Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa
File:                     51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa (raw, json)
Hash identifier:          dN0zRG6MN5icb4wgj411uEuAUM2mlymcDBaV0sNnDH0=
Subject key identifier:   7F:1B:F0:26:F1:CA:74:DC:DC:AC:9C:EC:6D:23:AE:4A:58:CF:87:7D
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584B0CDC1AEDC0CA457C7ED58780
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     13332
IP address blocks:        172.84.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1a:ed:c0:ca:45:7c:7e:d5:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=02d0efe8-6938-45fa-9cf5-7691d904760b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:4b:4d:c9:2a:77:52:76:2d:03:72:3a:59:
                    bf:fa:ba:e4:94:60:93:83:22:24:d0:35:9d:c8:97:
                    74:7e:a6:04:ef:83:6c:58:c5:11:48:ee:ec:5e:f0:
                    cc:81:e5:75:d9:76:20:38:8b:1e:10:63:52:3d:87:
                    1d:69:22:64:83:04:fb:8c:e8:df:db:57:56:16:ec:
                    30:1a:6e:a2:54:af:6b:a7:1b:67:65:0f:4c:17:48:
                    f9:67:ae:cb:2e:fa:4f:65:42:93:0c:a3:06:a1:83:
                    02:f1:6f:34:6e:a1:85:a5:ad:1e:1c:f6:e1:8b:e2:
                    24:c8:2b:15:04:bb:d9:c1:68:04:2e:c9:8a:b7:e0:
                    17:2c:67:03:b8:32:1f:20:b4:cf:88:a2:81:55:f8:
                    40:db:ed:57:4b:33:cd:51:9a:ae:24:b2:9f:7d:63:
                    eb:56:88:f2:bf:5c:eb:fa:ff:66:40:9f:12:87:02:
                    e5:95:77:9a:9d:4b:5e:f7:ab:39:6b:33:b2:e8:3a:
                    84:00:82:98:67:da:db:e6:d0:6b:3e:0d:da:24:11:
                    ac:73:3c:ab:9c:2d:34:6e:ff:71:32:ec:d9:62:ad:
                    e7:71:30:13:fd:5e:5a:29:ef:a0:0e:fa:21:7a:0f:
                    d7:b7:4b:82:fb:4c:0f:d7:fe:5e:14:4c:97:c6:df:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1B:F0:26:F1:CA:74:DC:DC:AC:9C:EC:6D:23:AE:4A:58:CF:87:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:61:0e:f2:8c:6e:a0:63:fe:4e:3b:f9:82:bc:bd:cd:db:3c:
         a5:85:c8:24:66:4e:01:31:d1:ad:c5:0e:36:08:04:11:48:ce:
         84:8b:83:00:ef:45:2c:ad:10:4f:32:28:ab:44:4b:18:e2:ef:
         2a:e7:de:94:4d:fb:63:b7:b5:fe:80:be:f0:81:09:4a:cd:8f:
         a8:e7:c9:65:cf:89:f9:0f:bf:92:6e:7a:de:06:23:78:e1:b1:
         d0:01:73:71:05:0c:13:5d:96:b4:9a:12:49:e1:ad:f5:3e:31:
         47:3c:09:a9:8d:4b:69:6a:ca:2e:82:85:32:70:38:24:85:eb:
         4a:4d:f3:20:89:7a:3b:4a:71:a0:ea:7e:94:65:6c:ba:29:9b:
         28:a4:9e:26:fc:36:7f:ec:f4:36:b0:11:8b:d7:19:b6:78:ba:
         4a:a7:1d:17:c7:a2:22:13:82:76:ab:b3:47:ef:8f:51:55:7f:
         0a:17:e1:10:63:28:6d:e1:90:ff:71:07:1a:b0:c1:37:71:55:
         1b:9d:4e:4e:d6:b1:92:04:df:0a:17:47:c6:b7:df:2f:ab:01:
         de:67:3d:f4:32:a4:fc:9a:6b:27:35:50:8f:83:7b:01:b7:fa:
         94:94:f7:2c:9a:a9:85:a6:dc:98:48:64:cf:4c:cc:36:82:dd:
         01:6f:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 21:21:55 2025 by rpki-client