Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/9a77429b-b732-3670-a956-abdb53892c9e.roa
File:                     9a77429b-b732-3670-a956-abdb53892c9e.roa (raw, json)
Hash identifier:          2PsIe7F6goWSqO7Plz0icLpczn7ZqDNkWraE1FEiBDw=
Subject key identifier:   80:B9:73:0D:D9:36:EB:5F:92:D3:4B:34:AB:1A:99:53:24:6C:3E:B3
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584A225ABA409E677839BE8A7B80
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/9a77429b-b732-3670-a956-abdb53892c9e.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     996
IP address blocks:        65.110.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:ba:40:9e:67:78:39:be:8a:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=f498de5b-db4d-4e3b-9feb-32f542a6c77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:35:cc:83:98:0d:9f:0f:cc:b7:61:83:45:ed:
                    81:21:04:c2:c1:01:be:70:1d:a6:b1:21:f5:00:f9:
                    ca:1b:93:44:6f:d8:70:d4:6d:04:bc:ad:86:af:ca:
                    3a:9d:73:19:33:0d:51:7b:53:9d:14:4a:22:b8:2a:
                    1b:38:f9:5b:de:df:5b:8c:86:f0:eb:a8:7d:bc:a2:
                    fc:b8:08:4d:13:63:9b:fd:f9:4b:80:f7:91:8d:38:
                    df:a5:2a:28:2c:62:d1:21:6a:f3:06:a7:5a:d5:a9:
                    35:a5:a8:1e:95:6d:93:5c:f0:e1:ae:0b:72:ce:a2:
                    71:79:96:d3:d4:5d:ab:ff:e0:64:53:77:76:ad:7d:
                    29:54:72:91:92:75:ad:2e:2d:27:dd:8f:b7:18:d7:
                    8c:79:f9:a7:56:35:8b:a0:5b:0d:7d:86:cc:07:5b:
                    51:5d:76:1f:96:9d:8e:2c:83:3f:e0:0d:bd:1c:14:
                    f5:9a:b8:93:a6:06:02:78:ff:9c:81:d1:bf:5a:57:
                    04:0e:ea:f2:23:c8:24:a4:08:1b:2f:5b:04:1f:99:
                    6a:44:8a:a2:bd:e1:8b:e4:59:9a:62:1a:2f:02:99:
                    fd:78:c6:7b:4f:95:0f:c0:2a:e8:e6:87:66:63:8d:
                    bf:9c:7b:90:71:29:89:ad:01:e6:5c:95:02:e5:c4:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B9:73:0D:D9:36:EB:5F:92:D3:4B:34:AB:1A:99:53:24:6C:3E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/9a77429b-b732-3670-a956-abdb53892c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f1:ae:bc:81:b2:79:60:86:21:eb:81:d6:2c:53:c4:19:e8:
         1b:69:48:8a:68:c6:38:d6:ff:a9:51:bf:a0:5d:d3:a4:e6:a0:
         63:e1:ce:5e:28:c1:6c:10:f7:7d:d3:a9:cd:80:56:41:42:b1:
         08:12:79:1c:2d:98:db:71:57:14:10:eb:f5:dc:05:c6:25:6e:
         7f:bf:94:e1:11:ec:81:f1:e2:8e:83:e2:59:3d:49:cc:5a:61:
         1b:73:cc:2f:64:22:d9:0d:f5:ea:63:d4:bf:f3:72:4c:3f:5a:
         e2:4e:0c:1a:f6:8a:a4:b8:d0:79:73:f2:68:f5:db:a0:bd:e8:
         6a:42:38:15:20:6f:72:ab:c8:90:ea:2a:66:73:1e:45:43:7f:
         4e:ab:0a:e0:d4:be:b6:6e:b4:56:78:d2:ac:ad:6a:72:6e:f4:
         66:33:18:e0:4b:37:f5:c4:cc:21:18:e9:c4:71:ea:cf:8c:2b:
         e5:23:ad:73:26:07:ec:d2:dd:35:13:6c:f0:03:80:8e:04:4d:
         dc:6d:b4:f8:cb:c3:84:bb:d3:3f:d4:3f:ad:15:88:61:0a:ea:
         e0:b5:56:c5:5f:b1:1f:c3:d0:68:95:ac:47:57:da:0a:7a:12:
         1b:e6:5f:8b:89:bb:64:0d:6a:93:c4:f8:a5:b2:a7:b3:e6:f1:
         00:d7:62:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:36 2025 by rpki-client