Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb687230-ad84-3d6c-9bb7-c5acd0c5263c.roa
File:                     bb687230-ad84-3d6c-9bb7-c5acd0c5263c.roa (raw, json)
Hash identifier:          rTwczvOG7UkHp5v0L9ujIzIdOlQxMyZBOk2J9puJgEE=
Subject key identifier:   D1:03:1F:CE:33:8D:F4:2C:34:F4:B7:4F:5A:CA:DB:A1:51:9A:EC:29
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584AB91B8C24045932D7EE11F900
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb687230-ad84-3d6c-9bb7-c5acd0c5263c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        134.224.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8c:24:04:59:32:d7:ee:11:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=c43ee719-c5f8-4d8e-a1b2-56547aec617c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:1c:7e:2d:7b:93:98:ec:29:99:c9:af:52:
                    b5:67:2f:22:f6:c0:79:16:5d:e3:75:d1:55:80:57:
                    eb:7a:7c:f9:21:a3:71:96:b0:3e:e3:f5:f2:c6:d3:
                    4b:f5:43:0c:58:35:3e:95:ac:89:05:af:43:78:f8:
                    4a:d5:f8:52:6e:d7:84:ef:21:a3:2c:22:4f:a3:6f:
                    27:5e:84:34:73:22:e0:72:01:6b:9f:38:84:ad:ed:
                    3d:be:fc:43:f3:4d:f5:a0:a3:12:6f:6b:a1:71:df:
                    56:fc:77:66:8d:ca:63:b5:ab:73:fc:cc:ee:df:1a:
                    18:ee:45:8c:78:dd:95:8f:69:a7:94:34:95:64:67:
                    6d:cc:42:fc:e8:30:55:a9:d8:52:e7:e7:d2:39:4a:
                    a8:8c:f8:df:4d:8c:b1:e0:dd:a9:84:69:7d:7f:2b:
                    23:43:50:52:5f:57:27:e5:cd:dd:9a:6c:64:c1:6d:
                    2d:f2:0f:2c:67:19:80:2f:7a:a6:e5:4e:a0:de:d6:
                    46:1f:90:1b:db:98:8e:4b:02:39:16:bc:09:bb:fc:
                    c7:ae:15:4e:f1:32:b5:e2:ee:b6:fc:13:9e:1e:b6:
                    06:07:94:56:33:93:e3:ca:b7:1d:31:21:7c:cf:34:
                    b3:ef:4a:3f:71:aa:22:79:15:3c:e0:6e:7c:9d:d4:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:03:1F:CE:33:8D:F4:2C:34:F4:B7:4F:5A:CA:DB:A1:51:9A:EC:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb687230-ad84-3d6c-9bb7-c5acd0c5263c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2a:df:73:1e:c1:c6:af:c5:8e:4e:60:d5:4b:8b:b6:59:17:
         f7:18:d8:00:ce:97:e8:28:07:a9:5d:60:cf:d2:34:d2:a5:b0:
         f2:24:b3:4a:36:cc:ec:9c:54:cb:74:ca:35:d7:e8:57:45:11:
         fc:f8:01:e2:66:5b:3b:8e:fc:7b:c0:45:55:ff:0a:02:03:dd:
         bd:9a:96:01:55:eb:c5:e7:91:65:55:27:45:29:45:92:ba:79:
         a6:90:49:a2:83:05:f8:70:11:a1:d7:76:ff:ff:b4:61:53:be:
         ba:47:91:cb:5c:b6:d5:ea:30:61:c4:d8:18:58:8b:62:d5:a2:
         2f:8e:ad:b0:ce:3d:c8:ac:5a:75:f3:bf:bf:16:36:e9:0c:e1:
         73:85:85:f7:32:47:0e:67:79:17:95:02:06:67:58:7b:fa:1e:
         63:fa:39:96:95:6d:52:98:e9:c9:ea:3b:5f:7f:00:59:9e:e9:
         28:21:bf:eb:ed:5d:ed:ea:3a:1e:45:28:f6:9e:99:55:90:96:
         bd:57:0d:fc:cf:48:0e:84:fc:bc:6b:db:0f:67:d1:bf:36:8b:
         7a:52:a3:99:8f:ee:90:e2:60:0c:6f:e9:20:b5:77:26:05:54:
         c2:7b:a8:03:d1:72:49:cd:c3:87:79:6e:ec:61:24:b1:ac:ac:
         55:12:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:23:43 2025 by rpki-client