Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa
File:                     960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa (raw, json)
Hash identifier:          JJ+5oxUSv5wv0WWUivW70iWaqf9p88rb5uyUejfxcow=
Subject key identifier:   6A:8A:E4:71:E3:20:5A:04:72:0C:BF:4A:13:8C:03:1B:84:7F:5D:0A
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584A7D15E6F92155470DB49D2080
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     11404
IP address blocks:        209.236.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:e6:f9:21:55:47:0d:b4:9d:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=4c875be4-8ccf-409a-8c39-c4218f8397fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:2b:67:7a:24:03:c9:0f:20:3f:44:b1:66:
                    69:35:4d:cf:56:49:81:fe:34:a2:66:8b:ac:1c:b7:
                    40:5d:a1:0d:82:c6:67:be:8d:ea:50:3c:ff:33:7a:
                    75:3d:10:43:4f:86:eb:e1:dd:ed:3e:62:65:df:fc:
                    a8:92:1e:5e:e9:73:e1:56:e7:31:34:49:c4:93:f4:
                    3d:95:eb:f5:07:42:cf:fd:cd:80:4e:da:27:2b:e7:
                    c6:c2:ab:8c:aa:46:39:fe:a9:17:27:48:17:ee:cf:
                    49:e7:0a:58:c1:9e:14:db:b8:f6:64:7d:b7:c1:92:
                    f5:72:1c:09:16:f0:f9:18:26:f7:0f:39:22:fb:27:
                    71:cc:ef:60:ec:af:a1:2a:b3:4a:3a:d1:40:13:ef:
                    a2:10:f2:7b:87:12:2a:9a:2f:77:f0:15:ff:d5:25:
                    1f:1a:ea:49:43:f5:45:b4:20:6f:e9:a8:a5:a7:9e:
                    d0:54:fc:b2:81:2e:05:3c:5e:6e:da:69:8d:94:ac:
                    e2:02:05:78:e6:7e:4e:82:b6:36:ec:96:9c:7e:bc:
                    da:f8:b5:a0:92:e2:9b:67:14:7d:fe:83:a9:a0:a1:
                    bb:c8:ce:2c:1b:9c:a2:34:36:60:cd:99:b5:fc:68:
                    75:45:21:1e:af:bd:75:44:99:95:e8:4e:20:ff:cb:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8A:E4:71:E3:20:5A:04:72:0C:BF:4A:13:8C:03:1B:84:7F:5D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:33:4c:3b:07:22:f3:ca:9a:fc:86:77:d3:76:f8:18:22:db:
         cb:e3:93:cd:8e:ee:bd:39:83:73:10:91:77:b4:87:5b:08:20:
         79:6e:99:00:78:d6:a4:95:70:45:0c:4b:aa:1b:6b:8c:67:68:
         54:24:7c:21:9e:ca:6d:89:29:7e:94:1e:d5:1c:31:54:71:58:
         47:01:35:6b:ed:3b:27:86:b3:d6:01:85:5b:c0:9c:1a:7d:32:
         a2:7c:29:90:42:af:d7:d0:06:31:e4:29:9d:47:2a:ac:30:23:
         52:85:a8:2b:a0:03:b1:3e:d3:e6:dd:27:3b:63:82:a7:3d:76:
         17:60:a2:cc:d1:7b:e7:d7:e8:b9:8c:74:60:9b:6b:61:af:85:
         39:a3:d1:fc:0a:59:fc:c6:26:54:41:db:da:4a:0f:a8:40:78:
         d2:06:b7:4b:9f:0c:75:02:1f:62:14:8d:39:41:45:6d:b8:f1:
         8b:cf:b9:4a:12:f5:f5:6e:40:13:ba:fb:6c:f3:66:35:d6:c6:
         84:d5:84:f1:2a:01:2a:22:99:49:a1:27:3b:80:a7:d9:96:c4:
         76:c7:75:e1:62:90:25:bb:8e:e3:88:58:7f:42:89:a5:17:3f:
         cd:17:6b:99:0c:71:22:17:f3:b4:1d:95:bd:ae:8a:b7:33:cf:
         6c:ad:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:02:37 2025 by rpki-client