Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/d48916ce-8ce5-36a1-bc61-7f0a36cbac76.roa
File:                     d48916ce-8ce5-36a1-bc61-7f0a36cbac76.roa (raw, json)
Hash identifier:          aCRA1ayOAkuMPLVWmJ/NfiuoKIeiV3tHT0DCxtNxUnU=
Subject key identifier:   E4:1A:83:EE:3F:88:BF:8C:C0:8C:4C:E7:C7:60:70:91:33:55:E9:DA
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584A5B95AD3259E94FF3BFECF378
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/d48916ce-8ce5-36a1-bc61-7f0a36cbac76.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     23280
IP address blocks:        208.83.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:ad:32:59:e9:4f:f3:bf:ec:f3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=3eb66351-4c8d-486b-852c-cde61c011716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:d5:fb:1d:de:22:9f:2d:5d:fc:99:88:14:
                    a3:35:d7:b4:05:0d:4f:63:2d:61:c6:25:17:ec:c6:
                    18:94:78:3f:5c:58:d2:4b:48:5d:9f:0e:23:50:e2:
                    43:cc:da:68:bf:e2:bf:95:56:37:a8:a4:d3:ec:97:
                    f3:84:fd:75:44:ba:e7:ab:35:5b:60:fb:1f:f4:e6:
                    00:56:3f:b8:c7:f1:bd:c3:95:39:ba:23:0f:60:ed:
                    23:be:ae:dc:5f:28:ce:f4:cd:52:57:29:1b:8d:2d:
                    0d:15:95:37:14:56:1a:f2:2c:f5:6e:d1:71:9b:8d:
                    da:fe:e4:8f:7b:ca:b8:82:3e:3b:fe:44:d6:fc:4e:
                    01:c0:aa:63:95:ed:1d:78:25:fe:8d:3e:8e:d0:0a:
                    e9:71:ea:94:1b:39:e2:3a:0c:07:d5:ff:2a:a7:00:
                    3e:79:b9:65:2e:1e:79:4f:6a:d7:fd:2a:63:d1:53:
                    0c:bd:8c:0c:10:10:1b:ab:c7:4b:c3:1b:73:a9:fc:
                    fb:c5:42:c7:f5:6c:75:c0:67:ea:11:8b:4e:b6:41:
                    d9:0b:d4:57:f1:fb:d9:49:91:df:7e:f4:f3:c5:8c:
                    68:8d:c8:05:7e:c6:8c:fe:ed:ab:f2:49:f0:22:5a:
                    f3:b7:5a:0d:ae:41:13:c2:bb:89:ec:1c:95:fa:a5:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1A:83:EE:3F:88:BF:8C:C0:8C:4C:E7:C7:60:70:91:33:55:E9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/d48916ce-8ce5-36a1-bc61-7f0a36cbac76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f9:eb:84:ea:17:ff:06:27:a7:15:2f:0b:c2:3b:36:c7:6a:
         65:99:8e:e9:e2:2e:a0:ed:35:4b:0d:a1:ae:5a:83:07:25:aa:
         0d:ce:ce:0e:30:44:7d:b5:ba:a9:47:e5:c7:3c:1f:96:a4:03:
         cb:83:50:52:a4:30:88:a2:81:50:d4:7f:3a:e6:f3:6a:ae:00:
         76:68:76:32:79:38:b1:01:a9:d5:49:41:d1:00:10:02:00:0a:
         0f:24:6c:f6:ef:6f:5f:61:05:6e:43:ea:88:78:f5:f5:f6:bd:
         7c:1a:f2:b9:57:05:4b:3c:12:80:79:bc:a8:10:da:86:5d:4c:
         56:27:ba:b5:97:e6:5c:55:1a:07:a6:13:6f:69:e0:0b:2f:e5:
         d7:df:86:6a:02:28:3e:21:d6:d0:19:86:bd:d0:0c:47:5d:1b:
         3b:15:81:11:94:2d:78:f2:cf:9c:0d:ee:7b:71:df:7a:19:67:
         d1:fa:57:4a:63:d0:67:81:d4:ca:60:96:8c:27:4a:ab:17:4f:
         77:42:59:07:a9:ac:bb:6c:53:98:77:b9:11:90:e0:10:3b:48:
         d7:14:82:07:2e:0e:da:a0:3e:74:51:57:32:65:0a:8c:ae:0d:
         a3:6c:29:cf:fe:41:75:1e:a5:68:aa:94:2b:ee:7d:7d:16:89:
         13:2f:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 18:03:24 2025 by rpki-client