Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa
File:                     bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa (raw, json)
Hash identifier:          7YIVubTc+RESOfnHIwVDLKRipFza+yBrmVawSn7mKJE=
Subject key identifier:   B8:2F:3B:0F:D5:FA:A5:AC:3C:1B:1D:73:F8:03:48:9B:15:B8:32:80
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F4328584A268ABD35FD71B95C3A855E00
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        199.47.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bd:35:fd:71:b9:5c:3a:85:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=a72cbde0-e50d-4947-971a-2e874575de71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:a3:4a:59:29:f2:45:fe:68:8d:e6:e3:43:
                    bf:23:c5:ff:31:a3:c1:e2:b0:d5:8a:57:ee:bf:99:
                    dd:a5:ba:c4:ea:68:77:03:34:09:a4:8f:f2:e4:62:
                    08:2a:bd:4b:5b:11:35:dd:64:8b:19:db:6f:bd:12:
                    2f:c9:2d:4d:21:12:67:ce:4f:ab:5d:17:31:4b:8d:
                    c4:c3:32:7a:0e:e5:fc:c5:bc:3c:ae:9f:94:75:65:
                    8c:1f:23:96:a2:b9:28:7b:77:00:89:eb:46:bf:a5:
                    af:0c:6b:b2:6b:c1:04:3d:65:e0:4f:68:b1:16:a6:
                    52:28:03:5b:ae:97:f6:c9:10:5e:20:6e:7d:22:09:
                    ff:2d:df:7d:9d:18:4a:08:d9:35:2f:81:cb:d8:94:
                    fc:60:91:b3:e7:2f:74:e7:4b:b4:49:24:dc:5a:99:
                    d4:76:38:ca:55:1b:5e:2d:35:b6:16:fe:55:e1:6b:
                    75:e2:98:37:b6:02:a0:8d:39:71:cc:0c:b5:76:e0:
                    7d:46:30:04:e7:d7:9a:03:23:ab:53:dd:10:15:1a:
                    48:ea:a8:84:e8:47:5a:07:0a:b3:91:f8:bc:bd:d5:
                    bd:e8:05:7c:75:af:86:bd:d7:08:60:2e:3a:8b:c9:
                    07:c9:19:67:20:b1:8c:d6:a6:90:7f:41:d0:c4:56:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2F:3B:0F:D5:FA:A5:AC:3C:1B:1D:73:F8:03:48:9B:15:B8:32:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bc873ccd-1844-39f0-b7b4-9e42d78818cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:8f:e3:67:b6:2b:87:89:01:17:2d:19:0f:46:db:8f:0b:
         a7:35:56:15:a3:d7:2b:30:ba:ec:7a:ab:2e:c5:0b:40:99:67:
         3b:25:74:3c:55:b9:d1:95:00:b0:34:f5:ec:39:b1:9b:bb:3a:
         ed:8e:13:19:f7:c1:d4:50:1a:7e:c0:a8:cb:99:65:32:6c:ee:
         94:ee:ed:c1:46:49:d7:2d:2f:6f:3b:c1:38:76:be:4b:9c:e6:
         06:f3:dd:04:e6:75:00:9b:df:0f:8f:d6:7d:78:99:d7:83:b7:
         e1:aa:54:5f:18:3d:af:23:e8:38:49:aa:8a:12:56:21:22:b1:
         79:d6:62:6d:02:07:35:ef:4a:d8:a6:95:03:10:3a:63:41:30:
         d1:d5:b1:f9:a0:9f:42:66:1c:67:79:0a:07:be:e2:83:7c:a3:
         8d:27:9e:a4:2e:4b:b3:80:22:69:2b:ca:23:78:49:f9:ee:5a:
         c1:ff:c1:fc:dd:7e:d0:51:88:0a:bb:a9:e0:bd:09:8f:02:4e:
         ad:4b:a5:ac:26:2b:a9:9f:cd:d9:a5:15:dd:fc:ea:6e:47:b4:
         d8:c4:45:fd:b8:01:71:d9:62:11:80:63:bd:ee:53:f6:57:6f:
         04:88:89:c1:a6:f6:54:d7:86:86:5c:0f:9e:53:21:33:e6:4c:
         49:16:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:43 2025 by rpki-client