Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa
File:                     97addbf9-8792-382f-a146-c3d955a34f50.roa (raw, json)
Hash identifier:          sjckiOXRbSJDIT3fiZsEd1UDxtAjYsrRn4j+cugenDA=
Subject key identifier:   69:40:E0:4D:89:A4:08:89:15:D9:71:5C:AC:A1:29:8D:A8:4E:7A:35
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584AB91B98168D759FBED6F88200
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     27419
IP address blocks:        63.246.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:98:16:8d:75:9f:be:d6:f8:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=df389c5c-b67a-438c-9374-55bd08201825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:4c:1a:11:4c:00:61:f3:f8:82:5c:fa:5c:
                    8b:80:a7:04:15:78:90:2a:5e:65:d4:e6:07:10:fc:
                    85:20:d4:43:99:0c:03:a8:26:6e:ee:51:79:4b:e4:
                    ea:04:1c:24:18:7b:b4:cc:15:36:10:19:4e:ac:75:
                    2e:a1:93:e7:7c:26:43:be:e3:b2:c0:17:64:62:3b:
                    06:90:07:e7:8d:3f:27:e7:17:5a:ec:2f:4d:48:32:
                    fc:4a:02:8a:0d:4c:73:e9:00:b2:a0:cc:a5:51:8c:
                    23:31:74:60:ed:44:5f:45:08:58:52:d5:23:8b:4c:
                    2d:65:0f:0f:36:c5:db:cc:85:7b:5b:45:19:c4:f4:
                    c2:a8:74:ac:66:7a:41:10:30:b2:3e:86:d3:65:98:
                    6f:df:e5:fa:e3:b8:70:08:df:1c:26:69:6f:c8:1a:
                    67:be:49:c8:28:51:1b:62:29:31:5e:74:da:79:b9:
                    df:50:31:b5:bd:45:31:4d:90:53:20:d6:13:e8:5b:
                    95:00:56:b9:37:b4:c2:6a:61:c5:e0:34:10:17:fa:
                    c8:33:cc:ea:87:60:3d:ea:8f:6c:2b:70:a5:b0:dd:
                    23:a2:7d:26:20:98:6c:ce:2a:59:7d:7a:94:cd:6b:
                    98:e1:ff:7a:28:99:c8:37:ca:85:69:81:0c:92:83:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:40:E0:4D:89:A4:08:89:15:D9:71:5C:AC:A1:29:8D:A8:4E:7A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:45:47:f0:fe:b0:22:d2:03:56:b7:d7:00:24:1d:8e:62:
         d9:61:ab:a8:b3:fd:13:a4:9b:65:1f:5b:6e:31:72:c7:91:a0:
         4e:44:46:8b:fb:e5:b7:fc:9f:b2:e2:74:ec:f9:75:c5:e1:a1:
         4b:df:3b:07:7f:20:5a:68:26:f6:56:59:e0:52:7f:19:ac:6b:
         b3:ba:cb:3a:0a:06:2d:e4:41:a9:d8:aa:ea:ae:f2:d0:b2:e5:
         e6:c9:8f:8c:8a:ba:d3:05:28:1d:79:77:88:1a:7c:24:7b:a9:
         2e:bf:2b:03:ad:31:e0:5c:2b:f3:e8:c3:d1:c0:ae:d3:84:f2:
         ba:78:d4:2c:7f:ad:88:04:bc:58:4f:68:e9:2c:d4:b9:a7:34:
         60:cf:8c:ba:e8:6c:1e:ae:01:ac:36:07:57:d3:c2:79:43:ba:
         b2:86:5f:c4:82:87:9c:f8:5f:a8:e0:2c:3f:06:65:c1:8f:a2:
         08:09:7b:3f:4e:49:1a:00:96:04:9b:ad:e7:c4:be:2a:14:42:
         42:f7:dc:69:5c:83:97:fc:b1:fd:61:15:21:7f:2c:13:ee:4d:
         0a:59:ef:0e:d8:04:ed:5f:44:25:67:0b:d6:6f:8b:76:0a:c5:
         84:d3:68:ff:ba:d0:57:b0:55:5e:5c:2b:36:54:47:21:39:cb:
         a3:04:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:47:49 2025 by rpki-client