Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6462fbf4-58ee-344b-a6a0-6ed5922c15b6.roa
File:                     6462fbf4-58ee-344b-a6a0-6ed5922c15b6.roa (raw, json)
Hash identifier:          A8QQXdP+JAI3MbmYnG99VOXwLTDW845IgLPAiZFLqOs=
Subject key identifier:   64:F2:A2:82:B2:A7:43:23:1D:67:A1:B6:75:03:AA:C5:81:B1:68:66
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584A88409BF76BCBECAF64DFF6D0
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6462fbf4-58ee-344b-a6a0-6ed5922c15b6.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     40934
IP address blocks:        96.45.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9b:f7:6b:cb:ec:af:64:df:f6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=498b7c94-179a-47b8-9a9b-423445abed57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:c1:59:44:6f:a7:4b:be:02:17:ff:1f:e5:
                    41:96:8e:75:71:bb:3c:ca:02:71:a0:c1:c8:42:12:
                    95:f3:da:1d:3e:c8:34:39:7f:1d:00:10:f1:c3:dd:
                    6c:6c:f4:7d:55:7a:ff:ba:81:5b:ca:0d:61:24:06:
                    4f:a2:ec:03:66:23:bd:cb:6c:a8:16:61:38:39:2d:
                    e1:98:49:f8:a3:81:e6:b2:14:b7:c7:11:e5:39:12:
                    4d:e9:50:ed:d2:d0:04:3a:74:b9:55:fc:37:69:a9:
                    dd:ae:cd:96:24:ec:a2:93:2a:63:c9:04:0b:a6:2d:
                    f8:bc:ea:f5:54:5d:39:83:c9:9f:5f:71:55:1a:01:
                    0c:59:a9:c4:72:12:45:41:df:2f:51:84:75:6d:df:
                    c9:ad:8c:c0:81:1d:ed:ee:b8:9b:ac:c5:0a:3d:c7:
                    0d:bc:df:2c:76:22:70:e7:31:58:52:06:4e:b6:36:
                    ff:a0:23:4f:81:20:3c:f2:f0:8a:66:57:8e:59:b7:
                    db:a1:c6:c8:00:9b:4f:4d:6f:38:b0:b3:a5:af:e3:
                    6d:b5:7a:e7:83:a0:f3:37:4a:94:7d:0e:28:da:ea:
                    ff:76:0d:54:70:79:90:3d:01:a9:83:36:8b:16:31:
                    f0:11:a3:5f:1c:5a:81:23:33:0a:08:da:5a:7a:b1:
                    22:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:A2:82:B2:A7:43:23:1D:67:A1:B6:75:03:AA:C5:81:B1:68:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/6462fbf4-58ee-344b-a6a0-6ed5922c15b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:99:de:ad:ed:06:bd:8e:dd:7c:7f:36:13:67:c9:52:7f:7f:
         9e:51:51:01:ea:50:a0:23:0b:ca:c7:37:67:4e:b4:05:a0:d1:
         0f:78:c4:f7:86:9b:4d:54:c3:29:c0:a4:7d:e5:2b:3d:ee:19:
         13:d6:09:c8:c0:60:be:ec:11:ba:97:66:5a:75:9d:25:85:f7:
         99:10:5a:cb:c7:f3:9c:19:3c:d8:66:b9:ef:fa:d4:ce:9c:46:
         32:dc:b0:56:4b:37:86:4b:7e:c3:50:cc:60:53:fd:2a:ca:ac:
         81:b5:3a:e6:58:c0:d2:81:d6:3a:e5:a1:c9:67:b7:b1:16:48:
         91:e6:5b:a3:b4:5e:e8:a9:07:3a:0b:6e:9e:74:14:60:ca:b1:
         54:c3:e7:6a:e3:96:51:2d:81:83:13:7b:06:7f:c2:db:de:4f:
         66:a2:7a:c3:76:cc:28:a6:db:cd:fa:8e:e3:8b:c8:8c:b9:e1:
         22:b1:92:fc:98:bd:d7:8b:d4:31:0e:0d:67:2a:a2:5b:fc:84:
         63:60:c6:d1:03:8a:4b:7e:48:c1:2d:d3:57:10:e8:28:8e:dd:
         8c:d9:e4:1d:1d:3a:9f:46:6b:32:af:3f:58:f0:3d:cd:9d:07:
         0f:ad:8b:36:11:50:6e:52:cd:b0:bb:4a:41:36:40:c2:c7:9a:
         2c:0f:d6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:37 2025 by rpki-client