Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b8fda7c2-f22d-3c08-9f2f-4b2b55577875.roa
File:                     b8fda7c2-f22d-3c08-9f2f-4b2b55577875.roa (raw, json)
Hash identifier:          uKK8u9yYiu7ql9Fw8TlKGsjyZsB7mJHGM9FnIkP/pjs=
Subject key identifier:   D9:7C:B5:AA:EC:11:56:04:50:EE:B1:5A:6E:6F:02:C4:1E:30:EF:05
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285849FE10053A3D4BACFF673D0A00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b8fda7c2-f22d-3c08-9f2f-4b2b55577875.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16839
IP address blocks:        149.96.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:10:05:3a:3d:4b:ac:ff:67:3d:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=e37cb581-80f3-422e-afdd-98be5c4ca0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:2d:dc:c1:80:36:86:6a:65:89:00:40:10:
                    bf:30:01:1d:36:f6:4b:f1:e2:14:b3:f9:a6:1f:d6:
                    4b:97:b8:6b:ca:6e:bc:51:e4:2b:84:e0:3a:74:f3:
                    1f:bb:9a:4d:30:6e:9a:39:fd:28:5f:90:ef:ba:9e:
                    56:5a:08:77:ef:b5:8d:6c:e5:28:fb:f6:9e:32:ff:
                    a5:35:49:ce:0d:76:61:68:cd:20:f5:b7:30:24:47:
                    21:7e:5f:9d:a7:cb:5f:2f:aa:12:33:cf:52:a8:02:
                    55:9a:5c:7d:54:9f:a8:35:c2:36:f4:ed:08:74:03:
                    0f:74:c7:66:11:63:1e:bb:43:94:ca:a3:3a:6d:f4:
                    37:9f:22:4e:bf:35:64:30:0b:d1:0f:40:75:39:db:
                    d8:8b:f0:63:af:4d:2c:e3:4a:40:63:ae:c2:8f:43:
                    d7:2b:ac:00:12:36:89:8f:1b:79:dd:1d:3c:9a:9d:
                    96:83:a3:6c:b9:68:db:52:f5:ea:65:42:9d:a5:a9:
                    a2:2c:0d:61:cc:cb:b5:94:25:fd:bd:9b:8f:50:e4:
                    2e:69:81:cb:82:39:d6:a9:fc:66:c7:06:91:90:5e:
                    aa:11:89:41:18:e0:8a:c7:17:59:7f:6c:62:4d:a2:
                    6e:31:5f:75:b5:97:39:28:7e:fc:72:21:3e:f5:21:
                    99:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7C:B5:AA:EC:11:56:04:50:EE:B1:5A:6E:6F:02:C4:1E:30:EF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b8fda7c2-f22d-3c08-9f2f-4b2b55577875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:12:ee:2c:87:3d:bb:49:d5:5e:af:89:dc:b0:9b:b1:f0:
         a5:85:dd:b7:83:99:9d:2d:1a:7c:69:f8:f0:76:bb:db:b3:04:
         c2:1d:ee:83:aa:c9:e0:35:b9:af:80:55:fe:ea:42:4f:da:e4:
         6f:5f:f8:d8:8a:c7:8b:83:5c:78:b2:21:30:cb:d5:e7:91:21:
         0d:0c:b2:4f:9f:2d:8c:f3:67:a3:dd:9c:d3:db:de:28:03:6a:
         51:8b:e7:bf:a4:d8:3e:e7:16:0e:54:e1:c6:01:db:b7:2d:4c:
         4c:92:8d:20:25:ad:a7:ae:b5:1f:57:c9:6c:2a:6b:a7:18:40:
         cb:28:c8:b5:5d:8a:76:b1:b9:5a:b1:fa:53:e0:ce:dc:18:d5:
         aa:25:29:6f:87:78:b8:11:23:9c:eb:57:55:e3:fd:b2:78:1b:
         88:e3:d4:f4:1b:e1:3a:f0:46:48:41:cd:89:19:3f:1b:15:52:
         5c:88:83:cf:b8:f4:9c:e5:20:5a:e9:b9:59:c1:d1:97:bf:8e:
         93:bd:a9:f5:c1:3e:c3:7d:9d:99:ee:5f:46:03:a7:67:c1:7f:
         27:54:ff:72:80:f0:93:15:5c:43:92:72:20:cf:34:50:7a:e1:
         c6:2d:e3:23:34:db:76:66:91:d4:f8:9a:a6:0b:7e:03:a6:c8:
         15:c5:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:52 2025 by rpki-client