Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6119ac1c-3376-3a3c-9489-6a77192f375c.roa
File:                     6119ac1c-3376-3a3c-9489-6a77192f375c.roa (raw, json)
Hash identifier:          me/STAxJH/ziySKyRhuLWnvX8vFS5e8SecwWm8Xnvd0=
Subject key identifier:   EE:3D:A3:C6:E9:C0:F5:C2:70:23:06:4B:EB:32:5B:25:E0:B4:73:C0
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F43285849DCD6E7A5ED3643D7215623C0
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6119ac1c-3376-3a3c-9489-6a77192f375c.roa
Signing time:             Thu 15 May 2025 15:24:40 +0000
ROA not before:           Thu 15 May 2025 15:24:40 +0000
ROA not after:            Wed 13 Aug 2025 15:24:40 +0000
asID:                     16527
IP address blocks:        96.8.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:d6:e7:a5:ed:36:43:d7:21:56:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: May 15 15:24:40 2025 GMT
            Not After : Aug 13 15:24:40 2025 GMT
        Subject: CN=63f1de57-010a-456b-8213-122aed3b7a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:dc:ad:c5:75:2e:f6:ba:78:19:fb:c8:bb:
                    b4:b7:51:ed:fb:bb:7c:af:c7:1b:d4:63:1c:ac:cd:
                    ec:df:2e:c7:be:cf:7f:74:8b:bd:75:49:45:60:31:
                    2c:b9:fa:73:49:b4:9c:27:32:ec:3e:6d:ec:98:5c:
                    66:a2:67:b1:9a:24:16:4a:7d:75:73:57:82:8e:96:
                    a9:9e:e8:7a:70:e3:18:b4:97:3f:f3:02:e8:3a:ed:
                    97:93:09:74:2b:58:a1:21:be:51:20:49:bc:11:d2:
                    fd:b9:ad:c0:8e:3a:97:6c:1e:95:dc:f4:50:80:99:
                    69:cd:ed:e8:ee:c6:e6:7d:10:1f:53:49:f8:6e:03:
                    07:da:12:db:57:1b:2e:9c:57:48:99:a9:3a:05:1c:
                    f2:55:68:2f:57:51:67:17:e9:ce:97:ba:1d:03:d8:
                    76:50:42:25:93:c8:75:35:3a:0f:1f:9a:5d:72:24:
                    cd:81:87:13:5b:0f:d8:20:21:e2:1e:dd:32:56:10:
                    56:61:90:c5:b5:0f:0a:a5:68:a4:c1:30:d4:fb:62:
                    bc:82:c6:f5:34:d7:8e:7d:55:f4:a4:d3:f8:55:d3:
                    95:87:da:8b:06:66:c0:4f:dd:73:91:e9:8e:8a:69:
                    f6:04:f6:f6:ee:cb:51:51:60:25:78:43:08:13:8b:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:A3:C6:E9:C0:F5:C2:70:23:06:4B:EB:32:5B:25:E0:B4:73:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6119ac1c-3376-3a3c-9489-6a77192f375c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.8.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ce:09:ef:01:95:2c:ee:31:bb:ea:10:0b:6a:4c:a5:21:b1:
         5b:03:37:b6:f6:44:24:10:bc:f5:f7:af:5c:c7:68:c2:cc:db:
         60:88:1a:21:57:25:c7:64:55:b0:bf:de:8c:9e:ef:7e:8e:97:
         2c:c0:16:58:27:22:fe:e0:a1:26:46:5b:fd:57:0a:a5:28:40:
         35:5d:dc:17:56:82:27:fa:92:2f:db:3e:50:df:e4:05:54:ad:
         94:a9:0e:a2:26:a0:b6:f0:f7:ca:95:89:47:af:67:43:ee:81:
         ae:47:f1:88:a0:e7:29:e9:97:2e:c4:8a:8d:7b:50:4b:aa:2d:
         8c:df:17:5b:be:db:b2:06:52:95:a1:ec:d4:bf:8a:e8:12:bd:
         33:e3:cd:35:1f:0d:83:0d:b0:b1:5e:2f:f5:79:c1:5f:87:9b:
         9a:0f:af:40:2f:f2:56:b3:67:e2:93:dd:05:34:b0:75:52:9e:
         c5:86:fc:00:09:b5:78:3a:52:d9:58:f5:8a:92:9d:6a:78:d3:
         25:92:39:24:99:0a:10:3c:f9:12:f8:69:55:a7:49:28:93:73:
         51:fe:3e:d1:d9:b9:9a:0f:c4:77:f0:9b:6d:b7:a7:bb:39:30:
         68:61:f6:91:d4:0f:28:ef:c5:94:93:01:41:1f:c6:6c:a3:4e:
         e9:72:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:56:15 2025 by rpki-client