Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa
File:                     7876d134-3637-313a-9343-6955464c6af6.roa (raw, json)
Hash identifier:          ork6HgaAzadFZ8Xe94E5BlVXG175AYzocMIwive9hNk=
Subject key identifier:   47:F5:49:0A:9B:5E:ED:D3:87:05:37:F0:FC:9A:D7:8D:60:C9:B9:02
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B03169249521AF45E3C067C00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     852
IP address blocks:        96.1.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:92:49:52:1a:f4:5e:3c:06:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=862b8bfa-a5ae-4a39-87b5-a54e8b823f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:ae:4b:f4:43:72:f8:f2:3c:60:76:67:df:
                    f8:87:15:58:46:d6:d8:0a:f1:f4:18:fe:9f:ab:21:
                    0d:b5:80:33:17:40:10:30:d1:90:93:e9:98:89:e8:
                    2b:e3:25:3c:41:72:e7:50:2e:51:7b:83:71:61:12:
                    0f:43:37:74:a8:24:40:6c:b0:c8:18:32:d9:9b:a8:
                    55:9c:b1:90:e2:31:65:4e:1a:f4:10:e5:39:79:bc:
                    12:94:2b:9d:c1:82:79:39:bb:e9:84:41:ff:ce:49:
                    26:c7:0e:ae:62:5c:eb:fd:3d:e8:b4:98:9b:b8:d8:
                    33:30:6a:90:53:84:ce:6c:0c:27:83:45:b8:12:a7:
                    a9:3c:05:88:d1:15:43:f0:b4:8d:49:65:7d:91:18:
                    51:05:ca:d3:c0:b2:89:7e:cd:24:85:40:a8:ae:ff:
                    a5:ac:28:bd:c0:ef:b8:93:cc:a2:db:7a:27:d6:67:
                    d0:66:0e:e0:6d:13:a3:7b:71:fc:53:a3:11:5d:1f:
                    08:8a:38:68:df:b0:01:e9:26:df:92:26:61:ac:f1:
                    2f:bd:4f:47:1e:4c:74:e0:e9:59:05:25:61:81:4d:
                    65:11:c3:54:db:9a:86:4b:70:25:ec:77:f6:9d:84:
                    a9:9c:d1:5f:f7:cc:22:2c:56:5b:fc:94:d6:57:f4:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:49:0A:9B:5E:ED:D3:87:05:37:F0:FC:9A:D7:8D:60:C9:B9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.1.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:b0:62:17:d0:d1:2d:d6:b0:48:f9:e8:59:dd:11:0d:0f:09:
         1c:da:68:23:89:d3:72:a5:cd:c3:4c:85:d9:50:39:03:2f:ca:
         7c:58:2e:bc:18:7d:1c:d3:fa:ed:ef:0a:57:07:3f:fe:a8:62:
         c6:fd:ff:d6:8a:08:5d:9d:8d:97:5d:86:76:86:df:85:f8:ee:
         e4:96:31:d8:f5:d9:43:81:43:9e:ef:e2:1c:88:22:a6:fc:f0:
         a4:f2:e2:7f:15:a2:ac:f1:69:ba:c6:5c:23:09:f1:03:d8:b8:
         b0:a2:04:79:45:34:64:ad:29:cc:68:97:11:22:9e:00:e5:e3:
         f6:c2:4c:1b:fa:b6:78:e9:6f:e7:ca:91:24:52:35:a7:c7:ff:
         1c:2b:ca:43:84:38:d2:2b:c0:2a:a7:4d:82:67:82:31:c1:9b:
         71:da:41:14:46:2a:d3:b2:b9:71:f3:d8:95:da:cc:3d:74:79:
         4d:d2:03:32:de:9c:cc:bb:a3:9f:2c:23:59:09:a9:79:db:94:
         fc:69:c4:c4:11:f8:59:16:42:bf:9e:bf:46:7a:97:33:4d:77:
         4e:07:84:a7:23:3c:6d:2b:76:48:79:d5:65:81:ca:f3:2a:4c:
         d3:5e:0f:3c:69:c8:0d:98:95:fc:67:c0:3c:4e:23:69:bd:fe:
         b1:b6:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 22:29:23 2025 by rpki-client