Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10101d1e-3379-3d41-94a9-38eee5219397.roa
File:                     10101d1e-3379-3d41-94a9-38eee5219397.roa (raw, json)
Hash identifier:          Nx2tEEwXxF07FczmyMe30zep87ROqrnezhlBUoOL1M0=
Subject key identifier:   FA:24:AE:EE:D5:40:29:FD:24:1E:B2:53:77:A4:39:77:33:82:A0:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDB7AAC824D128E4A9AE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10101d1e-3379-3d41-94a9-38eee5219397.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33657
IP address blocks:        96.216.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:b7:aa:c8:24:d1:28:e4:a9:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a166cc52-1318-4cac-a8a4-4b1da8312dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:88:8c:8c:5d:65:e8:c1:08:78:ef:1d:9f:
                    98:bf:58:6e:51:87:49:ca:e3:ea:50:81:81:31:04:
                    17:2b:2c:ea:42:45:78:79:1d:4e:32:42:08:cb:3f:
                    3b:c3:17:f8:03:74:c2:ff:b9:29:cd:f7:5f:af:cb:
                    44:a6:90:57:37:90:07:37:bc:89:d5:5a:28:da:73:
                    a1:70:0f:d5:dc:f4:dd:c7:f3:e8:74:c0:d8:d0:4f:
                    33:53:93:d6:67:ac:b0:44:2b:48:96:a1:68:e3:20:
                    c3:24:aa:02:9e:84:79:47:39:34:28:af:66:ba:e8:
                    c9:5f:ba:5b:7e:07:45:2c:e1:c6:c1:11:20:98:6b:
                    0e:bc:c7:3d:55:8c:48:78:32:98:4d:02:d8:b0:c6:
                    e9:98:94:a4:ef:b1:d8:b7:b1:21:87:7e:ae:89:39:
                    9e:09:26:9a:db:e9:8c:c3:02:48:17:4e:31:bc:ce:
                    26:d5:55:08:3f:b3:85:0f:12:80:58:af:f9:7d:fe:
                    b2:b2:e5:4d:a3:0b:01:9c:63:33:8f:f9:e7:8b:a0:
                    42:24:81:a5:74:87:27:f5:df:dd:4f:12:83:84:cd:
                    08:61:aa:5e:9c:78:75:de:1a:2c:fd:8e:3d:f7:af:
                    12:27:d3:53:bb:f5:76:de:65:5f:38:60:cd:72:62:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:24:AE:EE:D5:40:29:FD:24:1E:B2:53:77:A4:39:77:33:82:A0:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10101d1e-3379-3d41-94a9-38eee5219397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.216.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4e:0a:4f:0f:88:d4:24:ee:bf:a7:df:98:f2:00:cc:a4:1b:
         47:4b:67:ec:a3:cf:7a:69:05:b0:05:6f:3a:50:cd:87:65:d4:
         8a:b7:43:15:4c:c6:dd:7a:58:86:15:75:d6:15:c7:7f:a1:f7:
         fd:97:86:34:43:7a:0a:f0:ae:53:1e:8a:11:b7:a3:c3:28:5d:
         d8:35:99:58:0c:79:35:d5:09:07:fc:9d:42:f6:05:f9:bc:11:
         32:a5:0d:e6:e7:e6:d6:04:ac:2d:71:1c:40:20:b9:01:bf:4c:
         b6:d3:ae:de:a4:bc:23:91:72:16:7b:5e:a8:cf:20:56:64:71:
         07:57:a4:b9:2c:1c:c5:84:3f:5e:29:3b:03:d1:c8:46:5a:19:
         0c:0a:25:13:e3:80:8a:59:de:78:85:86:fe:62:11:07:9a:ff:
         21:0f:91:56:cf:d5:14:e9:df:7e:ea:05:76:7f:b1:ec:ea:c3:
         c5:a7:4a:45:6b:87:98:8b:55:d6:08:56:eb:9f:93:82:6c:5b:
         b4:3f:10:0b:9d:b8:9d:c7:37:81:86:32:de:3d:ca:d4:4a:9c:
         ca:9a:86:74:9f:a4:2f:cd:9f:0a:9c:5b:1c:e9:88:ef:19:f5:
         a7:68:28:0f:37:d7:0a:10:dc:85:90:8e:8d:ee:5d:d7:64:a9:
         65:6f:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:02 2025 by rpki-client