Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa
File:                     0e4b0048-b197-364d-82a5-3127b9f92159.roa (raw, json)
Hash identifier:          Ik5GjxaQX2Ykm2GTO6ewcLYyWW4hK1nBc0nc7Arbd1k=
Subject key identifier:   BB:EF:E1:B7:B0:61:92:CE:8C:B5:2B:5D:92:78:2B:A0:EB:D3:75:59
Certificate issuer:       /CN=9e36a683-142b-41cd-932c-e115603de431
Certificate serial:       010D0C9F43285849C4D4BCF24DDD1A62EE072440
Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        209.163.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bc:f2:4d:dd:1a:62:ee:07:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36a683-142b-41cd-932c-e115603de431
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=66bc5e0f-34f1-4dfe-b372-821c10e2040d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:5f:18:a5:48:e7:f0:31:28:7b:bd:f7:4b:
                    85:44:fa:52:3c:c6:d9:bf:2a:4b:a2:a0:22:8c:25:
                    28:09:69:ac:a9:53:d0:4b:90:42:03:bb:60:5d:4f:
                    e2:ba:f6:f1:25:8a:1e:15:8c:44:fd:6d:d8:6c:45:
                    65:a5:44:f7:91:9c:d5:82:d1:61:d0:f3:b9:ae:9d:
                    5c:0f:12:da:94:33:3e:a4:8e:e1:a0:3d:e7:0e:c4:
                    42:ea:b9:a2:fd:76:61:23:8e:fc:41:da:30:95:37:
                    ab:40:1c:a5:94:b4:97:a5:c1:e4:87:46:b4:c4:05:
                    90:11:65:a4:6c:ab:5d:74:09:5a:a2:66:ce:65:65:
                    2e:df:c4:b6:19:f3:f4:9f:35:48:a6:94:cd:4e:a2:
                    da:1c:5b:46:c1:69:08:71:9b:fe:e3:e7:ef:fb:ba:
                    5b:21:a5:09:78:22:00:3e:1c:94:8c:76:2b:30:be:
                    62:a6:d4:92:9d:15:4f:c9:5b:99:de:08:3d:32:15:
                    e0:9b:1a:f6:5d:a7:11:3c:4c:56:e4:c4:ea:e3:e0:
                    77:cf:58:47:a9:7f:e4:fc:0a:9f:5c:6d:0d:2d:60:
                    16:b4:61:7a:74:21:9e:e8:09:11:bb:9e:3a:56:d4:
                    1d:46:45:35:14:c8:5c:58:d6:1c:f5:e8:12:df:be:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EF:E1:B7:B0:61:92:CE:8C:B5:2B:5D:92:78:2B:A0:EB:D3:75:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl

            X509v3 Authority Key Identifier:
                keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:05:1d:a8:30:14:71:44:1f:7e:2a:21:50:de:34:46:6e:34:
         63:cd:50:d3:dc:8e:7d:8a:b9:98:15:51:5c:28:17:41:c8:16:
         ac:21:b4:ae:02:a4:41:7d:df:80:77:c3:c3:52:29:40:58:56:
         fc:1c:5b:50:d4:0c:8a:26:7a:40:97:d1:2d:1a:b1:4d:41:d5:
         7d:69:31:51:ea:df:f2:bd:e6:9b:d1:d9:43:32:90:48:9a:2b:
         74:1f:92:16:05:0d:81:f4:2b:f5:bd:ed:f3:42:6f:fe:71:84:
         b7:b2:a0:55:14:98:ca:a8:65:fb:af:bb:d5:42:f7:ba:f8:2b:
         0f:be:a0:5b:f6:4c:2f:17:5b:5a:c8:61:68:72:37:99:55:58:
         aa:d9:da:1e:3b:c1:f6:30:db:32:9f:7e:48:2d:73:3f:99:6e:
         8a:98:fe:a3:4a:44:ee:20:e0:3a:e0:eb:a3:4a:81:42:37:98:
         1d:17:99:a5:8b:65:b6:cc:be:1d:eb:b2:92:7f:7d:ce:13:3c:
         00:1a:8b:93:8f:3a:5f:fc:be:61:a0:2c:52:56:eb:64:67:aa:
         13:48:73:60:72:bb:22:c5:45:64:76:7b:8a:85:2b:bd:6f:4d:
         5a:fb:92:ed:91:32:12:a7:ef:2d:51:db:df:0f:c9:12:bb:08:
         e0:99:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:29 2025 by rpki-client