Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa
File:                     d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa (raw, json)
Hash identifier:          4V0l7SaVNfmcwzGDCs7hZeUNr3tmn+6Ot9n9m4rgFzw=
Subject key identifier:   FA:80:1B:27:1D:4C:14:74:C4:FA:85:47:E6:91:FC:33:5B:57:8E:B9
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584A51D07570086314CE6DB95A80
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     399045
IP address blocks:        199.204.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:75:70:08:63:14:ce:6d:b9:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=5d0344e6-3f7e-4fc4-a481-3a05a57426cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:d0:7d:c6:dc:69:2b:28:02:7e:ef:0e:12:
                    ff:a7:61:48:d7:aa:0d:90:ec:cb:3c:5b:89:ee:f2:
                    d7:ca:ba:6e:92:1b:60:37:fe:39:33:2d:c0:3c:b2:
                    4b:fb:f3:e7:be:67:5c:0b:12:77:9e:1e:ff:ea:a2:
                    67:51:e1:30:6d:98:4c:b9:dd:b3:1d:72:be:6b:6e:
                    fc:58:a8:75:67:38:45:9b:07:80:8b:b3:b9:cf:4d:
                    dc:33:5d:fe:02:16:0f:27:f3:40:1c:5b:e0:fd:da:
                    59:4b:f2:57:7b:ca:64:d1:d6:79:b3:6e:19:7c:9b:
                    f9:09:bc:e7:19:56:8e:a2:18:c6:ca:b2:0d:41:09:
                    ed:5b:3d:98:11:f6:c3:cb:be:2d:84:3b:c4:4b:53:
                    79:b7:97:09:2d:2e:1e:70:51:1f:36:75:ca:df:98:
                    5e:84:af:e0:d0:12:98:24:a2:de:70:55:9f:6f:46:
                    f6:72:05:47:e9:b5:10:9a:43:3e:c6:51:f3:21:7a:
                    c2:11:c6:2e:ee:46:4d:36:0e:85:41:ce:c0:de:eb:
                    12:50:8d:71:ea:ab:19:e1:15:23:16:84:fe:44:e9:
                    86:9e:b8:ef:8d:a5:a3:9e:cc:ae:7a:f4:89:c6:c9:
                    99:18:fa:eb:e6:12:92:ec:4e:59:71:82:59:60:da:
                    58:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:80:1B:27:1D:4C:14:74:C4:FA:85:47:E6:91:FC:33:5B:57:8E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/d93bb1f0-ee76-3412-a878-7ecf4bec8eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:08:ed:7f:bf:f9:34:8a:8f:ec:7b:93:a8:0c:55:55:1a:a8:
         ed:69:50:81:f1:27:8c:34:13:e7:70:dd:f0:2b:30:70:11:65:
         0e:ff:b7:66:01:62:0b:8f:1a:6b:21:81:c3:eb:85:89:db:57:
         e1:a3:67:14:dd:11:e9:1d:59:08:fd:6d:33:65:e8:e3:a3:ee:
         00:b6:47:3e:65:7e:58:fc:8d:6e:0a:34:11:54:5d:4b:be:3a:
         61:6a:1f:84:3f:12:a4:2e:5d:25:48:7c:95:24:da:24:1a:0c:
         98:12:5d:7a:92:d7:d3:b3:df:5a:5e:44:cc:20:4c:50:c1:de:
         e3:66:57:26:2a:d9:f1:c2:e0:a7:fd:81:7b:11:38:94:24:62:
         5e:68:fb:36:f9:53:cb:d6:21:ea:65:26:34:19:89:2f:1a:99:
         44:c1:f8:78:20:4d:5e:8e:6b:ae:b3:84:74:95:5f:e1:5e:ed:
         b9:b0:5b:f8:47:2e:e0:62:16:98:af:1e:d0:46:a2:a6:13:c4:
         a5:d4:50:8a:2e:6e:46:4a:39:c0:4c:e1:5b:af:8c:ab:40:94:
         43:b8:86:c8:91:ad:b9:07:19:b2:83:17:3f:74:2f:bd:22:d4:
         a5:75:7f:6f:ba:3d:8d:b8:25:1e:5f:8b:9c:65:56:64:01:65:
         d7:a1:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:05:24 2025 by rpki-client