Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/99e99e04-0873-335a-b532-389702007d91.roa
File:                     99e99e04-0873-335a-b532-389702007d91.roa (raw, json)
Hash identifier:          CnuHRDwD6gKMfJ+UqojE8FEbeLmnoCZuW+F0o7p0ejI=
Subject key identifier:   BC:A4:7C:9C:2E:44:74:D8:E9:EB:F7:FF:22:E4:17:DA:C6:44:FC:A3
Certificate issuer:       /CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e
Certificate serial:       010D0C9F4328584A73509E2683F18ADB71DD15C0
Authority key identifier: 91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/99e99e04-0873-335a-b532-389702007d91.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     13765
IP address blocks:        96.31.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:9e:26:83:f1:8a:db:71:dd:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=917798d6-3431-42b1-9411-31d24234ce86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:22:08:8a:15:41:e3:3f:c3:4d:a1:de:aa:4b:
                    2c:ed:10:77:bc:52:3c:9e:da:0a:39:64:84:9c:54:
                    dc:ff:f2:c1:0f:93:77:3b:9b:e5:82:6e:eb:18:c4:
                    41:b2:72:90:03:28:5f:2f:65:3d:20:6d:e3:8e:01:
                    bc:d4:f7:6c:f0:4e:70:06:1f:e7:13:c1:f9:83:1f:
                    7a:b0:e5:34:b1:b9:00:71:46:55:1a:99:d2:c6:55:
                    ad:d4:12:03:b0:07:e2:46:7a:7b:39:3e:54:d6:ff:
                    09:41:ce:2f:a8:23:fa:41:45:88:9b:93:cf:9f:1d:
                    f3:c1:f0:30:a8:19:7b:ca:93:a8:2f:65:19:6a:e6:
                    64:91:1f:63:ec:63:50:12:54:34:dd:60:16:0d:38:
                    32:6e:5e:8b:ff:d9:9b:22:eb:af:91:bf:f3:6f:03:
                    91:86:4c:3a:6f:08:d6:57:81:2a:c8:16:6e:1e:25:
                    40:1b:11:3f:52:16:9c:b8:df:34:58:2e:32:70:10:
                    a1:f4:70:44:93:c9:92:ae:ca:02:fc:7e:ad:2a:58:
                    9b:f2:d9:10:7e:8a:3f:29:48:b2:8f:48:da:cc:7d:
                    bc:87:17:9b:bd:17:ad:d8:a2:c6:87:04:62:71:9d:
                    94:72:78:74:12:b7:15:82:ca:a2:f4:de:d5:6d:1f:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:7C:9C:2E:44:74:D8:E9:EB:F7:FF:22:E4:17:DA:C6:44:FC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/99e99e04-0873-335a-b532-389702007d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl

            X509v3 Authority Key Identifier:
                keyid:91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.31.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:fd:f9:c7:27:f6:43:90:e7:ff:f2:84:3a:f4:3e:9b:e9:
         d5:4e:2a:20:19:ef:74:ce:0a:da:6a:ff:33:4a:42:66:18:35:
         53:0e:a7:4a:e7:06:b3:90:4d:e3:0b:61:bb:8b:72:a4:1b:a4:
         6d:78:7e:bf:32:2a:fb:85:68:b2:0a:04:8b:fd:03:ce:71:bc:
         f6:05:72:8b:29:4c:28:2a:f5:b1:dd:a1:e1:fc:86:49:ce:50:
         90:a6:7d:52:e2:3f:42:93:c1:c5:95:2a:ff:f4:28:a4:ee:a7:
         5c:a7:fc:6c:79:19:90:96:82:09:e0:e5:f9:c6:78:b2:0a:f6:
         fc:83:2e:9a:75:6a:df:ec:0a:15:47:10:15:97:89:bb:31:e6:
         da:38:c5:6e:3d:0d:cd:d9:1a:c8:7b:79:c8:48:bc:5c:21:1c:
         39:15:06:80:78:b8:52:7c:2d:73:92:bd:33:30:6f:97:44:cb:
         26:e7:85:53:24:42:4b:db:38:4f:da:20:4f:4a:7f:31:c4:7b:
         c2:05:c1:2a:72:60:93:6f:a5:cb:e5:1a:c8:72:4c:23:60:04:
         02:a9:24:00:28:e0:82:b5:13:ad:55:01:5d:8d:1c:45:bf:c8:
         66:19:e0:af:55:55:9a:59:91:de:96:7f:85:cc:af:07:5c:ef:
         d3:42:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:00 2025 by rpki-client