Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51aadf00-d118-39af-89fa-82ed6e28ff9d.roa
File:                     51aadf00-d118-39af-89fa-82ed6e28ff9d.roa (raw, json)
Hash identifier:          5jh8LWsC6yKiJihiGBCg9JZimzLNqEb/uJCM+VSqn7U=
Subject key identifier:   99:5A:5C:BE:E1:B0:37:0A:6D:54:4B:0D:8D:38:F9:A1:2A:AA:DC:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD0F5AF230455945780E18
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51aadf00-d118-39af-89fa-82ed6e28ff9d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        96.96.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:0f:5a:f2:30:45:59:45:78:0e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=fc8eda98-4257-40c4-9942-b76e75bee0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:f7:cb:21:e9:09:10:4c:00:26:77:2c:ed:
                    2a:79:21:ff:0f:50:84:a0:6e:c3:6d:bd:8d:ce:d0:
                    32:dc:68:b9:98:f3:dd:49:21:f0:a0:ac:63:f6:65:
                    7b:9f:fc:f7:33:4b:37:a9:4d:e6:3f:39:fe:5c:2c:
                    07:fd:a4:cd:5c:aa:18:0b:1b:07:49:cd:87:91:10:
                    c7:01:c9:ac:d6:cd:06:a0:c5:08:59:b3:49:17:41:
                    f8:5f:70:79:24:41:c5:ac:0b:d3:c2:56:46:94:68:
                    a8:aa:ac:83:a5:31:ee:04:98:0d:f9:b5:df:98:b2:
                    4e:87:cc:66:a8:b6:c1:ee:5e:67:b0:d4:32:1c:5e:
                    ea:37:5e:d9:27:b4:0e:0a:a6:09:51:dc:64:1c:c1:
                    71:7e:fd:e4:ed:a1:e7:e8:c1:b0:bb:61:0b:aa:d7:
                    39:17:a1:0d:57:3a:8f:2c:00:a9:84:7d:b8:35:b1:
                    66:69:9e:b4:66:25:6a:58:2c:bf:fe:29:7a:d6:e1:
                    91:9e:b7:50:03:f3:f6:ec:41:5b:e9:e9:0f:b5:04:
                    bc:47:6e:c4:fb:23:9d:84:4c:3f:fe:ef:96:a8:da:
                    08:42:8b:ca:60:23:95:cb:dc:51:4b:ee:41:2b:36:
                    f3:f9:a3:ff:b2:35:48:f6:e1:c3:0e:b0:28:ef:bf:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5A:5C:BE:E1:B0:37:0A:6D:54:4B:0D:8D:38:F9:A1:2A:AA:DC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51aadf00-d118-39af-89fa-82ed6e28ff9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.96.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f2:aa:29:b1:02:33:bb:61:7d:05:f1:c2:ec:d2:7e:e9:34:
         f2:b1:bc:e6:3f:3c:38:50:cf:9b:cf:13:57:ba:96:3c:ad:24:
         0d:97:a7:ad:e7:51:c9:9f:91:ed:12:93:74:5a:2c:65:93:48:
         d0:10:c4:57:0f:c2:64:ee:84:2c:a4:09:36:d0:e2:d7:3d:07:
         e4:c6:2c:24:3f:75:da:b6:0c:77:89:d2:db:52:29:b1:1a:6f:
         0c:6e:3e:c8:46:2c:3d:b6:8e:62:d3:95:30:81:28:15:a1:cb:
         c4:1b:1d:f1:fd:ed:7c:8a:74:ae:64:ad:b9:52:7a:ba:64:f5:
         3a:78:ec:d1:c4:7f:ca:fc:57:cd:2b:7f:56:9e:fc:6b:51:86:
         0a:d9:95:69:ac:a5:29:72:34:1d:3d:7d:f0:08:eb:5e:fb:1b:
         a8:f7:76:d0:fd:f0:71:97:3b:f5:82:09:dc:0b:d1:aa:ba:8e:
         87:c4:05:05:1b:cf:d6:fc:b0:62:a3:37:84:cb:b4:61:9b:80:
         c3:da:8d:c2:0f:49:74:25:a5:d8:2f:d6:3e:bc:b7:4e:db:fb:
         ce:70:a8:dd:d1:a7:94:78:53:76:be:5d:b8:c1:a6:6f:a0:df:
         b6:4c:db:21:0e:ed:ec:ca:e4:ee:93:8b:3c:a1:64:eb:2a:13:
         a3:f3:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:05:12 2025 by rpki-client