Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa
File:                     cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (raw, json)
Hash identifier:          IzrW9wUiDtyGfkfRsjSnKoP5nrPj7WEt9UbujtF0TLE=
Subject key identifier:   81:40:E1:D2:CA:C8:26:ED:EA:7B:BD:CF:25:D9:47:E5:A0:D8:41:29
Certificate issuer:       /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011
Certificate serial:       010D0C9F43285849FCAA75776DB42D4BC62AAC80
Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     395927
IP address blocks:        172.83.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:75:77:6d:b4:2d:4b:c6:2a:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=7168fe76-54ff-46f2-b636-952d90a7d0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:04:fc:d6:5f:ff:1e:d0:87:3b:f3:d0:57:83:
                    51:3e:6e:72:b7:b6:c2:a0:00:17:3c:44:f3:cd:cd:
                    47:65:60:04:c9:2a:6a:da:13:79:0d:1d:3e:e9:81:
                    8d:a9:8d:01:d1:fb:5e:ec:bd:bd:dc:23:bd:5a:25:
                    b8:be:96:34:a2:5e:19:55:23:ea:85:6b:88:50:62:
                    a8:03:eb:54:f2:1f:31:cb:8a:e8:f6:21:14:6a:78:
                    e4:2d:c0:c5:c9:69:e3:50:6b:3d:c5:09:f6:0f:b6:
                    c4:3b:d0:15:8a:70:f0:ac:f4:32:32:91:99:34:2c:
                    0b:75:1a:d0:de:9a:59:8d:7a:bf:d1:00:88:87:51:
                    f5:07:cb:1c:4c:0c:f5:3f:50:33:ca:a7:c9:77:c3:
                    0b:1a:03:88:56:05:d7:12:51:71:b6:f1:92:c8:de:
                    96:8d:49:9b:5e:d2:2d:32:c9:7e:50:d1:a6:54:9f:
                    2e:64:88:dc:ff:2b:c0:e5:de:73:92:2d:bc:7f:2d:
                    e1:70:cc:42:cf:16:eb:93:c8:bb:75:fd:23:af:21:
                    21:3a:df:a8:28:fa:85:74:8b:2f:23:45:52:5f:2b:
                    02:76:47:e4:a3:87:4d:13:10:b7:11:b7:3d:87:0a:
                    91:84:02:1a:1d:b6:38:79:97:5d:67:d4:56:7c:c2:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:E1:D2:CA:C8:26:ED:EA:7B:BD:CF:25:D9:47:E5:A0:D8:41:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl

            X509v3 Authority Key Identifier:
                keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fd:67:07:76:76:8e:05:d8:08:c3:3c:13:0c:81:11:99:91:
         d0:ee:e6:8d:da:c9:95:b2:76:06:c1:66:0d:8e:75:9d:0f:f2:
         69:59:d2:b0:f4:e4:b8:ea:fd:71:32:7d:50:45:77:0f:ab:29:
         bb:63:3b:78:3e:d9:b3:8e:21:db:22:a8:c0:94:76:99:15:8e:
         9d:60:f2:7a:ca:e4:01:10:95:0c:03:ad:1b:6b:1e:4b:38:fb:
         7b:9b:40:34:d7:da:d8:b0:88:2f:d0:41:23:da:12:47:21:6f:
         b9:fa:83:b5:f4:a2:fb:10:21:e8:77:08:55:6a:16:d3:a8:6d:
         b5:9d:a4:77:3f:9d:09:c2:41:64:a8:f9:86:c5:97:eb:96:83:
         b2:bf:28:1d:f2:16:7d:94:e8:e8:35:70:35:ea:f9:3e:6a:0d:
         d7:c4:a1:cc:67:3d:bb:ff:0d:06:ed:2e:39:74:de:22:7a:d1:
         f4:4c:25:94:ab:96:06:c2:c0:95:4f:72:f0:e6:f7:64:93:97:
         19:7c:ca:5a:02:74:9e:66:13:61:a8:0f:92:49:1e:48:2f:85:
         2a:9b:d8:ed:1a:9c:64:5e:7c:70:80:8d:df:30:23:aa:6c:6e:
         83:7a:6c:59:c5:8b:fd:4e:ce:e2:c6:25:6b:2f:76:ab:e8:25:
         c8:13:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:51:51 2025 by rpki-client