Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8017ef1-8235-3c7d-97e2-acd300e7600f.roa
File:                     b8017ef1-8235-3c7d-97e2-acd300e7600f.roa (raw, json)
Hash identifier:          mQSj+ZKLN4IO0LKl8PhUVXEMuUvLNd0zbYloNHExuX8=
Subject key identifier:   DC:B9:9E:44:93:C0:76:8B:8F:18:26:F6:85:82:AC:E3:84:FD:98:43
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ABEB0DB5BA791A85A89E08A20
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8017ef1-8235-3c7d-97e2-acd300e7600f.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     401152
IP address blocks:        96.126.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:db:5b:a7:91:a8:5a:89:e0:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=fd0f5519-8ad4-4ba0-a3ad-5273de2ca602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:a4:57:77:f9:59:32:53:da:6c:bc:c2:52:
                    e5:9b:4b:b9:e2:12:89:80:56:9e:7c:3d:40:9f:a3:
                    2e:3d:7f:c9:50:3f:39:d3:0c:24:c7:5c:1f:bc:23:
                    4a:79:7c:3d:d8:c3:fe:9a:00:6d:fb:fd:55:86:4a:
                    45:18:18:07:48:27:28:59:aa:25:0b:3a:89:37:c1:
                    53:e8:e7:51:bd:89:bf:04:30:8c:ee:04:95:06:7b:
                    5f:61:0b:ea:d7:df:3f:82:aa:6a:09:ed:dd:9b:68:
                    cd:91:73:20:6e:2d:f9:1b:53:e5:7e:ae:f7:bf:98:
                    6f:c1:62:05:3a:b2:6f:fd:f4:e6:05:68:d7:a0:58:
                    60:2e:fb:a2:af:ae:a7:b6:75:32:88:b9:1a:67:87:
                    f7:76:aa:30:d3:a8:94:2e:7a:d1:7b:0b:f3:a6:00:
                    85:b4:68:f5:57:f7:9b:12:1a:a9:ab:91:73:1c:da:
                    e0:05:b0:58:bf:9b:ff:04:31:96:ac:d5:33:1b:11:
                    07:7d:cd:02:7a:50:b5:7b:b8:64:36:c0:c7:f5:fa:
                    55:fa:ee:03:2b:41:01:6d:2a:70:9c:d6:a6:b7:7f:
                    dd:9f:bf:40:64:ce:77:ad:21:d1:94:4e:94:42:70:
                    b5:03:3b:45:b8:a5:00:46:3b:df:6c:4f:81:20:32:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B9:9E:44:93:C0:76:8B:8F:18:26:F6:85:82:AC:E3:84:FD:98:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b8017ef1-8235-3c7d-97e2-acd300e7600f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:53:5f:a7:9f:fc:9e:fa:74:fb:da:58:c3:a9:ca:d4:c9:89:
         28:f4:08:80:07:fd:27:7a:d0:63:44:81:ae:3c:89:d1:60:2a:
         98:3d:f6:44:b6:7a:aa:75:67:7c:8c:3b:6f:bd:3c:3f:2c:68:
         a8:33:d4:62:fa:97:2e:4a:2c:91:2e:13:70:f2:cb:6d:e7:24:
         22:d6:ce:77:74:ea:a0:e4:68:31:51:ca:0f:7e:02:d4:71:10:
         af:77:3d:39:ac:ef:00:ba:e4:ff:4f:41:53:ab:2c:02:aa:6d:
         25:6b:f8:12:cb:e9:61:38:72:33:1e:8d:f8:01:08:00:9a:94:
         6d:8c:9d:37:0a:43:82:82:0b:d0:d1:f7:79:df:a5:aa:2d:3c:
         3d:e2:ac:75:f2:f5:36:fb:57:db:7b:7a:58:b1:12:be:6b:5a:
         fb:57:ff:96:fb:96:1f:ae:6b:af:82:3e:6a:8c:63:fa:f9:d4:
         5f:21:e7:a4:4b:a4:00:40:43:0d:b5:65:55:86:fc:c7:ae:d3:
         93:a8:a8:43:c3:f1:5f:29:cf:2b:e1:4d:e0:0e:17:92:86:a7:
         fc:b3:b3:55:ba:7d:72:ba:42:b6:92:00:8d:d0:18:2c:66:f4:
         4b:48:41:5d:ad:60:42:63:ee:ee:b9:41:80:cb:3d:ac:e2:66:
         ae:62:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:39 2025 by rpki-client