Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ad4a7525-2087-3497-b503-64158bfbdc64.roa
File:                     ad4a7525-2087-3497-b503-64158bfbdc64.roa (raw, json)
Hash identifier:          hN7u/pRPDY3un25t/c1GxMOFUsUTjEOxyEyLmFNYHS0=
Subject key identifier:   05:4C:1A:0C:8A:D0:71:59:3F:B4:71:1D:E9:3F:69:60:DB:F4:1D:5A
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F43285849EF49CA70F5BE846F4368B500
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ad4a7525-2087-3497-b503-64158bfbdc64.roa
Signing time:             Thu 22 May 2025 06:00:42 +0000
ROA not before:           Thu 22 May 2025 06:00:42 +0000
ROA not after:            Wed 20 Aug 2025 06:00:42 +0000
asID:                     23473
IP address blocks:        96.63.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ef:49:ca:70:f5:be:84:6f:43:68:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 22 06:00:42 2025 GMT
            Not After : Aug 20 06:00:42 2025 GMT
        Subject: CN=d2169a9c-9434-4aa6-87ef-0e2330144606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:0e:49:72:c7:b0:5a:18:a6:62:d7:5e:de:
                    eb:39:cc:4f:f1:1c:5a:0c:ec:03:fe:0c:8c:c4:b6:
                    fb:c0:24:a4:cd:a1:03:ab:c0:71:e3:fc:0d:ef:a1:
                    29:b0:a6:ce:e4:4a:62:c7:a5:28:28:35:5a:47:1c:
                    8f:60:48:42:81:07:8d:df:ea:4e:35:4c:ac:14:f4:
                    af:64:67:38:01:64:83:0a:b5:56:33:47:c0:5f:18:
                    d7:01:bf:26:0b:55:98:53:7d:96:7e:a8:20:1e:62:
                    14:6b:6f:24:08:9f:e0:41:5a:17:77:30:3d:a9:cf:
                    6b:8d:9e:6b:5a:02:65:4a:00:b4:6e:13:47:90:b4:
                    bd:c4:7d:78:c0:09:2d:dc:25:20:e2:52:e8:19:ba:
                    97:da:9a:58:98:fb:5d:b8:60:f0:b1:ad:ea:b0:63:
                    eb:5a:04:bc:c1:dd:a8:1d:16:2c:88:9e:c1:38:26:
                    ae:d5:d8:df:d5:25:7f:c8:7d:0a:a8:12:da:7d:55:
                    27:fc:66:9e:48:42:6c:d3:06:16:ba:d9:5f:45:98:
                    23:b4:1d:26:c2:cf:1c:0d:99:94:62:4f:db:20:32:
                    15:fb:c3:49:c5:cd:92:b9:ca:10:cd:f2:53:c6:f8:
                    ee:c0:c3:8f:7c:f5:b5:59:61:bd:b9:bb:ad:b7:6e:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4C:1A:0C:8A:D0:71:59:3F:B4:71:1D:E9:3F:69:60:DB:F4:1D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ad4a7525-2087-3497-b503-64158bfbdc64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:7f:d6:1e:65:ba:f8:26:cf:a6:98:77:51:18:71:97:98:
         a3:0b:1c:d4:ab:5d:ad:75:a3:46:ae:d3:7e:14:45:e5:09:b8:
         ee:69:ac:e9:04:58:11:5b:d2:32:d6:3a:a8:8c:3b:af:8d:15:
         a4:e0:02:27:45:a1:c8:0d:5a:65:b2:54:8f:6a:81:4b:a0:bc:
         c3:ef:5a:6d:78:72:d4:bf:7e:16:7a:18:4f:26:29:f8:60:3c:
         60:84:a2:18:be:58:70:69:b2:74:3d:95:d2:d1:e6:98:c7:45:
         d0:3b:f2:94:e3:e4:70:b0:c6:99:fa:27:61:2c:1b:e8:bb:38:
         d9:35:80:08:38:63:1f:6d:13:62:28:c6:f4:78:a0:da:5f:1b:
         e1:8a:60:f4:a1:d4:87:be:0f:11:a7:ee:18:24:cf:9f:5c:26:
         e3:f6:08:13:e8:77:3c:6c:b8:df:02:b9:bd:f3:a1:6c:67:b3:
         39:81:13:f3:5d:49:d4:c2:f9:da:23:6d:3d:1d:37:5e:8e:24:
         1e:3a:ba:b9:95:c9:cc:86:de:9a:6d:96:6c:cd:30:35:23:39:
         e8:9b:28:c7:5e:1b:fe:0d:bb:2d:ba:47:f7:01:27:d8:ae:b1:
         64:b6:7f:ea:2c:63:35:f4:54:d3:83:ef:a3:43:f9:e9:7d:6a:
         be:07:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 01:43:21 2025 by rpki-client