Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19339f31-b153-3829-9fd6-1843f4f2d30e.roa
File:                     19339f31-b153-3829-9fd6-1843f4f2d30e.roa (raw, json)
Hash identifier:          4YNQNfZEME6lTpnFhjrXSKj+G3vDFD7YaDXo2gXtHSE=
Subject key identifier:   9E:77:62:DA:1E:F9:EF:E9:38:27:28:20:83:EB:BD:55:3A:5B:7B:3E
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584AFC1C025D9ED154C09F7A2C00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19339f31-b153-3829-9fd6-1843f4f2d30e.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     20425
IP address blocks:        96.45.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:02:5d:9e:d1:54:c0:9f:7a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=f0e0a555-c396-47ba-9343-4521585c4423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:8e:76:4b:65:ff:77:08:30:4f:e0:e1:3e:
                    33:55:f8:95:e3:93:ce:8b:bd:2c:dd:a0:05:fe:8c:
                    18:a6:a8:b3:df:80:f9:08:ff:14:9f:2a:0d:f5:b6:
                    92:c8:07:68:52:af:7c:50:18:45:c9:24:25:4a:71:
                    b6:d9:55:0a:76:5b:df:3b:22:41:26:f3:fa:ad:1d:
                    2e:f9:69:f8:f2:07:0e:54:be:be:87:4b:27:80:d0:
                    40:ac:de:b4:1c:e9:f4:55:cd:e1:30:01:f3:fc:70:
                    7e:09:8b:9a:71:16:06:6a:66:ad:f8:8e:74:a0:88:
                    c2:da:d1:51:c4:2e:58:99:10:29:a7:bb:d6:97:cd:
                    0e:45:c2:ee:11:c7:04:4e:2d:7c:c4:82:a3:89:ae:
                    a4:dd:b7:d5:92:d6:f1:6c:bf:da:51:89:dd:39:12:
                    66:16:99:cb:97:78:9f:34:78:3d:61:c9:45:97:02:
                    af:43:9d:b9:a3:42:9e:5e:08:a3:0e:96:1a:21:fc:
                    c9:5d:8f:4e:80:c5:c5:32:69:53:29:32:d1:dc:95:
                    22:c2:c1:4d:9f:78:fe:6f:73:95:51:26:0b:90:03:
                    61:11:54:eb:75:2d:fc:d8:e8:43:97:d1:7a:f3:8c:
                    7a:85:c3:a6:4a:be:c8:c8:7d:9d:22:f4:65:72:47:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:77:62:DA:1E:F9:EF:E9:38:27:28:20:83:EB:BD:55:3A:5B:7B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19339f31-b153-3829-9fd6-1843f4f2d30e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:64:19:0c:ad:f8:38:44:8e:b3:b2:e5:ba:ce:f9:58:21:
         6c:89:94:3c:50:35:49:d7:54:21:88:4e:e6:b4:4a:02:06:45:
         a4:ab:04:66:b5:da:89:8f:e1:80:e5:0c:c5:b3:59:c8:45:a0:
         a8:99:6a:f5:43:68:86:9b:b0:e4:4c:f0:b6:b3:53:ef:ae:23:
         27:1a:94:c3:f9:1b:29:85:3f:dd:21:9c:a5:60:91:ba:58:17:
         99:84:e9:b5:41:47:32:b0:14:69:82:88:28:52:e0:e0:48:7c:
         67:c8:a6:32:b5:b7:50:4d:98:ca:86:60:9c:5e:fe:b5:07:90:
         b3:20:1e:0a:b8:1e:d3:2b:f7:5b:32:3a:ba:db:fd:0e:37:eb:
         58:64:d7:3a:ec:69:f2:70:11:58:e1:93:5d:d6:0e:2e:ee:c0:
         9e:29:ff:ae:62:e3:fd:6b:05:1e:b4:11:c6:ec:92:5d:12:28:
         d3:7d:b6:57:dc:c6:c7:7e:73:c0:01:75:15:02:0a:3d:5d:20:
         62:fc:3e:87:f5:ee:2c:5f:f6:7d:db:29:18:ea:c6:31:d4:1e:
         d2:ab:80:f6:ce:dc:87:ce:ef:14:ce:b0:2c:ce:cb:8d:02:95:
         e1:62:b4:43:e7:94:44:4d:7f:74:d0:01:bb:77:b6:f9:23:50:
         cf:0a:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:55:28 2025 by rpki-client