Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa
File:                     596c1584-3a09-38b4-9548-b028b4455bfe.roa (raw, json)
Hash identifier:          3ablSxNeDoJzX6dUGfvAftd46SZSJLTUqeoLP9YtvA4=
Subject key identifier:   5C:A6:EC:B1:EE:B3:9A:3E:E0:D7:B5:DE:4E:A6:12:9C:F6:61:CA:FF
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F43285849F17FD1272F0C772960EEC240
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     5065
IP address blocks:        208.99.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d1:27:2f:0c:77:29:60:ee:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=873f7814-1ee2-45cc-9c2a-57335cf2751a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:7a:f8:41:89:7b:50:7c:9b:4e:cb:8b:40:
                    f7:7b:76:7b:56:8b:2e:6e:25:df:14:8a:e5:ec:d4:
                    a0:4c:89:c9:bb:6c:4c:54:6e:99:fe:d4:5e:ea:e2:
                    07:1f:2c:00:1e:89:2f:b5:d0:5b:3e:ae:69:96:2f:
                    21:a3:6d:3b:31:a9:88:44:df:a6:74:61:f7:19:45:
                    15:6d:d2:79:ce:a8:2a:98:00:17:0f:b0:bc:c8:b8:
                    74:10:ef:42:65:f1:4d:5d:3b:f8:d2:8f:ff:1c:51:
                    8e:e1:25:e4:3b:63:39:d5:99:8c:98:ef:4f:4d:d7:
                    1a:76:05:7a:21:7a:31:a4:7f:3f:ef:24:d3:1c:a4:
                    90:62:52:b9:7c:b5:68:eb:0a:32:30:90:9c:4a:2c:
                    f0:7e:b8:de:5a:d2:19:b1:e8:53:e5:8b:ba:1b:5e:
                    6e:da:8a:5e:ab:6a:76:61:34:c2:a8:70:ac:38:0b:
                    b5:7a:52:5c:0b:63:8e:ac:8c:f1:de:53:54:3e:a4:
                    9b:39:04:18:69:65:81:ac:fe:bc:b0:83:65:9e:80:
                    bf:31:d7:02:4c:34:7d:3e:c0:b1:ce:f5:6e:cc:93:
                    3a:0c:d6:0f:bf:84:d7:54:45:7b:13:dc:bc:8f:c8:
                    73:87:8d:45:fc:87:b4:10:da:be:82:86:c7:33:8c:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A6:EC:B1:EE:B3:9A:3E:E0:D7:B5:DE:4E:A6:12:9C:F6:61:CA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:87:99:c7:18:37:39:f5:6f:65:df:a5:b4:51:5b:26:19:
         08:9e:81:33:1c:f3:0d:63:ce:a5:6f:6e:d0:35:5b:e5:72:a1:
         7a:2c:f4:35:f8:77:78:60:98:95:c5:01:98:fb:5e:df:38:54:
         73:05:01:76:77:bb:71:09:ae:44:34:4a:b2:00:ce:b6:8a:db:
         d5:c7:9c:5f:8a:2f:bd:f6:cd:3d:77:f9:be:0b:c9:5e:d3:b8:
         06:59:7c:8f:36:c9:90:db:0f:c3:66:76:a0:0a:a3:d0:87:16:
         a1:77:97:7a:43:f8:7b:56:dc:d1:1a:6b:e1:a3:24:f0:a0:c7:
         b7:e1:f2:08:db:08:02:9d:d4:2c:9e:79:84:ac:54:1d:04:93:
         d0:98:88:57:26:70:80:ac:84:ac:93:fb:de:c6:ee:8d:57:dc:
         d5:71:e1:ec:29:d9:36:c5:e8:f7:87:01:d4:2e:f6:66:4e:d6:
         e7:25:0b:26:78:92:4e:1e:ba:c9:04:6e:7f:c3:b4:72:1e:64:
         a5:c5:d8:9a:37:f5:42:eb:95:1f:09:5a:cb:72:4b:3c:b8:f4:
         bb:1c:c4:82:88:97:a8:0b:44:16:2f:8d:38:b9:b7:f3:a8:c4:
         dd:81:82:bd:c2:a5:52:e1:c0:28:e8:4c:cc:64:ff:3c:e0:df:
         3f:5f:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:42:10 2025 by rpki-client