Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/9d53b829-9890-324f-b053-8b6944b76eb0.roa
File:                     9d53b829-9890-324f-b053-8b6944b76eb0.roa (raw, json)
Hash identifier:          z4j+9gcD1PGySuewBp4DxVCRffo3aUgBOgQkTa8itmY=
Subject key identifier:   AF:8B:B4:A1:5E:09:08:C1:B9:B2:93:CA:4E:FE:B9:AF:8B:6F:B9:77
Certificate issuer:       /CN=7501a1dd-4319-41d7-ae3c-47b80ada88d5
Certificate serial:       010D0C9F4328584ADECBBD95216EC1FC58976480
Authority key identifier: 10:FF:20:8D:66:BB:0C:D0:FA:54:73:55:6E:69:67:49:FE:4D:30:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/9d53b829-9890-324f-b053-8b6944b76eb0.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     15278
IP address blocks:        216.105.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/7501a1dd-4319-41d7-ae3c-47b80ada88d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/7501a1dd-4319-41d7-ae3c-47b80ada88d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:bd:95:21:6e:c1:fc:58:97:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7501a1dd-4319-41d7-ae3c-47b80ada88d5
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=967396ca-7055-4335-b881-0cc17ac451b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:82:da:a2:b5:6e:90:e7:c1:a9:94:2d:aa:
                    33:a8:76:cd:1f:18:9b:fa:ed:aa:f0:e9:d7:4c:51:
                    46:9c:99:dc:9f:d8:85:ce:fd:a7:d2:15:ef:87:43:
                    b9:4d:2e:d4:ce:1e:57:ed:18:45:08:14:cb:fa:18:
                    df:d7:3c:33:99:99:ed:ff:be:7e:cc:06:11:5a:75:
                    37:12:24:0f:04:99:d2:09:06:30:e7:eb:a3:8c:c4:
                    1d:dd:e4:aa:8c:29:25:72:a4:8a:5e:68:27:c0:14:
                    43:06:1b:7f:d7:30:ea:32:59:9a:cb:68:c7:e8:18:
                    f5:02:0a:08:48:6f:ca:bc:d8:7d:d4:b8:86:6e:c2:
                    00:42:38:25:05:ca:1c:04:86:29:34:68:e2:7d:f4:
                    5e:6f:2d:ee:c8:1b:de:ad:4b:f9:36:e6:3c:7e:17:
                    ab:55:c0:e1:98:34:0b:36:9a:6f:17:05:74:56:74:
                    02:f4:a5:b6:ba:4f:fd:65:78:f8:d4:1b:73:51:a8:
                    50:31:18:52:60:a8:b3:9c:b3:68:5f:b1:6a:3a:7d:
                    83:78:70:a0:05:14:03:c5:ec:ba:6b:38:42:e6:c8:
                    90:5d:86:f9:cc:50:a3:fe:81:7b:4b:51:3c:b9:b7:
                    a7:e4:93:88:5a:3e:da:3a:b9:68:03:98:aa:82:9c:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:B4:A1:5E:09:08:C1:B9:B2:93:CA:4E:FE:B9:AF:8B:6F:B9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/9d53b829-9890-324f-b053-8b6944b76eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5/7501a1dd-4319-41d7-ae3c-47b80ada88d5.crl

            X509v3 Authority Key Identifier:
                keyid:10:FF:20:8D:66:BB:0C:D0:FA:54:73:55:6E:69:67:49:FE:4D:30:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7501a1dd-4319-41d7-ae3c-47b80ada88d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:85:35:55:94:40:3c:85:4c:06:1c:b5:bc:75:ac:bf:ed:06:
         71:05:6b:bd:89:fb:fb:80:74:23:19:d8:48:30:7f:e1:35:14:
         31:e2:be:82:64:96:c9:d3:37:7a:b9:9a:3b:4b:a0:46:d4:62:
         2d:b9:c3:c0:82:be:49:c4:93:9a:c7:76:bf:0b:85:19:a0:b7:
         f8:20:37:fc:c2:88:9a:87:47:02:52:d7:86:1e:52:c7:21:8a:
         e3:06:98:72:bb:ec:b7:ef:35:b6:df:6a:a2:c3:55:6f:9e:bf:
         58:d2:3a:6f:25:2f:35:5a:cc:f7:9c:d0:d5:1f:7f:79:92:a9:
         6e:97:14:24:b5:44:38:a8:fd:ef:0c:48:49:64:23:8c:6b:be:
         56:9a:2d:76:0e:54:55:6a:ed:9e:89:cd:a5:7a:f2:2e:c5:05:
         97:bb:a5:80:8a:e6:d7:d9:3c:10:9b:24:d4:1c:28:c6:da:94:
         f6:c3:c0:82:1d:19:29:ec:ad:96:08:ec:23:d7:f6:3a:ae:0e:
         59:eb:5f:d1:bf:8b:3c:1d:eb:54:c6:6b:03:43:7a:f8:e4:4a:
         fe:68:eb:dc:47:88:d0:17:24:67:14:e8:10:98:8a:87:83:2f:
         8e:90:58:1b:d8:59:2c:6c:de:35:7f:63:ca:93:01:61:56:8a:
         23:9a:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:43 2025 by rpki-client