Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa
File:                     7876d134-3637-313a-9343-6955464c6af6.roa (raw, json)
Hash identifier:          vrh/UmTMFkujFrx77XKOThqrIdg1j4mHIMdfatjjMjY=
Subject key identifier:   B8:A0:90:79:24:FA:08:B8:39:08:A4:90:ED:C9:C8:19:D7:88:CE:7F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A225AC5EE4BE1023E9E5E6A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     852
IP address blocks:        96.1.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:c5:ee:4b:e1:02:3e:9e:5e:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=1cf9d461-c605-4a39-832c-556dd27727b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:86:c3:48:6e:f0:5e:91:ba:42:d8:c9:3f:
                    ea:08:ff:ca:61:90:ea:42:76:f3:eb:e5:7b:6c:85:
                    01:5d:fb:35:69:c6:17:2a:6f:ce:87:5f:d6:14:9f:
                    62:23:71:b7:8e:bc:76:56:af:81:17:8c:87:ef:3c:
                    28:a1:7e:1a:42:80:43:8f:9d:99:56:2c:0d:11:2d:
                    19:5e:b1:0a:46:95:ff:28:67:32:b5:1f:3d:f7:18:
                    5e:5a:77:d7:de:8a:39:79:53:8b:cd:0f:c7:51:f2:
                    b0:f3:4d:36:e7:f8:ab:17:f7:34:a0:c9:d7:60:8a:
                    74:e8:16:5e:e3:b3:a6:0c:75:d6:17:ac:5a:d9:f2:
                    e8:6c:72:fc:06:82:3c:2f:07:01:2c:17:32:6e:51:
                    2b:67:d9:c0:4a:2c:bf:8b:34:8f:ec:45:0b:ac:f4:
                    3b:66:62:c7:db:65:ba:82:fe:40:17:98:1f:13:a9:
                    ad:0a:02:6f:ec:54:3e:b5:53:52:9c:c4:55:25:6e:
                    f0:2f:b8:30:9e:41:5b:27:15:bf:de:a6:3d:5c:99:
                    48:df:4b:65:db:e8:79:89:64:3a:2c:d2:f1:48:69:
                    87:06:19:60:cf:4c:bb:f8:b4:4c:0e:e8:44:b3:4a:
                    5d:d0:b7:30:a7:15:a7:be:79:80:10:5b:d3:29:9b:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A0:90:79:24:FA:08:B8:39:08:A4:90:ED:C9:C8:19:D7:88:CE:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.1.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:26:fa:71:92:97:2b:8c:d2:b8:49:89:22:c1:08:56:c6:6e:
         4f:86:3f:fc:92:17:b0:9f:7b:5b:48:72:43:e4:85:3f:24:bf:
         4b:56:ad:f3:0b:25:fc:e3:36:2c:1a:68:47:63:62:56:69:f4:
         14:3b:f9:ca:47:00:67:7f:dd:ed:2f:fb:a6:78:ba:5c:8d:08:
         10:07:b3:25:4b:ee:61:fe:0f:09:9d:6d:e9:2c:1d:aa:36:a5:
         a0:eb:49:7b:86:c9:b6:10:16:13:58:54:dc:9b:a0:2d:ee:b8:
         66:5e:25:0d:a7:07:18:e7:28:2a:01:7f:e3:6f:c5:c2:0e:28:
         b2:4c:60:86:1c:5c:50:fb:b1:54:dd:1d:67:62:17:94:ad:ed:
         f3:76:94:f2:e9:78:9c:8f:1c:c4:c9:f4:cf:fa:7d:ab:f4:f4:
         36:a7:f5:f3:64:63:fe:f8:ff:01:7b:09:3e:26:82:a2:64:db:
         ad:ef:9f:26:9c:cd:4d:49:7c:ef:6a:52:f3:80:6b:f8:fe:85:
         fa:a2:64:92:74:af:b7:09:2b:8c:6a:87:c5:f4:4c:5c:83:01:
         8f:b9:6e:83:95:f0:e7:76:b0:64:02:be:45:6c:4b:26:df:5b:
         f0:71:7b:6d:ef:93:e2:4e:96:50:8b:ae:21:3b:ae:16:8b:82:
         5b:6a:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:24:57 2025 by rpki-client