Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa
File:                     0700df42-2943-3ba8-bc50-05cd067eaeef.roa (raw, json)
Hash identifier:          8AGEawN+AO2KqaJouQqGpKBCobqpzRFNkWI9APth1SY=
Subject key identifier:   E7:74:B2:88:3C:62:61:C1:4B:B5:4B:7A:18:93:9F:BC:1A:24:84:83
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F43285849FF751712A5E1DFA9B6BB5B40
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     401099
IP address blocks:        199.87.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:17:12:a5:e1:df:a9:b6:bb:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=d903e83d-ef5b-4699-a9ed-b649af9b3217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:c8:e9:59:af:24:1b:a7:79:99:29:5e:43:
                    a3:ce:75:fe:35:49:ea:7f:5c:2b:34:73:78:4d:07:
                    a6:76:c7:38:94:b3:18:81:42:14:ce:c2:63:21:f1:
                    d3:30:6d:b6:b1:43:fe:9c:b0:ec:ce:a3:fb:75:22:
                    9b:f8:c4:31:56:28:d7:d9:54:5a:44:64:d6:9c:e4:
                    e2:b3:1e:c8:9f:3a:a6:9a:74:b6:37:6a:11:1a:0e:
                    e6:1d:07:07:24:25:68:75:57:75:3f:1c:6a:5a:53:
                    92:95:94:26:76:9a:03:26:5e:d9:8c:7f:2f:05:0c:
                    a9:fb:0b:3d:a7:34:fc:6a:21:8f:7f:94:29:d4:33:
                    b8:8b:75:6b:de:93:ea:4c:e3:6c:0b:44:69:2c:33:
                    3b:da:fa:6f:b6:ca:6d:38:2f:74:69:7a:19:f2:7b:
                    e5:b8:7a:08:a9:16:dd:86:af:42:2f:bb:be:38:5b:
                    f5:2c:c8:33:2f:7a:c8:f4:75:c6:51:79:3f:a9:30:
                    e1:ac:c5:82:8f:3e:5c:ea:7d:d9:2c:83:02:a0:c2:
                    49:47:72:b7:d4:75:14:82:c3:25:b7:7a:44:14:4d:
                    17:50:aa:61:3b:ab:30:10:1d:fc:e0:0c:96:8e:b0:
                    93:ad:0b:5e:af:8e:ae:66:83:f0:bc:5e:ac:2f:75:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:74:B2:88:3C:62:61:C1:4B:B5:4B:7A:18:93:9F:BC:1A:24:84:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:78:cf:29:25:c3:40:8e:ed:fb:b5:14:70:19:ab:c6:31:93:
         5a:cc:b1:c9:78:94:15:9e:d3:34:7b:98:95:b5:3d:48:ee:70:
         3b:1c:45:d6:83:71:d0:4c:69:82:1b:5f:3c:c3:2a:26:31:d6:
         48:c4:48:08:58:cd:bd:5e:ef:84:de:4c:d7:8f:05:c0:ce:c7:
         a6:75:c0:e3:99:ad:8c:a7:ab:18:33:32:12:2b:29:a3:9d:2c:
         76:59:4b:ce:92:2d:4c:44:8a:46:f1:19:89:79:3b:00:55:9e:
         34:e0:df:88:25:af:3f:a4:0a:51:47:eb:bf:fb:7a:0d:09:aa:
         43:d4:dc:30:32:d5:ed:5b:16:dd:84:00:2b:41:e0:31:53:57:
         17:ab:83:d0:a0:66:e6:9f:70:35:a8:53:2d:24:b2:e3:77:57:
         01:4e:9e:aa:0a:14:d4:85:10:b7:01:93:7c:4c:14:4a:64:65:
         68:99:ed:8f:88:07:06:d2:ce:c4:84:35:f0:70:c6:ec:c5:08:
         87:16:96:1a:f4:04:0f:92:64:81:49:1b:a4:47:1b:84:85:fb:
         c9:de:6b:43:29:81:b8:51:67:cd:d5:b4:03:ac:0b:91:9b:04:
         4d:ae:3d:33:01:3d:6c:51:2b:9f:a4:d6:06:85:ab:64:46:da:
         eb:fa:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:31 2025 by rpki-client