Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/480e2c25-1f36-31b3-b687-747392591fff.roa
File:                     480e2c25-1f36-31b3-b687-747392591fff.roa (raw, json)
Hash identifier:          K55JZSFSTJPJ9N1RLsxlPGc+OV7Q+XEEJ0mHy24cOxU=
Subject key identifier:   50:2D:2D:F1:01:FA:ED:93:69:E9:7E:AE:DB:57:E7:9D:F6:7C:18:AC
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A7850683B110C314C0FE5EE00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/480e2c25-1f36-31b3-b687-747392591fff.roa
Signing time:             Thu 10 Jul 2025 07:59:46 +0000
ROA not before:           Thu 10 Jul 2025 07:59:46 +0000
ROA not after:            Wed 08 Oct 2025 07:59:46 +0000
asID:                     23473
IP address blocks:        96.63.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:50:68:3b:11:0c:31:4c:0f:e5:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 10 07:59:46 2025 GMT
            Not After : Oct  8 07:59:46 2025 GMT
        Subject: CN=af16bbd4-b6d6-4b05-956c-b09575402456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:6b:a8:ea:0c:41:f9:b0:29:75:2e:e2:53:
                    eb:d0:b8:63:99:ef:d5:13:f0:09:a8:10:41:6a:a0:
                    75:95:3b:88:1d:72:1c:28:23:6b:22:d0:61:41:bc:
                    dc:1b:d3:00:0e:d9:93:86:74:e3:e3:d6:49:a2:d6:
                    4d:9c:de:52:7e:5d:68:65:41:78:89:c1:2d:28:94:
                    4a:82:75:17:3d:28:40:8d:d7:25:69:18:13:59:ce:
                    31:ff:7e:53:14:0d:c0:2b:eb:9a:0d:cf:52:0e:d1:
                    44:83:60:85:e3:6d:28:c1:94:90:93:27:f4:a6:b7:
                    9a:8e:5f:1b:7d:6b:dd:5e:51:48:d0:1e:32:e3:8d:
                    6d:24:47:cf:7d:1e:32:62:a2:92:29:74:74:5a:73:
                    62:2b:7c:f9:0e:8a:6f:ca:a4:8c:6e:3d:34:8c:94:
                    54:f8:b0:b5:06:a6:40:84:a2:6f:69:1c:c0:eb:f2:
                    4e:46:b4:0d:4c:fe:8d:ec:1b:e0:29:a5:6e:27:6d:
                    59:82:c7:75:76:74:74:a9:65:e9:c8:66:8a:4f:90:
                    1b:1b:b4:5e:5a:43:89:d2:00:bb:ca:98:09:c3:88:
                    1e:0e:6f:05:e9:2d:f5:66:46:c1:08:13:57:ab:f6:
                    e9:98:2b:23:f7:2c:29:1c:04:20:7a:33:d0:d5:53:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2D:2D:F1:01:FA:ED:93:69:E9:7E:AE:DB:57:E7:9D:F6:7C:18:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/480e2c25-1f36-31b3-b687-747392591fff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:c8:43:f5:ee:36:bd:f2:f8:46:c4:87:7f:f3:f3:97:00:
         63:42:e2:2e:63:02:b0:b0:2a:49:31:85:13:cf:96:ea:f1:2f:
         d3:52:a8:cc:a8:26:8a:2f:69:f9:60:e7:10:08:fe:a5:a9:99:
         ee:e8:12:6c:25:85:b2:02:01:ea:31:0a:94:31:b4:a6:07:4b:
         f6:f6:8b:b1:16:ee:2b:86:80:47:4d:83:e1:a8:62:46:5f:16:
         24:a5:87:8a:5e:a5:fb:31:34:4a:07:75:fe:8c:d3:4c:af:ea:
         ed:de:0a:de:8a:28:48:fc:ff:f0:9c:cd:aa:d5:f6:48:49:9e:
         ee:be:03:c1:e5:a9:0b:ec:88:c1:9f:11:36:cb:cb:c2:38:e4:
         d4:41:3c:49:6a:2e:de:e2:28:96:94:1a:96:78:91:c3:03:eb:
         c6:80:2f:46:b5:20:f6:5e:ee:b3:93:75:d0:0b:7a:5e:59:3e:
         aa:f0:b3:99:cd:f5:01:9a:4a:6b:a9:dd:ee:47:92:d4:78:41:
         e7:0f:d3:c7:60:d0:29:a8:e9:7a:ba:70:5b:59:5a:7a:47:05:
         71:b9:3a:04:2c:de:e0:98:7d:9a:ae:d6:b2:58:ef:cb:5b:18:
         9a:9c:80:04:a8:fe:9b:23:6e:dc:fd:9e:88:d4:c1:7c:4f:72:
         a4:00:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:10 2025 by rpki-client