Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/9e44bc16-4835-33f8-b091-c87a69768d77.roa
File:                     9e44bc16-4835-33f8-b091-c87a69768d77.roa (raw, json)
Hash identifier:          X6qSjpHSeqVQ736R50u76CkFwg/0U74xCB+JYHztGzc=
Subject key identifier:   F7:5C:6B:AC:2E:71:4E:D8:48:C9:CB:61:08:8F:74:0F:1E:D0:50:F7
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F4328584A4C3B0E66D72B9B9BC4F3FE00
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/9e44bc16-4835-33f8-b091-c87a69768d77.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     394840
IP address blocks:        199.34.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:0e:66:d7:2b:9b:9b:c4:f3:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=41a8bc49-2e1c-447c-8dcc-ace6871ea6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:10:3a:dd:42:46:bd:a4:d8:df:9d:73:a1:86:
                    c3:1b:74:cb:d1:e1:41:b4:7c:0a:53:b8:f7:00:af:
                    fc:2a:b5:a7:ee:98:b5:99:bd:f5:fc:83:c9:ff:da:
                    bd:10:8b:24:02:e1:82:bc:71:93:19:49:c5:e5:92:
                    40:31:2d:b9:0e:fe:29:35:0b:1b:3f:1c:f1:8b:28:
                    a6:de:16:a2:dd:83:b8:ef:33:cd:2b:a1:69:67:c8:
                    1e:26:61:0a:66:b2:05:39:cf:1c:a9:60:df:90:fa:
                    a9:c3:22:a3:a6:ac:b4:41:59:dc:ec:26:69:e5:c7:
                    7f:23:df:6d:e1:de:7c:66:12:f3:9b:49:df:5f:3e:
                    99:b1:bf:43:23:f0:04:b5:80:18:69:da:d9:47:64:
                    35:77:7f:12:45:3b:82:fd:c2:7b:62:bb:e8:f5:66:
                    5c:5e:e1:b1:08:cf:98:27:5a:6c:a3:73:3e:61:f3:
                    14:b9:3f:e5:06:eb:e4:f7:e0:7b:c6:a4:3a:ef:07:
                    70:40:e0:f1:e7:1c:e8:ca:74:d6:3c:5e:0a:3e:81:
                    ef:73:16:41:ba:51:f8:41:70:0a:ac:4a:69:9b:06:
                    3c:dd:5b:1f:ee:8f:18:1f:64:07:cd:f9:25:40:09:
                    34:33:02:47:62:35:89:6e:69:57:ca:bf:39:8a:20:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5C:6B:AC:2E:71:4E:D8:48:C9:CB:61:08:8F:74:0F:1E:D0:50:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/9e44bc16-4835-33f8-b091-c87a69768d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:a9:42:13:38:20:43:d4:b2:71:cc:25:18:d9:4a:31:00:
         83:1f:b7:ad:f1:0a:6e:ba:75:a1:bf:39:48:f5:0c:3a:a8:38:
         6c:70:2b:b7:84:77:95:9d:58:8d:3f:06:38:4a:8f:ea:83:52:
         13:c3:8e:e3:a4:93:0e:c9:98:29:e8:90:7d:6f:52:dd:8c:d5:
         9a:09:cd:40:f4:ba:31:a2:a6:79:e6:af:ba:01:f6:4d:06:bd:
         df:fc:36:f8:91:7c:c9:4c:1c:3e:7a:f3:b8:4c:55:3b:b7:83:
         e2:22:7a:ce:ac:a2:1f:95:70:eb:39:6e:2a:22:71:42:d7:2f:
         e4:6c:1f:ee:ef:e4:7f:2c:9e:69:e2:c3:b5:bc:a2:a2:63:f1:
         60:80:af:9f:3c:19:85:69:80:44:fb:ad:15:42:c5:5f:b4:0a:
         81:6c:65:93:5c:86:11:1a:cb:99:78:9f:ea:6e:0e:6c:c8:bf:
         e2:31:f9:89:60:01:e1:4b:fc:aa:98:af:7e:69:f2:e1:07:d2:
         98:fa:9d:99:4d:09:68:79:0d:49:e8:68:9f:a7:ac:c0:c1:99:
         42:85:98:b7:55:cf:31:1f:d6:0c:69:c7:39:ac:a4:d2:ee:da:
         2e:0e:7a:1b:23:f8:7b:84:53:20:4d:79:91:60:af:a8:20:3c:
         46:d8:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:33:21 2025 by rpki-client