Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa
File:                     dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa (raw, json)
Hash identifier:          UP2hhBxjgVP9U+rKeSQ/rUSistQBzzaSL2F5wuw3l7w=
Subject key identifier:   E5:5F:86:02:2E:1B:4E:03:52:84:B6:13:71:93:56:18:7F:21:B1:79
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584AC8767BF1A789BCA1DDB94780
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     20454
IP address blocks:        96.47.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:7b:f1:a7:89:bc:a1:dd:b9:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=f3822206-a3cf-46b0-90e7-6885b12bac25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:38:cf:54:77:6f:c0:60:20:5e:f8:96:99:
                    59:08:df:db:4d:75:79:06:49:e7:9f:1b:54:b3:be:
                    b4:53:ea:33:74:18:28:51:b1:10:20:d8:cd:ba:30:
                    6f:bf:fe:b4:c3:f2:13:d7:36:5a:b3:27:44:4d:2a:
                    cf:f3:67:e4:be:53:78:6b:0a:be:41:5e:62:02:c3:
                    fc:ff:a9:d8:2e:58:de:a6:22:44:fd:f9:96:3f:01:
                    36:cb:30:59:32:f0:6b:88:0a:41:b6:83:42:0f:58:
                    f6:23:8c:fd:5b:06:4b:cf:ca:d2:86:38:f5:20:15:
                    5b:f1:c6:d3:97:5c:90:49:8e:72:d9:57:f8:0c:42:
                    52:ff:76:d0:8e:fc:28:b4:78:d1:30:4f:4d:3f:93:
                    03:95:6f:8b:97:67:38:ed:fd:54:a6:89:92:7b:f8:
                    fb:3a:5c:ad:41:51:6e:3d:de:28:54:6f:7c:e0:cb:
                    f3:c1:13:07:7f:b7:89:dc:d2:d9:6c:f0:cf:a8:37:
                    14:43:98:32:43:e4:70:40:6a:51:8f:d9:69:d8:42:
                    7f:1f:e7:a4:e1:cc:c5:5e:eb:c8:40:91:61:0f:63:
                    fd:cd:21:d6:1f:9f:8d:fb:d6:8f:18:79:93:6c:59:
                    95:4b:9b:31:3d:ef:d5:c9:2d:e5:3d:b5:ab:e0:05:
                    f0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5F:86:02:2E:1B:4E:03:52:84:B6:13:71:93:56:18:7F:21:B1:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6d:c7:b7:32:19:42:b1:35:22:a6:e4:28:be:51:23:fe:43:
         45:47:4f:77:b5:c7:cc:87:92:26:0b:63:96:1c:90:4c:07:c4:
         24:ff:12:f1:b0:b1:56:4d:4a:fd:91:64:41:09:66:9e:0f:84:
         dd:36:da:39:c7:dc:83:e6:fa:3c:4c:24:95:2d:35:56:83:06:
         6b:67:81:39:3b:cf:a1:14:74:c9:a2:67:a3:71:e1:ed:cd:75:
         7e:f5:d3:c3:78:d6:6e:71:29:cf:7f:94:73:fc:4e:ec:38:ef:
         5d:b3:a3:51:29:7e:6a:ae:da:29:f5:25:1b:75:7b:57:b0:b8:
         c0:8d:cf:49:81:fa:83:bd:8c:07:19:e6:7b:c7:6e:ce:8d:ac:
         a1:3e:45:e9:a3:1a:3f:9a:91:b4:71:88:10:e0:d1:04:1e:7c:
         a5:75:0e:68:16:d3:98:f8:e5:57:4d:6e:a2:c9:ca:7b:a8:5e:
         f7:e0:8d:74:51:66:a0:54:33:22:70:f8:49:b8:a9:3e:c4:b4:
         76:05:51:64:0d:e3:a3:b7:3d:5d:11:10:78:9f:01:4a:4d:de:
         df:7d:54:c1:c3:d1:a7:87:ec:f7:b2:40:10:8e:60:0f:d3:35:
         2d:c5:d3:a6:8d:e6:2f:57:c4:45:23:0c:1f:1c:36:75:d5:5f:
         da:72:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:11:45 2025 by rpki-client