Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b01b2b-4c29-3c70-ab94-14a991f5778d.roa
File:                     d9b01b2b-4c29-3c70-ab94-14a991f5778d.roa (raw, json)
Hash identifier:          GfspCqoRBkmAPPt4UbRCXPTzpOjSB1pT8ebkT1dMXjI=
Subject key identifier:   6C:C4:71:CB:77:7A:F2:BA:18:89:F0:0F:BE:36:A2:5A:3D:6E:20:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E118DBFB3F054FD41EEA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b01b2b-4c29-3c70-ab94-14a991f5778d.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        96.7.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:18:db:fb:3f:05:4f:d4:1e:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=b31d7ece-07d6-4170-b089-dae7201b9760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:e4:cd:6b:64:88:57:29:90:e3:06:57:b5:
                    22:ef:82:dc:32:cb:41:79:72:e6:97:15:c1:c8:7a:
                    3d:9c:d9:56:69:02:0d:cb:40:e0:e1:19:83:37:6d:
                    91:c8:b8:39:1a:14:3b:a4:b7:2b:3e:ff:77:39:17:
                    75:6c:13:96:1f:89:25:c3:44:e5:39:c9:33:49:ec:
                    30:ff:4e:d9:ab:c8:04:76:79:00:20:d5:d6:23:92:
                    28:65:e1:ae:b6:d6:17:65:a1:9a:db:4c:ca:8c:39:
                    86:08:48:6b:cf:b4:92:98:d3:a5:6a:45:a9:bc:47:
                    14:27:78:1b:94:91:ce:31:ac:06:71:1c:f6:05:02:
                    ba:0c:48:66:8a:c6:58:0d:c1:a9:8d:d5:a2:68:e0:
                    36:83:7b:72:f0:24:d0:b9:20:fe:3c:d0:c6:c8:2a:
                    e3:3e:3e:eb:b8:97:03:d5:07:d7:fd:ac:40:43:2b:
                    dc:ad:be:5c:ff:e0:81:3c:27:0b:84:5d:7c:61:1f:
                    6b:4b:46:3f:c6:c2:bb:ac:28:9e:ad:61:87:b7:e1:
                    51:b9:7c:c6:2f:c2:dc:f0:96:e9:36:d7:8d:e9:f6:
                    21:cf:fd:9d:0b:90:0f:68:a4:4b:6a:0a:3d:58:65:
                    28:71:19:3d:70:58:ef:c9:02:0b:23:1b:55:a1:db:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C4:71:CB:77:7A:F2:BA:18:89:F0:0F:BE:36:A2:5A:3D:6E:20:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b01b2b-4c29-3c70-ab94-14a991f5778d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:f9:61:73:1a:5d:42:a3:2a:67:f3:d9:2e:67:49:bd:12:
         f7:40:15:9f:01:b8:c6:86:9e:f6:dd:e6:fe:b6:5d:8c:1d:01:
         b3:11:a4:b2:95:ec:1a:c7:ba:6d:d5:c7:a9:a0:7b:04:cb:1c:
         76:bd:1e:84:f5:db:1a:b8:5a:e4:15:43:26:af:2b:ac:09:a8:
         c7:07:4a:7d:e7:0e:da:7c:4c:37:6a:db:10:5f:77:5a:2c:ec:
         0e:ad:61:b2:07:73:6c:0a:20:71:3d:95:c4:95:b6:cb:75:88:
         10:ed:4d:44:1c:4b:c6:48:05:57:99:f3:62:cf:54:a9:a5:a7:
         6c:59:e7:ab:26:49:c5:a8:54:f4:94:da:79:ba:5a:c8:1a:ef:
         7c:1b:2c:22:18:18:6f:9a:0a:6f:bf:6b:96:08:19:a6:b7:65:
         04:09:8f:bc:d7:ef:79:b6:ac:bb:16:e9:49:25:4c:12:6c:a3:
         09:ff:6a:dd:09:49:93:f4:8a:04:e3:94:9f:5b:d3:9d:f5:21:
         34:0c:79:e5:20:4f:3b:22:06:67:30:23:ac:64:7c:40:fb:a2:
         5b:a9:e8:f2:75:2e:0a:24:48:ab:05:51:38:b8:77:fb:90:be:
         fb:2a:89:0f:86:f7:bf:58:5f:57:47:fc:87:bf:05:ad:b1:4a:
         e3:b1:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:13 2025 by rpki-client