Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
File:                     17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa (raw, json)
Hash identifier:          o9wEvszAnpFjTKQkhx1NYEZlM+wojjdDTY6uAF7HltU=
Subject key identifier:   04:7E:D9:B4:CE:F5:C9:BA:E6:2F:9D:E3:72:94:2D:FB:B2:72:E6:6C
Certificate issuer:       /CN=9e36a683-142b-41cd-932c-e115603de431
Certificate serial:       010D0C9F4328584AA42B7FD8C0315E541BEB0500
Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        209.163.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7f:d8:c0:31:5e:54:1b:eb:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36a683-142b-41cd-932c-e115603de431
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=1783837d-b95a-4756-9e9c-cc42155f98cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:3f:ab:d4:f2:09:09:ec:05:9a:9e:cc:bc:
                    34:48:08:01:a0:94:8c:22:f7:9b:a4:1a:36:cf:c3:
                    b9:d4:30:e3:d2:db:5f:e9:28:dd:49:15:42:93:b9:
                    14:e4:e6:74:1a:bf:2d:13:5d:97:66:91:86:f2:d1:
                    f4:a3:1d:22:79:99:cf:08:5a:cc:47:fc:0a:e1:13:
                    53:a2:e8:f2:8c:de:98:54:c5:0e:aa:e1:77:f1:aa:
                    7b:13:77:e7:42:4c:23:9f:ea:9a:da:bb:11:32:ba:
                    f6:bb:d0:dd:14:c6:35:07:02:7b:e8:29:c2:da:9f:
                    76:80:c3:9d:a2:af:f3:f9:61:c1:80:f2:7b:18:17:
                    db:9a:b6:86:1b:1b:e0:9d:09:b8:6c:cf:0d:f2:ea:
                    6a:90:99:96:13:64:d4:4b:e5:2d:18:80:60:ed:6e:
                    b8:c1:b0:fb:27:50:a7:8c:f0:2e:45:56:7f:df:2f:
                    74:e9:12:55:8e:36:cc:4b:fa:ea:1b:98:e4:d3:e1:
                    64:24:f7:bc:63:b7:35:59:39:3e:f4:03:35:c3:f4:
                    aa:66:3c:21:52:1d:16:80:be:73:22:a0:64:88:0f:
                    a4:08:64:0d:1a:4b:78:9e:dd:6e:06:59:d0:19:73:
                    a2:2c:4f:cb:87:8f:eb:83:bf:ab:4b:30:b6:eb:51:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7E:D9:B4:CE:F5:C9:BA:E6:2F:9D:E3:72:94:2D:FB:B2:72:E6:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl

            X509v3 Authority Key Identifier:
                keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:ab:0f:ad:7b:b3:01:1b:ba:c4:94:55:d4:4b:6a:e5:63:
         66:f0:0e:b8:9c:c4:d6:08:8d:6f:3f:9a:1b:b6:46:b5:7f:00:
         93:9d:57:40:23:de:7d:f3:21:d8:33:21:80:d6:63:55:d5:80:
         d5:91:d1:e1:6e:ec:ac:bb:5e:2f:e0:de:49:55:ce:cb:e9:44:
         fc:d3:a9:40:23:df:ec:d9:44:15:84:10:ee:13:a2:87:1e:4f:
         6e:b0:30:0a:42:6d:41:22:49:9f:f6:f8:5b:0e:a2:51:8f:a2:
         b4:4d:b0:2d:ee:b5:e8:24:5c:3f:fa:b6:9d:f6:3a:00:68:b8:
         27:4e:d9:df:a8:f5:ed:26:c4:06:69:11:58:d2:67:5b:b3:64:
         ff:8f:31:ee:e9:66:33:e6:da:6e:b2:91:aa:d0:0f:df:c7:9e:
         94:a6:5b:1a:bc:df:a5:26:05:0a:a5:00:6f:64:b0:e0:03:2f:
         a7:35:eb:7d:51:4b:3b:55:15:00:96:fd:0f:9f:f9:ef:35:f3:
         db:e6:9c:b4:df:62:ba:85:34:91:1f:e3:fa:0d:3a:3a:34:1c:
         bf:b6:50:7f:56:b3:f2:71:e4:f6:30:a8:15:97:be:af:6f:1b:
         4c:37:45:13:02:d4:c9:5c:0e:ed:56:1f:5b:f7:4a:e3:ea:b8:
         0e:16:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:42 2025 by rpki-client