Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
File:                     dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa (raw, json)
Hash identifier:          4B2mNGe8NnDh+1sDT0ePc5o+0wF5OQoRMa1GSGoreAE=
Subject key identifier:   A4:A2:36:72:C3:72:9A:A9:38:67:DE:D1:C2:0D:71:7E:8A:1A:7D:EF
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F43285849CBCFA41AEF6AC7A86E9DEC38
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     46632
IP address blocks:        96.45.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a4:1a:ef:6a:c7:a8:6e:9d:ec:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=8c87a532-9287-43a6-8083-515de19c16db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:63:9c:48:c4:d9:af:07:7f:22:98:7c:b1:
                    18:fb:fa:8d:57:5f:02:6a:26:cf:4c:ba:bc:59:55:
                    3d:c1:b4:39:c1:c8:7e:81:57:99:ef:cd:37:5f:21:
                    68:38:a1:5b:d3:5d:bc:85:eb:29:e3:1d:9d:24:e7:
                    5f:85:1d:46:dc:57:0f:ce:97:48:2e:e5:69:0b:17:
                    4d:54:fc:33:32:f5:34:fe:12:92:f1:c6:ce:6a:25:
                    d9:ba:81:d4:29:a2:71:5a:72:79:0b:ad:4a:9b:38:
                    6f:f0:5f:ef:49:04:09:97:6a:87:3a:7b:c8:f4:15:
                    7d:4f:48:93:21:bc:86:c9:de:9a:69:a6:f4:a2:45:
                    d9:43:43:d7:c7:e1:34:87:90:f5:99:9d:37:cd:8a:
                    6c:6b:9a:dc:aa:5c:d1:82:31:ae:ef:d8:7b:83:94:
                    bf:14:27:33:fb:f0:a5:27:7a:2f:66:42:e3:6c:c0:
                    16:9b:9c:90:e7:3b:2f:aa:f6:d4:c6:7f:3c:67:d4:
                    fd:7e:d8:6b:52:4a:a6:75:41:79:c7:c9:46:87:c5:
                    c0:df:ad:29:31:4c:db:a2:68:19:4f:75:37:ca:6f:
                    f3:0d:45:44:94:52:29:60:5e:8a:7f:70:77:69:dd:
                    40:e3:d2:f6:30:46:be:f0:61:4c:e7:76:8a:37:0c:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A2:36:72:C3:72:9A:A9:38:67:DE:D1:C2:0D:71:7E:8A:1A:7D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d8:84:9e:5d:05:8e:75:7b:7f:fe:6c:b7:15:7b:a8:bf:31:
         e3:85:63:64:62:ae:a7:06:ac:9b:b9:ca:e3:10:50:3b:08:ed:
         27:26:3a:c6:ac:63:f9:f6:0e:f6:04:be:36:11:e6:e9:f9:80:
         9c:bf:53:cb:60:35:71:e9:bc:e3:e2:fa:7f:ad:b4:97:d7:b1:
         92:98:fb:6c:e7:c5:81:13:31:90:d1:b9:c6:2d:db:fd:64:85:
         44:05:df:f9:84:d5:bf:15:87:9e:d3:8b:cf:de:87:ee:d5:58:
         40:53:56:d1:eb:e8:84:d3:8c:12:21:d6:14:58:8c:97:e9:f0:
         b6:53:a8:03:a3:df:ed:e0:16:2a:89:d1:75:d6:bf:d8:bf:12:
         74:ba:92:d8:a8:1f:cc:64:2e:8d:4f:62:e5:24:6a:17:17:c0:
         df:62:e0:78:77:75:75:96:b3:68:e6:d8:c3:c7:67:9d:37:9a:
         91:4c:b0:61:42:7c:6a:3c:d0:ba:fa:d4:65:37:24:3d:8e:28:
         04:70:57:49:bd:b1:33:a5:e8:2f:33:65:9d:28:59:bf:85:6a:
         7b:83:ed:53:cc:f5:76:42:19:46:f7:f6:41:b4:f2:9a:00:d8:
         0a:f4:bc:0a:e5:60:30:19:9d:42:01:99:e0:47:0e:56:f7:01:
         73:8a:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:14:43 2025 by rpki-client