7e:
         c2:4c:2c:c7:5e:db:b8:a2:e2:2f:d2:e7:8a:ba:55:43:c1:cb:
         ad:cd:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:28 2025 by rpki-client