Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa
File:                     96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa (raw, json)
Hash identifier:          OLakXFhC31JAwxfi+kNCrxPDisay9Ex4J6V99UExCY8=
Subject key identifier:   16:96:C8:46:AC:21:AC:BD:4D:34:65:EE:76:11:DD:E9:8C:D9:F5:82
Certificate issuer:       /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb
Certificate serial:       010D0C9F4328584AB650F0ED5E2A19A67D4CBB80
Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        170.52.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f0:ed:5e:2a:19:a6:7d:4c:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=364d8f93-8ec2-46c4-aebe-13959e1539c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:f0:86:97:77:96:79:dd:b2:d1:82:25:2c:
                    c4:04:e0:fa:c9:3c:75:6e:a5:68:99:87:51:3d:d2:
                    1e:59:ee:86:fa:cb:39:51:43:0b:20:eb:f5:ed:3a:
                    52:e7:15:5a:4b:a8:59:9c:59:0c:36:3e:b9:78:5a:
                    63:fe:3e:48:78:d8:6a:54:aa:c3:70:73:1b:4d:f0:
                    5c:86:68:ca:10:a9:e1:19:38:4a:1b:3a:59:f5:b5:
                    6c:21:e1:f8:94:50:82:6f:38:8e:5a:31:d1:07:48:
                    a4:39:0d:9e:b6:a6:a3:97:e3:d3:38:c7:a4:ac:d5:
                    de:24:b5:cc:49:1b:14:7b:05:b4:99:d6:7e:b0:a8:
                    b8:cf:de:53:e2:ea:b1:d5:a2:51:1a:da:05:39:d8:
                    4a:07:d1:7b:a1:0c:6c:5d:87:ef:57:8e:87:98:0f:
                    dc:2e:0f:79:92:e9:2c:3c:24:9c:70:ac:7a:48:62:
                    1f:9c:70:47:01:97:d9:89:8d:52:21:bd:53:eb:9f:
                    cd:86:59:14:d1:b7:98:e1:1e:1e:6e:0e:00:15:cf:
                    e4:fc:13:c1:62:4c:d3:7b:e4:e1:09:34:35:ed:be:
                    b5:99:49:2a:a2:ff:b7:46:5a:39:e1:f1:87:5b:b5:
                    b3:e4:17:de:15:59:b0:3f:45:42:8d:69:78:53:7f:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:C8:46:AC:21:AC:BD:4D:34:65:EE:76:11:DD:E9:8C:D9:F5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl

            X509v3 Authority Key Identifier:
                keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.52.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:49:db:7b:33:e9:64:5f:17:31:62:ac:ed:e1:71:7d:48:bd:
         b7:89:4a:db:a8:d6:0c:dd:57:cb:3f:5d:1e:0c:ba:c1:cd:b3:
         12:22:ba:48:9e:d7:e0:30:87:30:06:25:6f:6c:40:d1:88:da:
         21:f3:f6:50:be:ab:9e:51:3b:c6:30:ae:a0:22:fe:4c:63:fa:
         30:50:95:d8:70:7e:99:14:78:cb:f0:bb:98:5b:0e:1b:7f:68:
         31:50:df:5a:9a:42:98:74:0e:50:dc:04:a2:ef:85:18:5b:82:
         08:fb:bb:05:09:8a:c8:80:c1:5a:a5:5d:55:69:46:f9:73:d1:
         62:82:ee:e8:6b:28:21:f8:ed:a7:93:00:0d:fc:81:48:ea:6f:
         66:10:d4:d8:45:a6:c9:75:73:5d:72:91:f3:10:dc:d2:23:11:
         31:d2:3f:a1:8d:5e:2c:f7:91:3c:0a:82:24:70:eb:31:4c:c5:
         cc:5b:da:6e:22:e8:c7:e8:8f:51:84:5c:31:10:b1:13:76:59:
         1c:0d:dd:43:19:76:68:66:b2:0a:54:99:a6:95:25:01:54:e4:
         51:49:66:54:43:96:cd:51:1e:1e:9d:8f:f0:bf:c1:80:c3:8c:
         84:0f:e9:b9:91:07:9f:44:f0:93:9e:4e:12:62:75:cb:32:42:
         5d:3b:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:36 2025 by rpki-client