Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6fc3ebc0-4d7d-32b4-ae33-4a3118c286c5.roa
File:                     6fc3ebc0-4d7d-32b4-ae33-4a3118c286c5.roa (raw, json)
Hash identifier:          tsqA0WMOMaE/qlvO5INQ8Me69xNqnbFpeaHaJnFRokA=
Subject key identifier:   DC:D6:06:23:7D:BA:B1:3F:0D:43:3E:B3:36:ED:AF:6D:21:75:8B:55
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B3D4948E8101369BA2E763640
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6fc3ebc0-4d7d-32b4-ae33-4a3118c286c5.roa
Signing time:             Thu 18 Sep 2025 21:19:40 +0000
ROA not before:           Thu 18 Sep 2025 21:19:40 +0000
ROA not after:            Wed 17 Dec 2025 22:19:40 +0000
asID:                     23473
IP address blocks:        96.63.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:49:48:e8:10:13:69:ba:2e:76:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 18 21:19:40 2025 GMT
            Not After : Dec 17 22:19:40 2025 GMT
        Subject: CN=56ddea7e-979f-45d4-ae64-bc9767c71dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:99:e7:f8:5d:ee:ca:15:56:22:31:43:2d:
                    60:1e:0b:d1:22:a2:5f:b1:28:cd:78:87:a0:b0:96:
                    bd:11:12:c6:8f:25:9b:c4:d3:88:b9:c6:28:b6:94:
                    8a:bf:f9:71:8f:d5:6e:ae:37:c7:26:24:fe:a5:9e:
                    e7:e2:b8:87:ee:85:f6:b9:5a:f5:50:69:57:a8:0a:
                    14:7c:98:04:73:28:49:8d:b6:a3:c4:b8:35:4a:ec:
                    d6:b7:ab:f4:68:8d:e7:a7:c9:c1:c6:4f:e3:16:a5:
                    39:3c:64:68:5f:8e:c5:d2:8f:11:a4:8c:01:93:90:
                    1a:2e:5b:86:cc:89:94:88:39:18:3d:c6:9d:85:a0:
                    54:99:f2:25:e2:a6:27:92:fc:51:c1:a4:d8:4f:63:
                    99:b5:6f:40:51:34:3e:0f:2f:ee:1d:63:73:77:ea:
                    6d:71:5c:4d:4e:6a:25:3b:88:71:29:14:45:0a:26:
                    bb:ba:db:3e:a5:7c:52:ce:22:bd:2e:13:ec:79:5f:
                    a0:25:ce:ab:72:e0:7a:cb:3f:72:58:93:9e:a8:68:
                    03:14:71:a0:c7:c9:7e:0d:12:10:db:d1:1d:42:64:
                    32:28:0d:dd:4d:a4:59:70:9e:22:fe:4a:31:cd:59:
                    0c:bf:de:73:d8:3f:cf:91:52:1c:a0:61:a1:fa:3f:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D6:06:23:7D:BA:B1:3F:0D:43:3E:B3:36:ED:AF:6D:21:75:8B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6fc3ebc0-4d7d-32b4-ae33-4a3118c286c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:df:ef:2c:43:83:f7:59:cb:d1:95:bb:f8:e3:b7:bd:4b:ae:
         28:44:61:fd:42:e1:27:fc:d7:ea:bb:78:6f:b6:b6:c0:84:3c:
         b1:90:48:7f:a8:b0:e9:2f:2f:66:ef:49:70:51:49:ee:e8:42:
         8b:f5:b1:f5:8f:bc:e7:b5:30:21:c5:17:25:02:7d:a3:cb:8d:
         80:63:ae:69:b8:82:ca:4a:99:c6:3f:c9:ae:57:83:6a:db:61:
         0f:44:8d:42:9e:02:16:58:d0:11:f1:63:ef:47:c5:3d:6b:e3:
         e8:b4:24:1f:e0:04:14:95:a5:90:b4:2f:7e:81:40:2a:83:5c:
         3e:0d:18:c2:b8:cb:e0:19:1d:3a:dc:4a:1c:d4:52:b9:b1:ef:
         5d:be:0b:7d:23:a2:5d:dc:10:3d:ee:d4:38:a7:d8:81:d3:91:
         4a:9e:19:77:0e:f3:d4:d0:e5:9e:13:9a:06:07:6b:df:3d:6a:
         21:b3:87:4f:b0:af:35:89:91:3d:5e:58:a2:9b:79:0f:80:0d:
         65:f1:9d:67:d4:17:c7:da:fc:c0:3a:f3:1d:e9:02:10:cc:32:
         7b:74:37:80:99:c8:98:75:4f:ff:5c:2d:8c:e2:1c:44:eb:5f:
         12:ab:c9:b0:0b:ef:b5:99:cf:a9:9a:e1:7a:e8:b0:df:80:45:
         23:05:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:46:38 2025 by rpki-client