Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
File:                     f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa (raw, json)
Hash identifier:          CkbhbcGRT2Tj/0+7tBfmhj/CGq7CVry1wceQuwmL5mw=
Subject key identifier:   18:3D:C4:B3:19:9B:AA:25:2F:21:D8:E9:36:DF:D4:68:5A:50:79:C4
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584AB220DF5F44B2CC5ED1B81100
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     16839
IP address blocks:        149.96.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:df:5f:44:b2:cc:5e:d1:b8:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=9e2519d2-22c9-488e-8298-fee8c3bdc833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:aa:11:ff:37:a9:68:78:a4:f3:75:cd:e9:
                    05:7f:af:7a:be:d0:0c:42:4e:13:73:78:ef:7d:82:
                    b9:d9:34:cc:d5:2c:92:ed:ec:05:89:4d:80:60:c2:
                    29:60:72:5f:3f:e6:d3:1d:50:33:f6:45:d7:61:86:
                    c0:fc:14:e5:ba:0f:f2:97:b6:f2:3a:9d:74:cc:4f:
                    70:24:27:63:d3:a6:ee:48:3f:04:c1:f7:03:59:3e:
                    c2:c9:f3:76:ef:4f:05:3c:6e:58:8f:36:40:a3:e3:
                    9a:b7:bc:6c:7e:ac:46:b5:85:31:11:92:36:33:be:
                    4a:c7:26:83:c9:06:70:f4:9a:64:02:e4:1f:0c:86:
                    8e:7a:7e:1e:b3:c8:ea:ae:c8:15:36:cf:9c:9b:4c:
                    0b:a0:a4:4d:06:b4:50:3b:c8:85:e5:95:6e:65:32:
                    7c:eb:d3:82:7e:50:fc:b2:19:8c:b2:30:00:df:60:
                    36:c3:16:23:6b:f8:18:4e:9d:ce:ab:95:74:e9:aa:
                    31:7e:45:60:c5:08:69:03:9e:bc:ff:ea:bd:31:b6:
                    8e:c9:f7:f5:47:55:2b:db:38:a0:3d:08:b3:4e:fa:
                    7b:bf:96:bf:3d:87:7a:cf:b4:c3:20:3d:11:46:06:
                    46:34:c2:09:8b:98:34:15:16:e1:80:59:ff:c1:a4:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3D:C4:B3:19:9B:AA:25:2F:21:D8:E9:36:DF:D4:68:5A:50:79:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ff:94:ce:30:bc:e3:35:23:a9:4d:e4:63:54:7d:19:d6:57:
         aa:5f:1f:04:b2:97:2c:03:4e:05:bd:b9:b7:cc:4b:81:73:0d:
         9b:c0:87:66:ca:0f:1f:28:7f:ab:b2:7e:d1:77:d9:3a:b6:5b:
         c8:d7:2a:5e:a0:97:6e:64:6e:0e:00:5e:aa:9f:10:a4:10:c6:
         6d:18:56:87:c4:eb:a9:14:c7:ed:f4:cc:2f:ad:04:45:26:1a:
         51:ea:91:b1:08:22:cb:43:fa:53:78:57:8e:c4:a8:f1:21:88:
         04:1e:09:39:cb:7b:3a:11:4f:c4:39:19:a6:d3:1c:81:08:85:
         79:48:db:31:ed:c9:62:51:7f:10:0d:82:22:73:9e:68:48:78:
         2b:4e:22:94:1d:04:13:2d:bb:64:a9:52:19:93:ea:04:dc:c3:
         d9:cb:d2:77:c0:3a:df:76:72:ae:6c:b9:a1:77:70:1a:3d:5e:
         e5:51:17:9e:b7:38:12:b6:05:08:3f:0e:5b:c9:52:13:1c:aa:
         b9:61:25:60:10:54:7f:34:df:e6:5b:65:c2:d9:48:1f:47:a5:
         2e:ff:b4:5e:02:5c:fc:68:cf:af:8b:e5:29:1f:85:25:57:34:
         a6:15:64:7e:b5:ca:d8:41:7a:ba:06:bd:73:33:23:8e:27:fa:
         2a:ba:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:15 2025 by rpki-client