Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/69ec17af-8684-3f36-8ab8-61fd2481a2df.roa
File:                     69ec17af-8684-3f36-8ab8-61fd2481a2df.roa (raw, json)
Hash identifier:          bTvwCknc+vv3W0Z3Q3i/1rFmp3SYBGdXx+pv9v4Q9b0=
Subject key identifier:   C6:2E:69:74:91:96:BE:9D:37:53:08:49:95:5A:54:04:30:18:42:BE
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584AC876443950155A3977B2A210
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/69ec17af-8684-3f36-8ab8-61fd2481a2df.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     396998
IP address blocks:        64.52.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:44:39:50:15:5a:39:77:b2:a2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=3ab09ffd-8a1f-46c5-858b-45e73a47926b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:92:01:35:c5:9b:1a:e9:c4:54:0a:91:bf:
                    07:c1:b9:74:09:dc:43:44:28:db:8e:49:c7:82:23:
                    f5:b4:80:ee:0c:9b:64:1a:10:e6:c6:d2:7b:29:7f:
                    a2:24:68:f1:fe:90:50:6a:06:92:78:6d:34:02:01:
                    ba:70:6e:54:b0:6c:56:14:24:8e:65:10:45:d6:78:
                    0d:98:5a:6c:a7:6e:4f:3d:da:e4:32:7c:bf:9e:ea:
                    a8:6b:47:61:0a:5f:da:87:48:e7:17:57:cb:1e:0a:
                    7d:26:3c:23:e8:4b:bc:2b:b8:2c:80:c2:5e:ed:cf:
                    7c:72:51:97:02:02:de:35:e0:3d:21:fd:02:21:d2:
                    51:16:6a:60:e5:28:3a:1c:7b:0b:5e:8e:d5:ff:b7:
                    14:35:3b:b8:6f:52:85:8a:2a:0e:9a:11:3c:a9:13:
                    f7:73:9f:e2:fe:e9:fb:79:b7:1b:69:ae:6b:1b:cf:
                    20:47:b4:86:9c:c3:b9:96:3b:50:fb:e1:2b:7b:cc:
                    e8:e9:30:c1:46:97:dc:45:60:c9:35:39:c7:96:2b:
                    e8:e3:5c:d8:fa:e7:50:d8:a3:ba:cb:a8:83:f4:5a:
                    e8:78:74:ae:d5:ca:bc:17:75:f9:1f:46:7d:77:8a:
                    0d:9b:50:37:fa:2c:e3:86:49:da:da:8e:d0:11:4d:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2E:69:74:91:96:BE:9D:37:53:08:49:95:5A:54:04:30:18:42:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/69ec17af-8684-3f36-8ab8-61fd2481a2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:15:28:44:3c:dd:05:b0:cf:dc:57:3a:8a:5c:5a:ed:90:
         6b:c8:e0:3d:df:d6:ee:ef:18:5c:7a:1c:4c:ec:65:30:32:17:
         c0:4f:a6:b5:19:ce:c8:ed:e6:5d:e0:d0:c0:bf:53:dd:90:2f:
         5a:14:30:91:d4:12:23:9d:5c:b3:95:bc:6c:57:a7:3c:74:0e:
         0c:28:f6:e5:f8:0f:d4:f1:8e:9f:4c:d5:1d:7e:a8:65:9e:be:
         9c:75:86:6d:89:58:89:cf:42:a8:8d:c2:e3:4d:01:7b:ad:4d:
         55:d6:be:d2:40:7b:23:0a:3a:9c:72:32:38:e4:af:d6:5c:89:
         84:85:d8:a7:e1:67:16:a6:cd:93:4b:84:95:00:d9:69:ae:95:
         73:86:3a:62:e4:6c:df:e9:21:a8:84:6f:ef:80:9e:e6:44:50:
         4d:a8:6b:66:8a:c7:a7:10:0c:a6:e3:6d:d4:6b:81:16:52:c0:
         e9:74:9d:e6:ed:14:a6:39:73:58:fd:97:c8:51:f0:15:d9:b3:
         28:26:74:74:5f:c3:c5:56:1d:91:8c:06:55:1f:fa:15:ec:0f:
         0e:ad:1e:de:a2:fc:3c:b5:f2:10:bf:66:ea:76:b2:8c:90:68:
         d2:8f:27:41:44:e6:3a:a1:18:4d:fb:15:aa:5f:82:73:c2:a1:
         7b:b9:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:57:43 2025 by rpki-client