Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/8310a4d1-9c0d-3cb9-bff9-1b13b64391ae.roa
File:                     8310a4d1-9c0d-3cb9-bff9-1b13b64391ae.roa (raw, json)
Hash identifier:          Iu/ezHAclFV+2MCCIGYDZzRJpwHDnquBngyJsYGGdFg=
Subject key identifier:   A5:68:29:E2:6F:32:F9:68:75:8A:CE:A0:29:18:12:05:29:93:D6:2D
Certificate issuer:       /CN=17499469-12e7-4915-9db8-02bba626b87d
Certificate serial:       010D0C9F4328584A8DD6012E7362FE64DAE37AC0
Authority key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/8310a4d1-9c0d-3cb9-bff9-1b13b64391ae.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     396432
IP address blocks:        194.107.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d6:01:2e:73:62:fe:64:da:e3:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17499469-12e7-4915-9db8-02bba626b87d
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=b9dd1921-82fc-43e6-a26c-61a4fd571c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:90:43:58:0b:30:91:b1:64:b4:18:51:18:
                    05:b9:67:9b:13:8c:1b:0a:90:ed:a6:a3:45:25:09:
                    f1:31:a8:87:6e:4e:6f:70:11:15:67:60:87:1c:2b:
                    b2:08:ca:4f:94:fb:20:00:69:90:98:d5:99:4e:4c:
                    58:8b:86:94:dc:e4:5d:6c:cd:ac:8b:80:48:46:82:
                    d6:c4:e0:2b:8e:e7:60:e7:59:bb:9c:ed:41:84:2b:
                    8e:50:17:1d:b9:79:90:09:9a:ca:4c:f9:76:ba:be:
                    82:40:f9:aa:13:a0:b2:fb:9d:b4:17:7e:94:54:77:
                    01:7d:bb:20:80:35:7b:e1:52:14:ae:da:56:83:83:
                    bc:51:2b:4c:26:e3:c8:53:72:e3:11:23:95:87:f6:
                    03:63:fc:52:8a:b5:92:7c:bf:19:68:d8:bf:0d:b1:
                    48:52:82:b6:92:c1:b9:8a:dc:cd:82:9b:05:ca:02:
                    e0:e0:9a:87:0b:c1:a3:79:86:55:11:92:13:6f:ac:
                    43:45:8d:3f:30:35:44:20:32:ca:7e:8c:54:77:bc:
                    84:3b:37:f6:2c:7b:98:fd:9e:23:01:f4:a1:4e:50:
                    c8:2b:68:7b:2b:19:9a:7d:2d:be:eb:ce:da:85:eb:
                    84:2b:58:19:92:70:6d:00:88:ec:c7:54:dd:ef:e0:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:29:E2:6F:32:F9:68:75:8A:CE:A0:29:18:12:05:29:93:D6:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/8310a4d1-9c0d-3cb9-bff9-1b13b64391ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.107.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:5d:e4:26:3b:cf:e7:ee:3d:77:87:65:70:0d:16:17:3f:
         d5:a8:79:2a:2f:c2:b9:a9:97:52:f3:09:bc:63:e5:0d:39:75:
         86:17:58:2d:26:6d:d9:6a:41:ac:98:58:8f:ff:06:e4:e1:d1:
         3e:18:94:1b:09:48:27:30:d0:99:35:fe:53:2d:45:1b:3c:9d:
         ae:0a:28:ec:08:ce:0b:55:23:5c:01:46:a3:9d:f5:e6:9e:02:
         23:37:c6:34:6a:a8:09:e6:00:b6:f7:b4:a8:c2:dd:27:dd:bd:
         68:6f:69:55:18:74:a0:b9:98:6d:54:cb:d9:bb:c3:14:9a:e3:
         b7:a5:9e:2e:16:94:15:58:e8:84:ac:44:ff:05:d5:ea:f4:01:
         df:78:c7:38:85:64:d8:a5:b4:6d:52:f0:91:c3:64:a0:00:30:
         95:15:66:ae:4a:ba:7f:9f:e6:60:03:43:a3:66:e5:aa:35:6f:
         6a:a0:33:dd:1c:ec:19:24:dd:c4:72:7f:fb:c1:18:cf:bb:40:
         f2:22:00:ef:95:af:42:91:69:1c:b1:ae:a2:3b:a0:0d:eb:5e:
         c8:ae:1c:01:74:3e:94:22:41:67:a9:0b:2f:b0:e0:fe:9f:5b:
         09:d6:d6:a3:0c:7c:4e:53:85:23:8b:3f:ba:ec:39:13:22:ee:
         ac:a0:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:14:18 2025 by rpki-client