Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6119ac1c-3376-3a3c-9489-6a77192f375c.roa
File:                     6119ac1c-3376-3a3c-9489-6a77192f375c.roa (raw, json)
Hash identifier:          4F7Fl7eDFKhnI4rhAstH3mbkmkO9bc6PNZNmCW5OTHM=
Subject key identifier:   5B:D7:D7:E1:A0:70:CC:E7:33:AA:E9:15:DA:98:CA:12:4B:C0:62:B0
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F4328584B9E079339B610E83B685C3EA0
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6119ac1c-3376-3a3c-9489-6a77192f375c.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     16527
IP address blocks:        96.8.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:93:39:b6:10:e8:3b:68:5c:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=d671b728-303c-4340-ac49-c6fe1585a3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:9c:43:bc:87:60:a4:76:1d:e4:46:61:da:
                    75:1c:de:81:af:3a:fe:14:03:a9:ae:a3:6c:84:0f:
                    83:6a:6c:5c:b8:f1:85:08:48:d2:00:21:ca:41:31:
                    e1:09:6d:ad:9a:8a:5c:c7:ef:0d:5e:e6:44:a4:c1:
                    f9:bc:de:12:8c:be:ef:59:b4:04:b5:ae:8f:83:d9:
                    f4:dd:00:1a:6e:7a:e2:3c:eb:f2:dc:db:bb:b1:37:
                    b2:de:dc:97:d9:12:d8:5e:f0:be:c8:89:ff:3d:00:
                    6b:62:cd:03:66:08:32:5c:8f:8a:ad:69:87:6e:2d:
                    2d:f7:0a:8b:e3:93:5f:1d:77:67:6d:7b:b2:82:09:
                    a4:e1:ff:4d:ec:3a:98:45:90:4a:f5:ab:3b:3c:b9:
                    2c:80:22:a2:a4:b5:8d:f3:4d:15:49:26:c9:8a:1b:
                    0c:71:d7:fb:94:8d:fb:c0:e6:89:c2:c3:ea:73:d8:
                    8e:c9:ba:e2:23:97:a2:11:fb:a6:60:28:52:3c:e6:
                    24:3c:16:99:af:59:18:69:4a:1d:9a:1f:be:49:99:
                    9e:c1:ed:a1:d2:f5:6c:fc:ea:8b:93:d8:a3:bd:ec:
                    a7:e4:a3:57:82:a4:ad:51:d1:65:93:5f:47:21:5b:
                    dc:b3:23:64:7c:96:53:7a:e0:84:c7:56:f9:50:27:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D7:D7:E1:A0:70:CC:E7:33:AA:E9:15:DA:98:CA:12:4B:C0:62:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6119ac1c-3376-3a3c-9489-6a77192f375c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.8.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:2f:fe:fc:bf:8f:97:26:47:0d:f7:df:d2:01:e4:fd:8c:
         ad:9e:8f:a8:1f:4f:69:cc:34:72:6a:ff:68:a5:84:fd:08:2e:
         5e:68:1f:23:c8:d0:b8:f1:98:21:14:87:a3:dc:e6:8f:1b:b1:
         87:04:52:65:77:bb:0f:1b:b5:e7:35:0f:f8:5a:d4:a9:f8:4c:
         8e:c9:bd:29:e8:5e:eb:79:d2:62:d4:ca:67:40:ae:38:ca:00:
         2d:a4:fa:94:2a:f0:8c:b7:51:9b:cd:2f:0d:81:1d:12:b9:80:
         31:5a:ea:42:03:b1:88:10:07:2c:8b:7b:cc:d0:a9:b2:76:4e:
         db:d3:2e:f6:45:a2:8e:04:bd:7a:ee:7f:f4:09:8d:4d:4d:c1:
         52:ac:f2:06:ff:dd:42:bf:94:f5:0b:d3:33:21:2d:75:bb:4a:
         3a:92:a9:c5:9b:2f:13:64:c4:19:d5:79:32:da:ae:31:f8:34:
         8c:32:b5:97:93:6d:db:e4:c6:7b:e0:98:e0:e2:8f:0c:92:d8:
         02:2f:d3:cc:e6:1c:ed:2d:9c:1c:04:e6:f1:61:0b:fa:a0:f9:
         85:ee:9c:ca:45:98:0b:b5:97:6f:4a:c9:79:c4:35:03:19:11:
         ed:55:3c:49:35:ff:42:32:5c:e8:f8:7c:32:a6:bb:b0:91:ba:
         a6:d8:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:18:03 2025 by rpki-client