Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa
File:                     8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa (raw, json)
Hash identifier:          f2li18i+O/FOqcBNRxR8m0ZPl+de/Cmi0oyxYSVnjPU=
Subject key identifier:   B6:81:D6:E8:D5:A8:59:3E:8E:3D:1D:6C:D6:06:F1:ED:3A:A7:A7:F2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499AF47B68A1010837B4193BC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        96.1.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7b:68:a1:01:08:37:b4:19:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=8cd46d42-e045-455c-bf38-df650a3bee44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:ef:73:8b:60:b6:fd:b1:82:a7:d6:ac:bb:
                    12:ea:b2:6f:af:09:75:b2:38:86:9e:b9:9c:5b:2c:
                    4d:4b:1e:62:08:fe:53:35:d2:f5:fb:6e:a2:45:d8:
                    a0:79:33:b3:2f:b2:4d:66:ae:98:0e:72:e3:7f:de:
                    fb:a4:1f:4c:3e:4b:9a:42:ae:d4:2b:0d:a9:e1:8f:
                    16:be:5a:09:22:71:08:af:d7:44:7d:dd:51:c4:bf:
                    ef:f3:06:01:27:34:4d:ca:0e:d1:32:5a:f3:d5:ad:
                    d2:1b:25:53:94:95:11:be:66:9e:da:1a:e2:54:59:
                    f4:73:5b:c6:93:34:ff:d3:a9:03:ea:1a:ee:68:76:
                    ee:ff:7d:c3:7b:7f:89:f6:23:e6:22:49:2e:91:c7:
                    6d:17:8e:5a:9e:87:3c:3d:15:cc:37:eb:37:2a:71:
                    ba:6c:b5:85:37:61:8d:0b:07:9d:dd:fa:7d:ab:b3:
                    06:bc:33:b5:88:66:dd:28:f4:3d:ae:5b:d4:5e:c2:
                    83:60:3e:83:6c:39:a4:b7:da:fa:6c:43:70:29:75:
                    37:09:10:f6:d4:4b:bc:6a:80:a6:a7:63:93:69:a4:
                    f0:fd:c3:58:f2:5a:47:68:79:dc:07:5e:1d:b5:74:
                    10:1f:94:f0:d2:6e:6b:4c:ab:9f:f7:3a:2b:fc:ef:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:81:D6:E8:D5:A8:59:3E:8E:3D:1D:6C:D6:06:F1:ED:3A:A7:A7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.1.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c9:e7:e8:b1:cc:18:19:0f:bd:9f:f9:54:58:f4:b9:18:0e:
         1e:af:40:18:2d:c0:70:77:69:9e:3c:ae:1e:d7:47:52:ca:59:
         90:4b:79:bb:ec:f6:33:44:e0:59:a8:96:69:66:4d:bc:97:ed:
         2a:6c:4b:5e:e5:22:84:07:b9:8d:a4:59:18:c7:0f:01:11:b7:
         f3:c5:23:06:58:6f:bf:62:82:0c:ae:57:13:d3:db:78:2d:c4:
         72:a0:f5:9c:b5:27:87:2f:54:d5:fa:77:30:68:cb:1b:bd:6a:
         2f:8c:3f:50:4e:74:94:d9:1e:39:8c:6e:ed:73:dd:ab:94:bf:
         72:00:23:b5:40:89:10:0e:ab:69:c9:6f:99:1f:cf:46:33:31:
         b2:d4:54:64:67:ca:60:f9:4a:15:bc:53:ff:63:fb:89:81:76:
         ff:b1:af:d0:c3:8e:37:e7:6a:e6:e6:41:55:43:d4:27:76:b5:
         53:0e:5d:08:91:49:cd:61:6d:4a:4b:59:f2:1d:6c:44:98:71:
         14:62:ff:6e:4d:ee:60:b7:4b:2d:33:08:60:fe:79:5b:4a:2a:
         ea:13:59:56:63:cf:b9:b0:1a:e7:c9:6c:50:61:a2:a1:e4:40:
         3d:b0:17:17:ef:19:ed:f0:58:e3:35:c3:95:af:76:70:36:47:
         86:d9:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:36:52 2025 by rpki-client