Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/96a80af8-e810-304a-a5da-67b0e5a2e4b2.roa
File:                     96a80af8-e810-304a-a5da-67b0e5a2e4b2.roa (raw, json)
Hash identifier:          6+uADBBTyESJ5bO8bjY3pdBUnpL2HJd1WGfPYbdqA74=
Subject key identifier:   E0:33:00:F3:E9:EE:DD:80:57:7B:CD:41:6C:AF:6E:40:F6:EC:27:15
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F43285849F2E544DDEAEC761801537800
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/96a80af8-e810-304a-a5da-67b0e5a2e4b2.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     19352
IP address blocks:        205.175.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:44:dd:ea:ec:76:18:01:53:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=bde39b6c-9e7a-443b-9a09-4ecf3723db22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:bd:98:d2:c0:11:30:be:80:d5:db:e2:56:
                    27:1c:28:3d:80:59:a9:31:9c:da:47:5c:00:da:87:
                    13:56:02:f3:e4:f8:5c:13:89:0b:41:d9:b6:7e:28:
                    6b:71:52:e8:80:e4:6a:be:79:a3:30:b2:e0:47:a7:
                    f7:53:f9:a6:cc:3c:b3:4c:a4:1d:6b:7a:60:75:00:
                    5e:5b:19:24:17:58:b1:60:50:d7:d4:62:05:1d:1f:
                    0b:34:fa:88:f2:db:1a:2b:52:f8:df:7f:29:1f:c5:
                    bb:99:ee:a3:eb:33:2d:e1:27:07:d5:2b:25:03:83:
                    23:1d:ec:93:06:c7:2d:c3:d3:2f:41:7f:40:d6:39:
                    7a:72:fd:e1:01:e8:ac:72:10:41:f6:ce:b4:99:14:
                    f8:be:65:cf:f9:a6:7e:5e:3c:c6:07:ef:fc:68:61:
                    8c:28:b3:58:0a:f8:10:5f:87:e3:3a:db:6b:2f:de:
                    6e:88:7a:e9:23:87:29:c1:c9:a3:3f:9c:a9:25:ca:
                    d2:0f:86:24:ae:72:68:87:07:33:d1:95:3d:c3:62:
                    ef:88:66:9f:59:37:28:e6:fb:7e:80:36:c7:dc:b7:
                    8a:89:34:fb:74:ca:64:99:95:97:38:23:58:17:e8:
                    d5:ef:53:e5:71:1c:36:1e:62:80:e0:e0:43:e7:98:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:33:00:F3:E9:EE:DD:80:57:7B:CD:41:6C:AF:6E:40:F6:EC:27:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/96a80af8-e810-304a-a5da-67b0e5a2e4b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.175.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:d6:e0:78:32:64:6d:2e:ff:8c:af:fd:15:e9:ed:ce:57:
         3f:65:22:a7:6d:90:5f:dc:d6:e2:e7:41:af:a7:b2:ba:6d:42:
         29:bb:54:ef:eb:ca:a4:cf:17:cc:0e:5c:5d:fd:28:95:ed:79:
         88:0b:6d:f0:25:41:33:23:5f:1a:4e:98:02:cb:25:f7:20:28:
         fc:04:62:85:30:a1:1a:e3:a9:06:95:f8:73:aa:ba:f5:56:76:
         fd:b3:fe:a2:97:c7:30:66:b3:54:d3:97:05:30:cb:3f:0d:77:
         6c:16:29:13:fc:a3:36:6d:bd:ba:c3:13:ae:66:01:b7:65:a9:
         87:5c:05:79:e9:57:24:b0:00:ae:db:c5:0a:21:71:fc:2d:ef:
         8d:46:b6:11:00:ea:e1:81:bb:b7:2f:1a:8b:10:e0:e8:4e:eb:
         87:7c:bf:a5:da:d3:45:4a:39:55:ac:f4:02:32:c2:36:db:a1:
         87:fb:58:3f:28:c5:92:75:00:d5:7a:29:8c:68:19:a3:0c:22:
         50:42:ef:20:dc:15:79:02:31:da:c7:9d:28:e1:60:38:ff:b8:
         2a:4c:17:d1:23:83:e9:f6:1c:a1:ec:c1:93:50:04:ad:eb:02:
         9d:56:c0:c3:66:8a:97:d9:29:29:7d:cb:3b:b4:ae:c0:51:63:
         12:23:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:29 2025 by rpki-client