Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa
File:                     96b514fc-da6f-332e-8a0f-fb13840308a2.roa (raw, json)
Hash identifier:          OiHLw+ygWvqmDJYO/YBrOb1k+aoAROmQWUR2NsSD4wU=
Subject key identifier:   A1:68:F9:C2:87:16:BA:EB:75:67:19:B1:F5:17:28:BE:5F:FB:CE:68
Certificate issuer:       /CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676
Certificate serial:       010D0C9F4328584A66C07664EB52FC9BCAFC8D80
Authority key identifier: 58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     63023
IP address blocks:        172.81.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:76:64:eb:52:fc:9b:ca:fc:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=9734ab5b-d0f2-4b6d-986a-7108ebab3168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:67:55:36:9b:1f:0a:b2:d9:77:f9:e8:40:
                    76:7b:48:dc:a2:c8:a8:d1:5d:1e:76:e3:9b:06:e7:
                    c4:8c:e3:6f:19:53:06:ed:65:81:ea:90:f6:fb:71:
                    54:9d:fd:4a:1a:05:04:5b:08:25:5c:49:23:e2:2f:
                    22:23:18:47:86:37:85:fc:cb:a3:26:c0:0e:84:34:
                    90:ac:df:6b:37:e8:93:bd:9e:28:84:15:6c:21:4c:
                    c1:d9:bb:0d:a7:6b:46:b0:dc:d2:ba:6a:28:0d:7f:
                    91:e5:72:98:bd:87:00:09:0e:90:5e:77:69:ae:2d:
                    40:85:0b:ac:c3:0b:09:c1:87:fc:a0:ae:f7:99:72:
                    f7:ac:7b:96:4b:07:37:c4:05:85:75:0b:55:66:9d:
                    9a:aa:db:71:d3:d6:c2:f4:6a:8a:0c:1d:92:76:0d:
                    72:cf:79:2f:5a:55:85:1a:16:7b:7a:2b:fe:3e:7b:
                    a3:4a:55:98:2f:3e:96:89:2f:12:6f:f2:eb:8e:cc:
                    11:0a:27:4b:f7:3d:9f:f8:4a:f7:c9:c9:90:66:b0:
                    79:ba:ca:74:55:94:2c:6f:6f:ce:80:55:31:7b:3e:
                    12:d6:d1:ba:52:92:14:37:be:6d:54:b2:e4:8e:d8:
                    9b:12:b4:66:ff:61:90:ec:46:59:b9:3d:bd:30:81:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:68:F9:C2:87:16:BA:EB:75:67:19:B1:F5:17:28:BE:5F:FB:CE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.crl

            X509v3 Authority Key Identifier:
                keyid:58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:af:30:d3:aa:e3:4e:3c:4e:c0:90:72:20:e9:34:cc:55:fb:
         82:53:17:24:e4:21:78:b3:35:08:9e:4d:8a:f9:84:d0:03:a9:
         b4:23:a8:e9:22:46:08:71:50:bd:d1:63:e6:13:de:93:2d:da:
         03:f1:28:50:b1:08:09:12:92:1e:3b:4b:5d:d5:b9:02:3b:39:
         b6:fb:ff:3f:6d:86:05:b2:e2:51:6e:ed:a9:0f:af:94:51:4a:
         89:9a:22:a7:30:15:66:d6:5f:32:ed:11:1c:28:09:5f:56:74:
         8a:b7:67:c3:1b:c1:ed:da:6c:b1:a9:21:c2:65:20:b0:7d:84:
         bb:02:6a:c0:cf:7d:ce:75:c2:48:ae:0e:9e:1d:b3:42:9d:a6:
         bf:2e:a8:d9:e6:a9:a8:42:9c:26:d1:18:ab:07:54:68:4c:f7:
         0a:9e:e6:51:c0:af:eb:c5:95:9b:6c:78:34:5c:b1:27:b3:a1:
         c5:a3:53:55:73:c1:ec:0b:48:81:02:b0:58:6a:fb:87:e6:21:
         17:82:45:de:71:42:72:7a:e5:5e:51:72:0e:0b:ea:b0:c2:a4:
         99:c8:e8:85:60:7f:0e:a8:c9:44:4f:8c:ad:56:43:6c:81:35:
         31:7b:1a:16:20:23:2d:2d:f8:3f:65:2a:4d:f0:57:9f:d8:91:
         3e:64:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:58:13 2025 by rpki-client