Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7071fc4c-8149-3d68-825e-9c5afaa614ac.roa
File:                     7071fc4c-8149-3d68-825e-9c5afaa614ac.roa (raw, json)
Hash identifier:          YgUeE3Lp+8AYH4Dc/ol3TyinZBknzWmaKzL17lSmaAE=
Subject key identifier:   30:66:09:0A:F8:A5:27:C5:54:F8:CA:A9:E6:55:55:25:11:29:25:3B
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584A5B95AC0C90E3757F89BAF600
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7071fc4c-8149-3d68-825e-9c5afaa614ac.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        208.83.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:ac:0c:90:e3:75:7f:89:ba:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=083331c7-84c8-442f-b3b9-485001f4f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:64:53:45:ab:c0:2f:d2:b5:6f:99:05:83:
                    f9:da:f8:fc:f2:43:a9:bb:d0:ee:37:81:3d:be:53:
                    0a:f5:d5:f0:e0:a6:50:1f:4b:85:58:0c:7c:08:68:
                    59:59:ee:f8:ef:47:9c:69:f4:0d:d9:06:56:a5:c3:
                    91:16:dc:83:b1:4a:90:4b:3b:7e:33:6d:bd:25:cf:
                    4c:54:d5:93:ee:88:95:a4:d9:39:b2:e3:21:aa:31:
                    34:6c:58:25:e4:8c:7e:1e:58:25:55:4d:cd:85:fc:
                    cb:09:e5:09:ac:be:b1:40:17:19:e5:81:d0:3a:01:
                    a7:4d:45:e4:53:63:23:cd:98:1b:91:6e:ce:1f:0e:
                    35:9e:6b:f8:32:2d:08:a7:49:85:bb:6e:d5:b2:70:
                    1b:d0:52:04:a2:00:86:a1:b4:9b:59:43:47:84:73:
                    e7:24:a0:6b:ec:f4:20:4e:26:f6:0a:3e:c8:01:d1:
                    da:b9:b9:74:2b:97:02:01:8d:e8:bb:14:ef:a2:28:
                    63:05:5a:dd:c9:4e:5c:f9:a9:f8:18:ba:29:cc:9e:
                    b4:09:05:23:33:d7:73:aa:e4:cd:28:3a:0e:be:c4:
                    2b:06:fd:82:d9:5b:26:b9:27:8a:a7:81:d0:dd:11:
                    e0:33:ea:f0:09:a2:f3:64:73:d2:36:1a:e5:54:56:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:66:09:0A:F8:A5:27:C5:54:F8:CA:A9:E6:55:55:25:11:29:25:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7071fc4c-8149-3d68-825e-9c5afaa614ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:68:52:9e:3d:46:66:ac:ec:d0:d4:58:19:5a:59:98:45:
         b5:93:d9:34:85:3a:db:72:91:63:00:f1:10:b0:42:b2:51:af:
         ae:3c:d6:64:1e:aa:82:09:c2:15:ab:b2:ec:f8:dd:b7:6a:de:
         05:b3:69:be:03:38:da:80:0f:2a:c2:89:37:37:96:cd:1c:52:
         09:ba:7c:2d:da:03:65:dd:b3:25:4d:59:b7:34:c9:e9:b2:03:
         b8:d3:f4:51:43:76:25:9e:77:c4:8c:e6:10:df:89:57:33:0d:
         23:2b:75:d1:e0:85:50:8d:1d:36:1e:1a:78:36:b8:8f:9a:d4:
         7b:96:7e:27:a5:12:d5:b7:4c:92:61:6d:c5:7b:ab:cf:99:55:
         3f:8e:8f:98:0d:c8:0c:61:6d:ad:3c:0d:97:bc:c3:25:b3:79:
         81:b4:ef:bd:a6:36:97:9b:86:8a:cc:b0:19:e4:ea:05:b8:70:
         f1:d9:55:99:ad:56:a6:8e:12:4a:17:56:ee:f2:32:9f:0a:91:
         0b:58:0c:79:97:07:58:04:4d:57:53:3a:69:db:f5:51:12:2d:
         c7:86:89:5d:af:3e:76:b9:93:fe:6f:20:6d:7c:0a:82:2b:bc:
         73:e0:23:cb:7e:34:f6:44:7b:bb:1f:4e:46:84:d7:ba:2c:09:
         ac:c6:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 18:14:49 2025 by rpki-client