Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67889471-88b7-3467-b8b6-ce481cfdcf2d.roa
File:                     67889471-88b7-3467-b8b6-ce481cfdcf2d.roa (raw, json)
Hash identifier:          ukOpbJ/aF8P+hHUvHdQY7jhidrr8xEDe7USN+sS/Q8Q=
Subject key identifier:   BB:22:7A:22:93:B0:E9:F9:44:E0:67:38:EA:CB:41:8F:FD:BB:45:63
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A9D30FD407973278D8415CFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67889471-88b7-3467-b8b6-ce481cfdcf2d.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     200005
IP address blocks:        96.7.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:fd:40:79:73:27:8d:84:15:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=b106df92-82ea-44fa-a8fa-73fed1d800af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:69:83:c0:2f:76:81:ea:70:7b:df:fb:17:f4:
                    48:cc:78:68:75:47:0b:a1:24:54:a7:80:d4:b5:27:
                    fa:68:28:8f:a3:f0:f6:80:d8:3b:93:6a:db:63:aa:
                    b9:39:3b:01:61:0c:c9:e0:0e:c2:f5:f7:37:05:33:
                    8b:c0:c5:0b:e4:81:c3:1c:ac:c2:66:5c:d5:bc:56:
                    16:99:0f:13:16:7a:91:2e:e3:e2:cc:91:8a:d3:bc:
                    99:96:74:54:bf:25:43:a8:90:72:7e:26:9f:12:9b:
                    06:7f:15:c3:36:f5:79:fe:47:3d:86:6f:24:30:82:
                    f8:02:08:70:c5:3d:61:e3:c4:ad:5c:40:bd:c1:b5:
                    e6:a7:61:6e:cb:43:3e:e8:2d:4c:f6:c3:7c:9a:82:
                    f2:d8:4b:14:27:42:62:24:50:1a:bf:f4:ba:d4:37:
                    91:ab:cf:7e:82:36:2b:45:f3:a4:cb:22:1a:38:49:
                    b8:5a:f4:ff:ce:3a:b6:08:26:ec:ca:65:33:11:dc:
                    11:57:d5:97:d4:04:71:7e:3f:c5:d3:d1:e6:d4:c6:
                    f0:99:7e:b6:13:f3:9b:e0:3e:ce:7c:02:41:43:69:
                    77:ef:34:4f:46:d5:cc:32:a8:64:82:24:25:d7:25:
                    d5:c2:a6:2b:a0:9f:fd:93:03:09:d4:d5:31:85:42:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:22:7A:22:93:B0:E9:F9:44:E0:67:38:EA:CB:41:8F:FD:BB:45:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67889471-88b7-3467-b8b6-ce481cfdcf2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:a4:3f:59:51:5b:4b:de:12:d5:77:05:14:37:a2:d2:61:
         3d:ba:c2:e5:1a:44:cb:40:f5:1d:81:16:03:b3:7c:94:7b:80:
         77:26:e4:d9:c4:b9:df:d2:38:33:6a:40:a9:6a:28:cf:50:e6:
         d3:82:22:f2:2c:36:ba:09:8b:97:e7:f5:c6:5b:35:01:df:c8:
         9e:fc:e7:bd:97:d0:17:ea:47:74:87:80:a0:f1:b8:ed:45:b3:
         4c:e4:a1:4e:f3:42:2a:e8:71:fc:1f:f2:1e:b1:e9:9f:28:4e:
         01:36:e6:68:e3:b2:23:07:11:ca:09:90:a3:2a:33:94:5f:59:
         5e:7a:c7:5f:5b:e0:d5:b9:c0:b0:a9:a0:0c:33:06:46:0b:49:
         5a:d3:8b:9b:fb:8a:93:57:48:7b:4b:89:db:5b:93:8c:7e:94:
         84:85:1c:36:2c:16:d2:d1:44:57:94:f6:e5:72:90:01:4b:3a:
         c5:53:43:b0:67:1b:a3:cb:7b:d8:8f:e4:a3:73:e5:fd:42:9f:
         0c:5a:26:a5:55:35:11:00:fe:aa:92:59:44:b5:ec:73:8d:21:
         5b:7e:21:17:36:c8:f0:7d:97:60:0c:45:a7:70:59:ba:fa:15:
         c4:6b:1a:4d:84:ee:64:12:21:39:80:07:28:17:9b:c1:9a:be:
         1d:6a:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:45 2025 by rpki-client