Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/00d08eac-bbd6-357c-bade-795e2adf6be8.roa
File:                     00d08eac-bbd6-357c-bade-795e2adf6be8.roa (raw, json)
Hash identifier:          49HMcdIW9QnpvobMOYnbM9FGDCk1SqJbbbg7OQgIaSw=
Subject key identifier:   AC:12:B0:51:BE:7E:55:15:02:DC:13:11:89:2D:D2:EB:AE:72:3A:FC
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F43285849E8F6150B11266992A3CF9900
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/00d08eac-bbd6-357c-bade-795e2adf6be8.roa
Signing time:             Mon 19 May 2025 23:37:11 +0000
ROA not before:           Mon 19 May 2025 23:37:11 +0000
ROA not after:            Sun 17 Aug 2025 23:37:11 +0000
asID:                     22439
IP address blocks:        96.43.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e8:f6:15:0b:11:26:69:92:a3:cf:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: May 19 23:37:11 2025 GMT
            Not After : Aug 17 23:37:11 2025 GMT
        Subject: CN=8f68eb1f-6c53-4c76-974c-608583f07961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:e6:91:1f:bc:27:03:75:5d:b9:76:d2:54:
                    64:0f:ec:9a:04:6f:a3:87:47:af:36:23:66:76:88:
                    37:2f:83:cd:d9:5b:f1:bc:57:ec:e5:d9:16:84:dd:
                    8c:99:ff:c6:c7:c8:b4:3f:eb:be:a2:53:b4:fb:2f:
                    20:b7:f6:20:72:5b:c2:2f:e9:f8:ef:de:6d:3a:1d:
                    04:ec:c3:8f:15:31:d2:83:04:d4:90:37:39:31:99:
                    e7:d1:4c:bd:ce:06:33:28:45:f8:db:b8:ad:27:e7:
                    f6:e6:a7:08:d8:4a:07:9e:9d:71:17:69:21:cf:d8:
                    5c:c5:05:e8:db:8c:91:63:fa:d3:28:5c:1d:5b:ba:
                    e7:3d:0c:99:5c:b8:8c:de:3e:f9:3c:a1:28:65:b5:
                    0d:c4:0f:66:c2:b6:33:35:9f:ec:e7:3f:e6:12:6d:
                    d8:ad:8e:e1:5b:34:a5:ea:05:52:06:87:dc:80:d5:
                    7d:5f:bd:eb:86:aa:d3:c4:44:39:22:be:23:6f:f4:
                    3c:7c:a2:fa:55:93:22:a1:4e:b0:8f:bd:c8:f9:af:
                    22:33:8c:a4:8c:3f:7c:6d:a9:70:a5:77:86:6e:03:
                    5b:9a:eb:65:ca:77:5c:01:be:89:cd:af:df:89:9f:
                    83:11:1d:8d:14:89:8e:17:5b:e6:56:a5:dd:2a:18:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:B0:51:BE:7E:55:15:02:DC:13:11:89:2D:D2:EB:AE:72:3A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/00d08eac-bbd6-357c-bade-795e2adf6be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:9c:a7:59:17:cd:d6:d9:b3:f4:2e:44:e4:93:f7:42:a4:
         ce:64:a8:04:9e:58:22:91:a3:97:28:02:15:8d:f7:81:6a:1f:
         bc:fa:18:96:88:ef:4d:81:fe:44:87:82:a6:12:5a:43:78:05:
         95:1f:95:23:98:f9:ee:1c:9e:1f:e3:47:06:55:f6:84:13:59:
         d1:05:d3:fb:f8:50:60:40:f8:d5:fb:8b:a1:30:b9:ed:81:9b:
         b8:60:13:9b:99:2f:11:96:a7:91:61:4d:26:a0:5c:16:64:b2:
         73:25:27:24:7c:02:4c:70:e6:f3:f4:84:e6:a4:df:a2:5b:cd:
         b8:8e:f0:6b:e8:58:e8:a1:9c:05:2a:f4:59:8a:06:7e:08:25:
         98:67:13:e7:93:3d:a8:71:71:06:81:46:25:40:b7:e1:70:d9:
         3e:ec:f0:a3:10:97:4e:d4:ae:55:3d:80:e5:94:7f:ed:39:56:
         1e:e7:08:27:b9:e6:bd:c2:c1:00:17:68:5b:67:5e:48:42:d3:
         88:a6:39:01:15:5d:53:ac:c0:e2:c0:c5:a5:fe:7f:1a:1f:17:
         17:79:c1:e8:dc:cf:9a:b0:6e:b7:c5:7c:a2:50:fd:4e:6c:f7:
         fe:c1:b4:05:d4:e4:6e:4c:1a:8f:88:4f:74:5a:18:04:a7:d9:
         ea:5f:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:17 2025 by rpki-client