Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa
File:                     0700df42-2943-3ba8-bc50-05cd067eaeef.roa (raw, json)
Hash identifier:          7XhV3W1mww7XPNREUBNUjXEyB7SQWUOu1E7C5KGVSW0=
Subject key identifier:   F9:D1:A3:6B:08:E1:88:DD:C2:CF:07:73:33:6B:21:52:52:1F:6F:19
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F4328584AE03119A858A44FFEB644F000
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     401099
IP address blocks:        199.87.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:19:a8:58:a4:4f:fe:b6:44:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=2aa3d539-747d-46bb-b7a1-21cdce573633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:19:9c:0d:90:4d:74:0f:ab:6e:9f:5a:63:
                    51:42:cd:52:01:90:e1:dc:96:c1:e3:30:21:03:6d:
                    40:d5:f1:c7:15:78:6a:a0:f6:b2:dd:ef:e0:b6:9a:
                    79:8a:56:34:a2:d9:db:5e:77:5c:97:05:76:ae:c6:
                    d5:77:58:a6:09:8b:2d:61:c8:0f:5d:ef:b1:a7:96:
                    fb:54:bc:53:e5:59:ce:99:62:bd:a3:a0:04:0f:15:
                    70:f8:68:36:5b:ac:d6:c7:fc:e2:e4:50:3c:62:e0:
                    40:23:fc:7f:00:56:5f:4c:48:b8:6a:c3:e6:09:ae:
                    93:42:6a:0d:0e:18:11:51:95:10:2d:00:25:7e:13:
                    40:b2:ee:67:47:b5:af:89:32:fd:8f:c5:8a:9a:20:
                    e3:f0:c0:a2:b3:8a:5b:ad:4e:c7:3b:6d:4d:81:69:
                    76:de:77:da:18:5c:a7:ec:5e:b9:73:9b:f8:ac:e6:
                    e6:63:4e:cf:0f:2d:a6:4f:31:c4:19:40:01:3a:67:
                    f7:54:8a:1d:38:7a:d8:38:ab:1c:81:33:dc:b5:0b:
                    f2:ff:04:19:42:06:13:b8:13:fe:ff:14:41:bf:dd:
                    60:4f:a2:60:de:ac:20:be:61:2f:32:40:1e:d7:b3:
                    49:7d:ed:58:1d:b9:c5:e5:7f:f9:6d:c6:dc:35:44:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D1:A3:6B:08:E1:88:DD:C2:CF:07:73:33:6B:21:52:52:1F:6F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:80:01:7d:47:67:3b:fa:69:94:7e:67:c7:31:40:0d:a8:61:
         8d:b4:f4:39:12:a8:3c:a7:d5:41:a6:5b:12:ba:c1:57:6b:e3:
         3f:52:f6:00:86:f4:15:d3:b9:83:f9:cb:f3:7c:d3:b8:cb:7e:
         ff:71:99:a9:13:e8:c4:18:8d:3b:90:e5:6b:10:2a:a6:37:a5:
         62:3d:3f:ed:7b:55:aa:b7:fa:61:a8:38:25:6a:0f:78:bb:c4:
         3d:53:8a:29:b0:83:34:3e:d4:21:ce:dd:0b:c2:7d:91:d6:fa:
         c5:0e:35:17:36:a7:bd:15:ac:9d:a9:5b:3f:36:2d:5a:5b:db:
         57:f7:58:e9:35:8b:ad:7a:2e:6c:75:35:fb:c7:26:fe:8e:90:
         96:08:1b:e1:9e:61:38:e6:ee:6f:a7:64:54:35:27:8b:ec:bb:
         14:4d:29:df:99:f5:51:8d:99:b4:15:42:58:44:71:5d:e6:47:
         57:37:42:45:ca:08:e2:39:35:66:b8:e1:b9:ba:9f:41:1b:7f:
         1f:eb:34:22:02:11:c5:24:32:09:71:15:7c:af:1c:17:eb:5b:
         96:cf:b2:f0:3a:54:4d:48:4c:e4:cb:42:41:32:b2:76:20:4e:
         f7:17:d8:c7:27:69:25:65:d8:b8:cb:e2:a3:8b:99:ed:7c:e1:
         94:a0:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:56:12 2025 by rpki-client