Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb2e2cb5-e7f4-35cf-9fd1-10e161c50684.roa
File:                     eb2e2cb5-e7f4-35cf-9fd1-10e161c50684.roa (raw, json)
Hash identifier:          BbrcV3reM5zcnswyrtoqKBHPh1HQHcmPdz0fnqpOjFQ=
Subject key identifier:   2D:7F:6B:FB:35:A1:1D:FC:A3:0A:55:8A:88:C1:9A:58:26:C5:AF:4E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E112A93EA6EC08AEBA1100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb2e2cb5-e7f4-35cf-9fd1-10e161c50684.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        96.6.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:12:a9:3e:a6:ec:08:ae:ba:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=9eae188b-8ba4-48c0-b92a-4d387a58900b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:be:77:32:81:d3:1c:8f:03:87:3c:5c:02:
                    d5:7c:32:00:b6:46:18:57:60:3b:8d:63:cf:50:fd:
                    bb:8e:1b:c5:3c:d2:48:d5:64:95:15:e6:7f:d3:26:
                    a6:5d:5f:be:76:9e:26:c4:19:d7:9c:8a:aa:b3:46:
                    28:c2:d1:e8:31:a4:b5:a2:78:a1:d8:85:9f:ff:a6:
                    30:91:7f:48:69:4d:1f:3f:9c:0a:17:91:2b:4c:92:
                    94:b6:70:06:31:19:c3:43:2d:4f:c7:c7:bc:e8:4b:
                    f4:aa:b0:89:9d:58:93:24:8f:64:ce:bf:73:80:7b:
                    c2:4b:7f:e0:4d:54:06:cf:5c:09:ad:6f:84:47:c2:
                    cb:68:1b:3d:0c:cc:17:8a:ee:62:cc:f6:97:e7:bf:
                    90:c4:c0:46:62:2d:30:33:95:da:18:83:08:d5:23:
                    6d:c6:3d:ce:c0:7d:47:a2:18:15:a7:c4:19:99:b1:
                    3e:13:60:0b:66:2e:f7:35:0a:d6:86:5b:d2:f4:c8:
                    74:6e:5f:59:dc:f1:a2:8f:77:6f:c0:e8:40:d5:9e:
                    b3:11:e8:7f:66:75:50:d4:50:26:85:3e:97:74:70:
                    f4:37:63:bb:33:6f:c7:e6:a7:e8:ad:ad:79:bf:9d:
                    14:9f:2a:cb:15:00:21:c1:ca:40:8c:ae:86:ca:04:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7F:6B:FB:35:A1:1D:FC:A3:0A:55:8A:88:C1:9A:58:26:C5:AF:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb2e2cb5-e7f4-35cf-9fd1-10e161c50684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.6.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:84:4a:0b:bd:54:c0:86:93:7c:a0:80:35:17:77:10:3a:fc:
         e2:71:9b:51:46:e9:7f:e4:44:db:dc:4a:10:9a:d6:6c:ce:48:
         56:f2:3e:e4:b6:e2:30:49:6b:bb:c9:f3:38:35:ac:1c:96:98:
         a9:b2:45:41:0a:42:d0:ac:84:e6:b2:d0:a9:34:00:97:e8:49:
         70:70:ac:7f:0d:1f:a8:3e:0b:44:b7:e5:1c:7b:f2:76:ff:72:
         63:81:cc:a8:d8:a1:69:a8:e2:3b:4b:25:a1:ef:8e:97:25:ae:
         e8:d5:05:09:05:f7:c0:3b:5b:a8:29:f7:85:3f:e9:c2:9e:1e:
         81:5c:d9:1f:22:31:9c:0d:ec:ab:90:3c:86:60:13:c9:ff:df:
         08:76:e0:6d:32:e4:9b:97:c4:0e:02:17:e0:e6:79:f5:28:be:
         f4:35:eb:22:6e:d4:15:e1:3d:a2:cb:10:96:60:18:16:ed:8d:
         87:a5:6d:ed:0e:d8:ab:4e:2d:f7:e6:c4:1f:9f:2c:02:59:93:
         24:b4:14:3c:1c:d4:ac:21:63:2c:eb:fa:f2:50:87:8c:08:87:
         2d:81:7f:ce:a6:5b:78:2d:41:f3:fd:e2:51:f8:a2:97:8f:5d:
         45:9b:76:73:c8:62:7d:b7:40:2b:fd:64:7f:b7:85:1d:ac:01:
         b9:a1:11:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:31 2025 by rpki-client