Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d41c0259-b9f7-3714-937f-30869ab9b52a.roa
File:                     d41c0259-b9f7-3714-937f-30869ab9b52a.roa (raw, json)
Hash identifier:          xpYNFKTFIzX5K6r0za4LvBQZ1Xm4sRUMXaMfAYrBi9E=
Subject key identifier:   1B:21:06:30:FE:AD:29:C5:9B:92:29:01:04:1A:DB:9A:48:A9:EA:8C
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F4328584A9A663247516D74A2444A9F80
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d41c0259-b9f7-3714-937f-30869ab9b52a.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     10996
IP address blocks:        216.239.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:32:47:51:6d:74:a2:44:4a:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=8f2e502a-edd0-494e-b992-934c7d0545cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:4e:c3:cd:94:81:fe:2b:07:4c:80:7f:a3:
                    c1:f9:2d:7b:e7:cc:d8:ff:57:6b:8b:10:cd:b0:fa:
                    0a:b9:ec:a6:e1:b0:77:60:f9:e7:c3:f8:b3:34:e9:
                    ab:aa:65:ce:bc:92:8a:e7:9e:27:63:65:a9:bc:23:
                    ec:8e:64:a4:fc:7a:95:12:44:b4:d6:54:fa:25:13:
                    73:5d:d8:fa:2b:a1:3f:3a:d0:85:8d:ff:3b:a2:4a:
                    9c:fd:46:e2:77:06:ab:01:4e:c1:3f:87:79:d2:2b:
                    0f:10:3c:10:6e:a5:d3:21:f9:eb:24:55:57:87:d8:
                    57:81:92:f9:6a:58:16:9f:bb:e8:27:75:0d:93:fe:
                    e9:ba:86:98:14:e4:69:06:84:60:7a:db:86:0a:48:
                    8c:73:b1:d9:5c:1b:be:8f:95:34:6d:a4:20:b4:fc:
                    ba:6e:6e:33:c9:ee:fc:9b:26:16:57:a6:15:23:c5:
                    0a:f1:f5:63:b7:86:6f:dd:45:bb:62:8d:e1:dc:a5:
                    cb:b8:fe:08:92:ca:0b:3b:38:11:37:56:a8:6c:bf:
                    80:66:86:f9:bf:56:23:13:1c:4e:7f:09:4b:ce:b3:
                    c7:60:09:94:af:c8:cc:10:50:21:6c:5f:63:13:12:
                    88:a9:f8:58:3e:c0:42:ce:0d:90:24:7e:75:52:3e:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:21:06:30:FE:AD:29:C5:9B:92:29:01:04:1A:DB:9A:48:A9:EA:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/d41c0259-b9f7-3714-937f-30869ab9b52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.239.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:34:43:ca:70:6c:41:54:7d:ee:8c:29:a2:62:fd:7a:2c:ba:
         44:0f:4a:23:db:ad:97:63:a1:ad:e3:d7:dc:e8:05:9c:32:97:
         08:3b:51:f2:33:0d:1a:f4:21:b2:e3:e2:05:c2:8f:74:f5:94:
         b2:81:f0:68:66:ae:13:58:50:aa:65:3d:fa:0d:18:f3:ef:eb:
         6d:c2:6a:73:45:2e:da:84:e4:1c:e1:0b:1c:ae:3c:03:ff:4d:
         e8:c8:c4:ac:d4:0e:78:ad:9a:39:77:04:f1:10:2b:60:44:95:
         c4:0c:ea:c0:4f:23:4b:f5:27:0e:33:a1:2a:55:d7:5c:6d:48:
         d8:26:f8:90:ae:30:f2:54:71:c2:c0:86:f6:5c:13:77:23:69:
         bf:c5:94:0e:f4:5a:df:f3:ef:f8:88:59:c6:2f:d7:ac:b7:25:
         ba:63:d1:0c:2d:ca:2e:eb:96:7f:8d:b3:41:51:91:e3:62:d9:
         f4:45:7b:8c:f3:42:3f:cb:77:7e:20:1c:ad:64:d6:9e:1a:6b:
         7a:45:5d:91:1c:ea:1b:47:18:50:e3:bf:21:19:c6:f3:7a:21:
         b2:85:ca:7d:3d:7a:c0:85:fc:6b:db:d9:79:46:cc:56:50:4f:
         03:26:a3:cd:55:2d:2b:8d:1e:7a:76:86:20:37:47:5d:7a:a9:
         41:9a:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:12:35 2025 by rpki-client