Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/ac119d1e-0a9c-3c3e-923e-903bdfa1cde0.roa
File:                     ac119d1e-0a9c-3c3e-923e-903bdfa1cde0.roa (raw, json)
Hash identifier:          caeYI0Xt7SXgwr23s51gWE4JnN0bQ5GZ3ptzb+PtJfM=
Subject key identifier:   15:D8:33:82:CF:FC:F7:8D:CE:AF:79:E2:E0:00:71:B0:6A:FC:E7:51
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584A9A04E3C6CABB4C2120D27380
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/ac119d1e-0a9c-3c3e-923e-903bdfa1cde0.roa
Signing time:             Tue 22 Jul 2025 09:45:06 +0000
ROA not before:           Tue 22 Jul 2025 09:45:06 +0000
ROA not after:            Mon 20 Oct 2025 09:45:06 +0000
asID:                     137535
IP address blocks:        172.81.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:04:e3:c6:ca:bb:4c:21:20:d2:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jul 22 09:45:06 2025 GMT
            Not After : Oct 20 09:45:06 2025 GMT
        Subject: CN=275439dd-aa57-4efa-9427-c697984e1d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:a3:01:07:cb:04:fa:24:2a:3e:17:c7:42:
                    5d:91:0e:55:47:1c:21:e7:a4:9e:19:f0:8d:20:fc:
                    f9:0f:18:21:43:94:00:4d:75:7f:55:63:3a:54:7d:
                    d4:4d:82:fb:9d:31:d6:4f:20:5f:2d:4c:3c:1e:a6:
                    8d:c8:0e:e6:86:13:d8:17:a7:f7:5f:94:3b:13:31:
                    69:24:25:ce:a4:e9:8e:b1:79:8e:fb:df:47:64:bb:
                    ea:ff:9e:e4:ac:8a:8d:69:20:cd:1e:ce:63:12:59:
                    6f:77:9e:b8:5d:69:d6:65:48:9d:81:a0:7d:ee:68:
                    5a:f3:8e:0d:ea:f7:e5:63:0c:6d:db:2f:b0:3b:43:
                    3a:05:b4:a4:77:ff:29:4d:d4:d1:a4:26:89:41:96:
                    ff:91:ac:3f:24:c3:33:4f:6d:b0:0d:95:2c:b5:a0:
                    86:0e:c5:fc:ef:9b:cb:47:b7:0f:a5:01:8e:ac:52:
                    c5:9e:48:b1:1e:83:13:f8:c9:61:7e:05:4b:c9:a7:
                    34:54:b9:93:3d:a9:96:04:b0:55:26:1a:2b:71:b9:
                    bf:b4:c3:cd:b4:88:67:ce:27:b2:e8:1f:15:00:3d:
                    15:1c:f5:bb:59:b7:e0:5d:d0:0c:d6:d1:45:4b:a3:
                    d5:0f:76:a3:7f:39:5e:86:d7:79:04:29:f1:76:9b:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D8:33:82:CF:FC:F7:8D:CE:AF:79:E2:E0:00:71:B0:6A:FC:E7:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/ac119d1e-0a9c-3c3e-923e-903bdfa1cde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:49:2f:73:77:a3:13:e8:42:8e:ef:7c:f9:33:02:15:dc:68:
         6c:87:88:4a:89:b1:7c:04:e1:a0:8f:94:73:c4:a7:f9:bb:49:
         59:29:70:9a:1c:b8:22:3d:9c:67:1f:e5:32:3a:ca:b9:48:7e:
         c5:08:61:30:58:3e:e9:05:9a:59:c3:74:c3:ef:77:94:12:3f:
         d7:16:31:f7:49:b1:50:6f:f8:2a:9d:74:65:d6:95:d5:86:87:
         e0:fd:06:18:5c:e0:2a:19:7f:df:cb:fb:04:9c:60:17:43:bd:
         33:56:b0:8b:11:74:0f:ba:7f:62:44:56:a1:19:58:48:4d:65:
         38:b5:00:0a:cc:eb:90:29:43:7b:d8:4c:bb:8c:0c:d2:eb:c8:
         09:b7:c0:61:f2:c8:66:86:e0:74:36:37:5f:5d:03:f7:37:94:
         16:ec:a1:f7:32:e7:f2:a9:e3:ca:e4:96:63:a2:16:f9:2f:33:
         fb:b0:68:56:57:f9:ce:34:62:de:9e:7c:60:ba:28:e0:27:a8:
         95:d3:42:e3:f0:45:d8:d3:75:c1:42:57:d1:a9:ff:68:53:81:
         70:19:7c:f0:a0:71:5f:f2:df:29:e5:ed:19:32:ed:85:dc:0a:
         23:30:32:fe:82:4e:71:a7:c6:86:9f:c1:42:2e:83:98:ea:8a:
         8f:31:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:40 2025 by rpki-client