Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cce76f29-2f2d-3c90-8286-b24efdd3dfa1.roa
File:                     cce76f29-2f2d-3c90-8286-b24efdd3dfa1.roa (raw, json)
Hash identifier:          3cJomMO/Gzhiel4/0V1y3l5c+boT7qvzwyp3Lda5/oY=
Subject key identifier:   1B:01:AC:AA:6C:64:AA:4F:81:10:9D:32:33:31:F8:FA:C4:94:0F:C0
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A0731328DE4A58F2E4C83B700
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cce76f29-2f2d-3c90-8286-b24efdd3dfa1.roa
Signing time:             Fri 30 May 2025 19:30:33 +0000
ROA not before:           Fri 30 May 2025 19:30:33 +0000
ROA not after:            Thu 28 Aug 2025 19:30:33 +0000
asID:                     23473
IP address blocks:        96.63.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:31:32:8d:e4:a5:8f:2e:4c:83:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 30 19:30:33 2025 GMT
            Not After : Aug 28 19:30:33 2025 GMT
        Subject: CN=ad15a2ff-6b19-4f5e-a6c6-19639072072b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:43:4b:a6:62:34:f9:76:71:7a:71:8c:a2:db:
                    2b:12:49:1d:40:66:c7:86:dc:f8:ee:ea:08:63:d0:
                    7a:9c:e1:a5:4c:ba:a4:13:bc:f9:25:0e:16:81:64:
                    75:53:55:f7:1a:56:31:21:f2:e4:4c:b5:6e:84:25:
                    9f:46:90:ee:5f:95:f2:5c:e7:78:fa:fd:05:0c:0c:
                    e2:19:a7:5b:b4:90:65:c5:23:0b:79:b3:d5:3f:92:
                    81:cc:8c:11:9e:40:db:ea:54:ac:68:7d:d6:64:0e:
                    8d:bc:c4:0c:3f:d3:55:b2:e9:2d:a8:5d:cb:00:fc:
                    00:f1:27:e7:77:f4:bb:47:1e:06:93:b5:96:f0:68:
                    14:a2:61:78:01:37:eb:e2:53:f1:95:d7:e8:73:46:
                    10:eb:a3:56:ce:d0:de:d5:8d:01:96:98:7d:bc:0a:
                    74:e1:85:00:ac:e1:6d:e9:30:42:3c:7d:68:d5:0f:
                    2e:63:68:dc:3c:86:ec:64:5c:3c:73:2a:af:c9:b8:
                    df:da:0e:df:a1:7e:2f:b3:26:68:2c:5f:24:5b:25:
                    25:98:77:8f:50:69:29:3b:02:da:89:8f:e8:50:6a:
                    d7:6b:82:ff:fc:58:c0:d1:96:62:b7:9f:0e:a9:7f:
                    d5:c6:9f:44:5d:d1:d2:f7:9a:36:f6:6a:a0:0f:70:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:AC:AA:6C:64:AA:4F:81:10:9D:32:33:31:F8:FA:C4:94:0F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cce76f29-2f2d-3c90-8286-b24efdd3dfa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:dd:92:a0:3a:2c:b9:70:b2:ea:d6:d1:c9:c1:ee:fa:5a:03:
         47:06:6e:41:f9:4d:39:d9:a5:1f:82:55:a7:ee:1a:09:2c:df:
         50:3a:d8:f6:78:38:ac:22:2d:22:ea:e0:32:25:cb:6d:ff:16:
         40:98:10:7a:1f:8a:6a:31:e1:7d:27:2b:4e:34:17:b3:fb:af:
         82:80:3a:a4:0a:79:18:c7:9e:00:b8:45:8a:e9:9e:bb:c3:87:
         eb:84:39:74:a7:82:de:d4:37:c1:9c:0f:81:ed:dd:41:c7:b7:
         7d:d1:f1:f2:da:70:cb:e6:77:25:0c:75:50:bb:8e:23:c4:09:
         36:99:07:f7:5c:65:7b:1b:74:0f:a8:92:14:19:ef:4b:64:aa:
         bc:90:a7:7b:97:ef:2e:0f:04:29:27:e7:0b:a0:9e:0c:dd:3c:
         5c:4e:55:39:b6:6e:0a:58:8d:48:5d:1c:4f:5c:50:4a:39:66:
         3b:65:0a:49:fb:68:c7:0c:93:b9:4a:be:c1:6a:b9:85:b3:46:
         89:9f:4d:89:bf:97:e2:f3:bc:bd:84:12:b9:b5:dc:94:71:31:
         0b:ca:ab:3d:87:6f:7f:29:fa:35:bb:71:e2:ec:4d:27:3d:36:
         46:7a:97:79:69:d9:01:ab:1a:29:cb:2e:03:2b:b9:42:dc:93:
         19:e2:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:47 2025 by rpki-client