Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa
File:                     234fe58b-199e-3247-b983-9ce4a12667f6.roa (raw, json)
Hash identifier:          WMv7ruG/dzZb7dxpgguxBNV5erS1jkMYGaY0e8ar8Ek=
Subject key identifier:   85:B2:55:D1:0D:62:80:8D:BA:AA:34:2B:18:CF:FF:23:82:CC:60:5F
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584ABD4B74EEA5EE0DBF4947DC80
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     14618
IP address blocks:        142.147.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:74:ee:a5:ee:0d:bf:49:47:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=98c9dc32-3be1-4f83-a973-4a1e69af9c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:8a:b1:88:5d:4a:16:48:3e:ea:ee:93:fe:
                    a9:19:b2:6d:af:5d:54:31:d6:5d:fb:42:b4:07:de:
                    f5:d1:72:40:95:65:17:5b:36:06:f8:8a:ed:e8:09:
                    c3:7e:00:bb:d5:a8:b9:fd:ef:47:ac:5e:29:b8:be:
                    0a:18:67:a7:a7:68:dd:9e:f8:ed:e5:43:81:bd:0a:
                    7b:d2:9d:50:66:83:79:cb:8a:fe:1f:e6:6a:79:8e:
                    9b:29:46:35:2a:03:af:67:fc:c0:0e:61:55:e9:8c:
                    97:1c:c2:3a:80:2f:55:8b:ff:21:ba:51:8e:f1:d7:
                    ad:d0:f1:9f:b9:05:12:6d:89:f2:8c:f0:f6:29:6d:
                    c2:36:02:f3:38:7e:8b:fa:a1:07:80:0f:4c:23:91:
                    54:b6:22:60:a1:0b:46:ce:49:32:79:0a:b7:eb:ba:
                    0e:34:91:05:84:56:d8:03:55:f1:98:5e:57:5e:75:
                    d2:be:9d:63:07:e0:96:07:8d:d6:86:ae:09:3f:58:
                    29:f3:a9:99:a0:c6:75:28:f6:da:1f:ef:f6:10:56:
                    0d:5f:8d:ea:e4:61:1d:ef:4f:be:84:f9:f1:de:af:
                    1f:2f:60:74:ca:28:8a:ef:98:36:c4:35:1d:c3:14:
                    b0:23:73:17:46:f5:d4:25:b8:b7:77:3c:48:29:4c:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B2:55:D1:0D:62:80:8D:BA:AA:34:2B:18:CF:FF:23:82:CC:60:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/234fe58b-199e-3247-b983-9ce4a12667f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:e6:5f:13:3e:99:e2:a9:ec:54:ed:94:35:df:3d:94:6a:
         58:a1:68:7a:fd:50:20:02:ec:c9:3c:1f:1a:92:63:23:fe:a0:
         f2:86:e1:59:a4:e4:dc:0c:2e:ad:c8:56:8f:6c:8c:21:be:ee:
         24:8c:2b:60:c5:78:e0:a3:a9:c8:0c:da:4d:36:bf:d3:8e:21:
         76:2e:33:a9:e1:d1:2c:86:20:a3:c4:cf:6e:8a:bb:ce:48:03:
         86:a2:4e:c0:77:90:2e:af:69:d4:b8:97:b0:33:b6:03:8c:d1:
         11:5a:3c:05:db:66:a1:03:ea:b2:26:29:d5:bc:1d:1f:80:1c:
         aa:ed:58:15:b6:25:1f:b5:dc:83:69:18:79:74:5f:e0:64:b3:
         ad:29:ee:83:c6:c6:47:1f:92:7e:a9:43:11:7a:a7:ea:b2:cb:
         c3:92:8f:c6:b8:37:e1:7c:77:83:e9:b0:63:b5:99:20:fd:0b:
         16:5f:ab:a6:1c:0d:3d:d7:44:7b:8e:9f:0a:55:a9:03:51:76:
         18:3c:1a:de:52:e5:f1:bb:61:9c:d2:d1:ee:42:89:81:ec:bd:
         f8:da:2d:46:4e:c2:1b:c2:3f:22:80:41:df:90:41:1d:a9:4a:
         88:f6:75:2b:13:bc:cd:e9:2c:5c:80:e2:79:e1:49:d2:77:c5:
         d2:33:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:36:47 2025 by rpki-client