Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa
File:                     afe4eaec-855a-3198-8438-4f284572e247.roa (raw, json)
Hash identifier:          43Yqhoz0t4au+q2Q/zIaeA4bV2iEP53vHAnlApnl7y4=
Subject key identifier:   77:CA:19:85:48:F6:AA:96:16:BC:B2:B8:C8:25:B9:3D:28:50:EB:64
Certificate issuer:       /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial:       010D0C9F4328584A2EEABB14C593664D80CBCC20
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     26548
IP address blocks:        199.96.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:bb:14:c5:93:66:4d:80:cb:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=f8f2d413-c3e8-4dbf-bc84-75101ba27731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8c:50:c5:7f:c5:f1:48:66:d0:d7:fb:0c:97:
                    1f:e3:be:f0:68:bb:ef:35:68:5e:4f:f7:68:03:1d:
                    ca:bb:c7:eb:5c:e0:82:ee:a5:30:51:73:66:25:86:
                    06:05:c3:53:da:84:58:1a:f0:05:e7:43:99:48:f3:
                    02:aa:a0:d1:bb:a3:07:cc:21:fa:56:6b:92:70:54:
                    80:3b:ff:1f:e2:26:2b:26:c7:ad:90:fa:d0:ec:09:
                    98:66:90:99:32:8b:dd:fb:6b:2e:03:37:e3:d6:84:
                    47:ac:6d:c8:b4:70:7c:d2:e2:57:a7:20:de:5c:3d:
                    9c:b2:54:31:10:4e:08:79:6a:87:9b:88:bd:e9:8d:
                    4b:fd:fa:29:76:31:fb:e5:5a:f1:6a:f6:87:15:18:
                    2c:15:c7:29:4b:01:f2:53:70:b1:87:64:f7:1c:c8:
                    dc:ab:be:e9:b9:21:b7:71:af:77:4d:5f:bb:57:3b:
                    67:c1:a2:ee:fb:46:2b:52:d2:61:4b:77:a1:c7:de:
                    12:91:69:93:53:e2:55:a3:b0:6f:b8:75:80:f8:23:
                    0a:65:5a:80:72:12:79:f1:28:e2:ec:a0:bf:dc:97:
                    92:15:fe:c8:43:63:c3:38:f3:69:67:bf:f4:15:88:
                    35:c1:0f:b9:c5:16:1d:3b:82:9d:78:95:87:25:30:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CA:19:85:48:F6:AA:96:16:BC:B2:B8:C8:25:B9:3D:28:50:EB:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl

            X509v3 Authority Key Identifier:
                keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:16:b9:a2:1a:50:7c:dd:2f:26:5a:c0:01:e8:a3:a7:a1:
         5f:eb:bc:60:04:43:d5:af:bd:32:ff:8b:14:4e:99:0d:f6:1d:
         a9:97:52:8c:a8:4e:78:d6:c0:f5:c1:99:fb:5c:09:22:bd:89:
         1c:44:65:f0:0e:55:07:25:c9:14:39:88:95:b7:2b:56:78:16:
         92:8f:08:71:ee:19:b3:37:ea:1f:b2:7b:e9:ea:da:45:67:17:
         24:9b:ff:cc:7f:64:2f:c5:56:58:08:95:8c:3f:b8:72:0a:fc:
         6b:ce:bd:19:b5:6c:76:47:77:3d:5d:69:4c:d3:6d:dd:ee:92:
         0e:4e:f9:e7:9a:bb:a3:da:86:9a:b4:c3:e6:41:4a:b8:94:2b:
         ca:72:bb:4e:5c:07:bd:67:99:8c:c9:e5:81:8a:92:f3:e1:f6:
         af:59:8c:a9:f1:bc:53:c1:bc:a8:c6:f0:c5:e5:65:d0:af:98:
         d3:57:f4:e3:e2:8f:1d:cd:c8:e4:ba:f6:e8:de:bc:d1:3a:c4:
         ab:b9:a2:05:a2:60:b6:11:e4:4b:77:df:12:26:4e:a4:15:b3:
         8a:4b:ac:fa:6c:da:db:0a:7c:3b:e9:ee:a8:76:e2:0c:b2:f6:
         de:e5:59:18:8d:79:9e:df:fd:8d:78:a5:90:7b:69:28:a9:a3:
         ad:a9:07:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:55:43 2025 by rpki-client