Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/741ee977-8053-35a0-a477-50c699027a79.roa
File:                     741ee977-8053-35a0-a477-50c699027a79.roa (raw, json)
Hash identifier:          FhUyLEe6UmN/z0u1T94H5H7It0ydlG7r1Wrk+OWb/Ww=
Subject key identifier:   CF:91:E4:97:4B:CF:49:A3:5E:AD:1F:53:9D:0A:2E:B0:3B:34:CC:DF
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584AD5065D4C93C0BA8B0249B0C0
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/741ee977-8053-35a0-a477-50c699027a79.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     393559
IP address blocks:        157.96.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5d:4c:93:c0:ba:8b:02:49:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=c445e05b-6484-468f-a575-c9f3767a364b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7a:b4:b7:cf:cf:06:8b:13:7a:cd:bd:54:59:
                    a1:4b:cf:ae:7f:ac:10:cc:db:d5:8f:d7:e8:3c:e0:
                    be:b3:3b:a8:e1:92:88:bf:a3:d9:21:c8:14:6c:71:
                    a7:57:4b:e2:3f:47:a7:cd:8e:2f:c7:36:c1:ab:a2:
                    0d:84:fe:20:52:4a:8f:7a:ec:b4:45:9f:bc:07:09:
                    f7:55:77:50:dd:53:0c:6d:b9:89:a2:ed:18:e5:58:
                    a2:02:c0:d3:dd:3b:71:08:a3:4a:53:f8:bc:0d:34:
                    04:b0:24:cf:a5:f3:75:7e:95:22:bf:75:95:d0:7b:
                    92:38:84:49:b3:1f:6d:96:64:93:e2:5b:52:04:28:
                    e4:1c:07:12:91:ec:ad:6e:0c:8d:54:b0:27:3f:d6:
                    d7:45:c4:5f:ca:c0:a6:54:6e:25:1b:83:11:08:96:
                    c4:8c:26:a9:62:d2:62:6a:b1:cc:35:11:dc:be:12:
                    91:ba:54:74:07:14:6a:06:31:da:34:77:01:5d:77:
                    38:f4:45:37:61:58:ea:f3:c1:e3:af:5d:10:4f:84:
                    b9:8f:93:37:50:3f:22:5e:3e:6e:43:e8:05:b5:ad:
                    27:47:8d:f9:b7:a3:20:a3:c8:46:a8:eb:40:6b:ea:
                    24:3d:50:86:23:a1:a5:4e:a1:93:59:28:8f:30:0c:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:91:E4:97:4B:CF:49:A3:5E:AD:1F:53:9D:0A:2E:B0:3B:34:CC:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/741ee977-8053-35a0-a477-50c699027a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:91:41:09:8b:66:94:47:c0:37:da:54:70:b6:b4:c3:22:63:
         f2:bb:5a:a4:7c:26:50:a1:92:c3:19:7d:34:f0:05:3f:2e:3a:
         7e:96:61:06:55:0a:0d:54:79:f4:15:75:1d:63:e3:72:16:18:
         73:d6:dc:a2:82:ab:02:06:c5:68:ce:52:89:05:71:dd:68:87:
         1f:ac:e7:10:8f:2a:1b:7f:dc:c8:c1:00:ef:d7:2b:27:fd:b8:
         f5:d2:9d:e8:8b:7e:62:50:a2:00:06:5f:ba:11:18:90:b7:85:
         70:cb:1c:1c:38:74:1e:7d:1d:78:9e:18:e1:1c:cd:c2:ef:9f:
         a5:b3:7a:ec:ce:62:54:bd:be:e8:62:ad:8c:ce:c1:60:22:71:
         7a:3e:fd:5c:d3:a0:1c:b7:03:40:8d:51:23:ea:22:21:cc:63:
         a1:bc:02:c3:75:0e:f3:8e:35:e9:f8:84:ff:68:dd:64:7c:a0:
         c4:61:cc:a5:d3:eb:76:b1:5c:5b:49:71:09:ec:30:ce:de:af:
         5f:0d:96:e7:e7:5d:6a:fd:98:1f:76:09:81:d5:bb:06:10:f2:
         cd:ae:f7:35:32:ab:2b:30:c6:20:c8:c0:66:bd:be:1e:6b:7c:
         89:f1:46:7d:12:d9:19:ef:b3:67:96:07:0e:78:1f:12:c9:bc:
         de:be:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:03 2025 by rpki-client