Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/96c281dd-57c3-39da-8b6d-39750b727d15.roa
File:                     96c281dd-57c3-39da-8b6d-39750b727d15.roa (raw, json)
Hash identifier:          DZad/xvmQVSyQn2Iuwu+/gsTPxZbGekreAiGXWTe3lU=
Subject key identifier:   00:93:41:59:78:19:4F:26:9F:88:4E:76:31:0C:8E:32:B0:53:13:2D
Certificate issuer:       /CN=8cc002dc-5652-4cb7-8a1c-de91edd9d9b2
Certificate serial:       010D0C9F43285849ABB48CFC65DAA6CE06FFA400
Authority key identifier: 2E:60:D0:8B:02:8B:C2:95:4C:4C:78:BB:39:61:2B:6A:45:67:41:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/96c281dd-57c3-39da-8b6d-39750b727d15.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     26140
IP address blocks:        65.39.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:8c:fc:65:da:a6:ce:06:ff:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc002dc-5652-4cb7-8a1c-de91edd9d9b2
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=6b7510c1-afa0-441f-8ae8-405578623221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:b8:fe:01:35:b3:c5:39:a6:a1:5e:47:ad:
                    5d:13:11:2f:8f:34:1b:64:dd:8f:2f:38:da:c5:b9:
                    19:fb:fd:a4:f5:68:60:15:d1:d8:4b:ab:e8:7e:92:
                    15:72:44:fb:65:d3:bf:8b:4a:0a:ce:a8:8b:a8:0f:
                    9d:7a:ac:d4:01:b6:07:fa:53:67:11:4d:d0:17:b3:
                    95:fa:fa:16:3d:be:d0:31:57:5a:3e:4b:9a:dc:70:
                    b7:0b:7c:1f:6f:cb:53:bd:76:55:f4:99:a1:b3:d1:
                    5e:4f:cf:7e:61:62:59:d9:7d:14:e5:82:ae:01:64:
                    28:e9:07:d1:46:4d:b7:a4:63:f8:74:f9:f8:43:2a:
                    79:1a:c8:d3:a5:97:31:c0:3a:bc:35:fc:d5:13:df:
                    0e:16:71:f3:27:f3:3e:c1:16:4b:a4:4a:60:7e:71:
                    06:60:4e:f1:d2:3c:2c:e6:4e:40:ed:26:95:67:bd:
                    43:be:7a:20:48:45:b2:f4:78:b8:55:a1:66:90:01:
                    d0:3c:a9:1b:df:aa:49:19:62:15:56:c9:cb:df:8b:
                    1d:e1:11:28:78:e9:9d:c5:7c:09:c2:27:c4:86:c7:
                    36:28:60:7d:1c:36:a6:bd:37:e9:3e:25:dc:ce:96:
                    c4:43:99:10:78:5a:e0:90:b9:e8:a2:84:f3:9a:54:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:93:41:59:78:19:4F:26:9F:88:4E:76:31:0C:8E:32:B0:53:13:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/96c281dd-57c3-39da-8b6d-39750b727d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.crl

            X509v3 Authority Key Identifier:
                keyid:2E:60:D0:8B:02:8B:C2:95:4C:4C:78:BB:39:61:2B:6A:45:67:41:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:35:a7:4a:10:e9:0b:29:d9:81:9f:ef:7f:fb:1b:fb:8d:
         80:57:90:da:b5:49:b3:f2:7f:16:e9:7e:e6:c0:44:ef:99:ee:
         84:b8:77:ca:b4:05:ac:19:ce:88:61:56:87:70:7b:3a:5b:2b:
         86:56:bf:46:09:16:c5:fe:b0:22:32:80:e2:1d:3e:ba:44:6e:
         33:d5:4b:cb:c6:ec:cb:52:06:54:4e:8e:d4:d0:c6:24:54:d3:
         b0:7c:9f:fd:93:31:58:19:79:94:50:8b:c2:23:fe:0a:a1:20:
         c9:e8:17:e6:65:17:ff:8f:93:95:0c:4c:98:be:1a:e2:cb:85:
         11:bb:25:35:8c:16:02:30:15:fd:35:cc:31:67:b1:89:ad:ba:
         5a:98:b1:2a:83:eb:7f:56:db:79:32:15:a2:a0:8a:50:bf:21:
         f1:db:ca:2c:aa:87:25:26:47:86:48:84:bd:4c:f3:02:05:66:
         1b:f7:4f:da:41:d6:32:c2:56:bc:c3:83:b9:af:3a:ab:b7:00:
         ae:06:d1:4f:96:e0:35:cf:2c:07:bc:bb:12:ee:87:ae:53:6a:
         6d:e2:c7:90:00:c3:cd:79:70:87:14:ab:ae:a8:d4:25:7b:a7:
         e3:51:45:66:f0:0f:0c:ab:ba:8c:20:dd:a4:2b:c2:64:26:6a:
         cb:46:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:26:07 2025 by rpki-client