Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5fbc95cb-7a7c-3fc5-89d7-78c1fbeb036d.roa
File:                     5fbc95cb-7a7c-3fc5-89d7-78c1fbeb036d.roa (raw, json)
Hash identifier:          eVk1KmWYeTb2HGb920WxOUpUD18bf14cXY2T9QK5ako=
Subject key identifier:   E1:1F:63:B1:4E:06:4C:56:AD:1D:A7:C0:44:DF:69:67:EB:0C:58:53
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584AB91BB525CC93B7410AE5E180
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5fbc95cb-7a7c-3fc5-89d7-78c1fbeb036d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        143.223.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b5:25:cc:93:b7:41:0a:e5:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=ddaf5e54-ea5d-4a0a-b4eb-135da5370999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:7c:8e:03:06:52:53:91:40:88:81:47:97:
                    32:b2:4b:a2:69:1d:55:2c:b3:c5:ab:63:1d:bf:9c:
                    03:88:2b:5a:fa:7b:04:40:0a:1e:93:63:17:6f:20:
                    a5:89:c9:7e:42:c3:64:b6:5f:d4:23:f9:a6:08:ef:
                    54:56:d1:2f:04:41:14:06:6e:7b:5c:b6:2d:b5:89:
                    41:fb:c4:e8:50:51:f4:5f:24:4d:78:5d:de:9b:cd:
                    be:47:4a:f8:48:5a:07:86:ac:4e:41:91:55:f5:7a:
                    61:08:fe:1d:14:20:2f:f1:94:cd:b0:20:42:78:a6:
                    c1:bc:9d:f7:01:ae:49:f5:21:1d:b3:6f:ec:83:61:
                    43:f2:da:0b:6f:12:be:94:04:b3:d2:f2:52:04:d0:
                    de:de:ae:8b:70:a4:7d:72:30:81:41:42:88:ad:7c:
                    77:4c:e4:8c:0e:3c:3b:a5:5b:52:a2:1d:af:72:e6:
                    bb:40:9b:9f:99:b1:d5:fa:d1:07:d3:da:c5:63:ae:
                    3e:2a:98:54:a2:dc:e4:e6:78:0b:f5:37:96:5b:fe:
                    f3:92:ec:cb:0e:c8:cb:e1:e5:50:2b:06:a8:1c:fd:
                    9e:1d:10:eb:a3:18:f9:43:27:18:82:94:d2:cb:4d:
                    1d:c6:d0:b7:06:1e:e4:87:5c:aa:b9:4c:9c:d1:07:
                    43:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:63:B1:4E:06:4C:56:AD:1D:A7:C0:44:DF:69:67:EB:0C:58:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5fbc95cb-7a7c-3fc5-89d7-78c1fbeb036d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e3:b2:d5:e0:7a:10:e9:6d:34:5d:55:87:9c:99:1d:2c:51:
         24:dd:5e:d2:12:76:16:a3:db:d5:d1:b8:26:32:eb:6e:37:6a:
         6a:c3:9d:60:f3:ca:4b:4d:b2:a6:f6:40:75:76:7b:0c:ec:26:
         a1:e6:d9:57:17:a6:ad:5b:84:eb:55:ce:12:8a:a9:57:83:af:
         47:1a:b6:ed:ff:99:6b:b6:9d:20:0e:ef:b8:e2:b4:ff:31:bd:
         f4:e2:86:99:4c:f4:64:0a:de:f8:da:c4:da:8b:97:bd:99:96:
         9c:48:40:ac:34:3f:a7:38:8c:47:e7:02:7a:74:6c:51:5e:0a:
         26:9e:82:57:a9:d8:26:65:e7:1e:31:34:e3:82:04:74:8b:2d:
         0f:6a:28:38:59:b3:c1:62:a3:b0:84:24:58:5f:02:2f:d1:1a:
         44:49:d1:7a:ef:dd:31:b1:57:2b:97:12:90:02:8e:86:b6:3d:
         4d:9b:cb:35:12:11:65:fd:13:7b:f4:ef:60:af:2b:fe:d6:15:
         c8:d7:c5:cf:02:83:24:ec:f9:52:76:08:d9:0c:06:aa:f6:65:
         9f:32:85:fb:2e:23:a9:55:a9:ed:72:5d:5f:62:e3:18:c9:ff:
         48:a4:eb:04:67:4a:a9:24:b5:fe:5c:94:a0:d0:81:ef:fd:f0:
         c0:45:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:05:46 2025 by rpki-client