Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f72f8e6f-43e1-31d3-a7e9-6d9154a7b4dc.roa
File:                     f72f8e6f-43e1-31d3-a7e9-6d9154a7b4dc.roa (raw, json)
Hash identifier:          DQOd4pg73UzQHmE/7pCWXq5CoUaF06pFI8qDFsdHMS4=
Subject key identifier:   1F:91:75:6F:DE:27:59:5D:16:91:64:66:A3:A2:95:80:89:D8:52:10
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584ADECBBC3A2C5AE4DFF9779500
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f72f8e6f-43e1-31d3-a7e9-6d9154a7b4dc.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     10430
IP address blocks:        207.180.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:bc:3a:2c:5a:e4:df:f9:77:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=5ff31443-6564-4f13-8004-ce607a6c99b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:07:3f:d9:53:c3:b8:9f:b0:93:3f:bb:5d:64:
                    0d:d8:89:e6:72:a0:c3:c9:d6:d8:41:ea:2c:de:c7:
                    1b:54:e2:e6:b9:a7:43:4b:33:23:49:05:34:ba:6e:
                    3a:d3:1c:c1:3c:fc:82:89:88:aa:56:4c:8f:7b:3e:
                    66:0c:1a:79:ac:cd:2d:8f:4c:48:9f:c3:ba:a2:77:
                    72:d3:30:e7:36:1b:70:22:76:2c:05:32:b5:d2:43:
                    9a:df:8b:8d:87:84:f9:57:3e:cd:0c:bb:60:1d:db:
                    2c:6c:57:36:14:ed:8e:54:45:46:20:fb:a7:30:b3:
                    4d:6f:99:f6:cc:4b:f4:65:b6:8c:e3:68:f9:62:8c:
                    40:58:15:e3:b6:2c:a0:31:de:96:f6:e5:8c:c9:c5:
                    a9:11:33:f5:7b:ab:41:60:98:b6:2b:33:33:29:ea:
                    16:3e:62:ce:91:d3:14:19:57:73:c3:44:46:27:21:
                    64:7f:5c:7d:ed:e4:fa:1a:ee:8c:ce:f9:e7:1d:eb:
                    a7:6b:3c:ef:3c:10:c8:f5:a6:bb:15:e1:90:a1:16:
                    4c:e4:48:90:14:1f:c8:ca:a0:c8:31:eb:e8:21:1a:
                    21:6c:f1:f6:ce:ac:29:dd:4e:f3:70:68:fe:54:eb:
                    25:09:23:12:91:af:80:1e:ad:8b:44:23:dd:81:a9:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:91:75:6F:DE:27:59:5D:16:91:64:66:A3:A2:95:80:89:D8:52:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f72f8e6f-43e1-31d3-a7e9-6d9154a7b4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:fc:ad:ce:10:de:43:ec:18:6c:8c:28:00:e5:33:9a:83:
         dd:ad:70:fb:f3:c8:f1:69:88:17:e3:1d:51:59:1b:2c:dc:92:
         d1:c4:12:95:68:0c:61:03:f0:99:ee:e2:74:1c:43:e9:e9:a3:
         cb:44:fd:29:6e:a7:80:30:3c:26:e4:c5:3a:cf:f3:c2:e8:a2:
         83:b9:50:cc:30:3f:e3:63:66:18:53:7f:c2:0c:3f:25:82:7d:
         f7:4e:9a:26:76:54:94:c1:8e:ce:c2:70:35:87:7e:9e:b4:ad:
         34:74:f4:2f:a0:f3:5d:e6:84:95:11:f1:bb:05:d6:88:31:d6:
         bc:a2:a0:95:d3:9a:07:8d:ef:84:ad:f7:c6:f5:ec:8a:4b:eb:
         e9:a3:a6:89:4f:01:dc:89:55:f5:f4:fc:f4:ef:bb:b4:63:f0:
         56:65:4a:9d:06:af:79:22:05:08:ad:a7:12:2f:d5:c6:92:b7:
         fe:0f:fa:d6:eb:86:e3:f0:02:bc:bd:66:c8:d3:da:45:33:b6:
         5e:9e:2a:44:ab:47:de:f7:4a:7a:f1:4a:5e:b4:53:34:6f:63:
         46:0d:8b:18:e6:6a:0c:1f:67:21:e6:d5:4b:ef:4f:ce:d0:54:
         18:4d:f2:ea:cd:06:43:34:69:66:96:48:0b:66:c7:59:b8:db:
         92:1c:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:08:12 2025 by rpki-client