Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa
File:                     ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa (raw, json)
Hash identifier:          ruM19z0lqT2sIswtxqN7X5na/ntuMkMjKdjjLA9Zx5M=
Subject key identifier:   CC:3D:12:3A:E1:1D:96:9C:12:02:1C:EC:F0:1A:34:22:C0:F7:7D:E2
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A88409E13F02663EA34138B80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        199.87.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9e:13:f0:26:63:ea:34:13:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=d36342bc-3500-4785-b0d0-00e27af72b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:6b:9d:62:6f:f0:08:a3:1d:5b:55:cf:54:
                    81:ea:99:3c:97:f2:5a:69:ed:20:00:e6:a5:a7:66:
                    df:fd:cb:2a:39:6d:a1:19:57:3b:94:ff:9e:51:8b:
                    fe:f7:96:30:53:39:c0:15:d8:46:39:42:c4:43:07:
                    89:29:12:59:10:7b:8a:a7:c0:87:57:13:78:a3:d1:
                    a6:24:23:fd:1a:c1:48:0b:c7:cf:00:c1:c4:56:aa:
                    70:62:58:89:b1:81:77:da:c6:ff:da:90:c6:ca:56:
                    f3:cf:34:62:b8:11:bc:62:61:6d:5e:36:99:ec:51:
                    22:a8:e0:04:e8:34:b6:c3:6b:c7:7b:d8:84:ff:9b:
                    10:03:8b:42:ac:be:7e:6e:23:33:c9:5a:b5:09:93:
                    11:49:96:bd:91:c6:9d:64:78:28:21:88:c1:f4:5b:
                    84:6f:20:7c:8c:c0:52:d9:92:cd:ab:00:db:43:3b:
                    fe:15:5e:2f:df:12:1b:72:30:fe:ef:d0:49:c0:f3:
                    69:e1:b7:53:ae:33:f1:4d:6c:ef:a6:96:38:95:b2:
                    f9:84:f8:d6:48:f4:48:a3:b5:1c:6d:a6:c9:d3:1e:
                    3c:ea:d4:77:bf:c2:bd:35:90:09:b5:5e:53:a8:eb:
                    07:70:a7:28:4c:16:c7:02:fd:12:78:cb:0f:70:78:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3D:12:3A:E1:1D:96:9C:12:02:1C:EC:F0:1A:34:22:C0:F7:7D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:ec:64:9b:db:a1:4a:1f:dc:99:8b:36:59:87:dd:a8:97:
         36:7d:30:41:1d:f5:d9:ba:c5:7c:9e:83:de:e8:92:c6:fd:70:
         47:38:9f:b6:c7:a7:f5:04:72:c9:8c:a6:39:f4:74:17:18:c4:
         ed:04:96:0d:7b:23:1b:48:83:9b:ff:0d:a6:3b:b4:d3:07:53:
         38:fd:e1:1d:27:3e:ee:ba:8f:e7:4d:6c:55:aa:a6:90:47:88:
         82:fc:b0:1a:e7:9a:64:e1:da:c8:33:cf:b8:02:61:b8:c6:a1:
         ed:ce:e5:74:9c:6e:fa:89:fd:49:3d:85:a6:36:77:79:ce:94:
         45:d5:39:5d:9c:95:d5:75:d0:5d:d0:64:bd:6c:63:a9:00:d1:
         0c:a6:98:50:74:44:01:04:10:00:75:50:83:53:e2:d1:9c:aa:
         a1:90:c1:41:50:68:c6:1d:ee:a8:d9:ae:84:01:8b:1e:5a:a3:
         8d:61:a4:78:24:06:94:b7:31:08:f2:e1:09:61:65:b4:17:d5:
         b7:e1:6b:de:57:5f:b8:44:e8:13:d2:d5:e6:f8:b3:10:0e:16:
         09:f5:9d:b2:b9:4a:63:ef:9c:a6:f6:3b:f1:95:ac:74:c6:4d:
         c9:04:76:16:eb:32:ad:7b:1b:9a:61:7b:47:94:5e:1d:73:45:
         40:08:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:36 2025 by rpki-client