Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0954e518-9726-3730-b9ee-764c567d1c70.roa
File:                     0954e518-9726-3730-b9ee-764c567d1c70.roa (raw, json)
Hash identifier:          UhCzmdoTVI5UFRxaGSOcs04WEYRAOup8AtocS37zldA=
Subject key identifier:   22:6D:2A:C5:FC:E3:9C:0B:9C:2C:4C:A7:19:2C:54:C9:50:EE:16:FD
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F4328584A6F2070E988961FEFEE269100
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0954e518-9726-3730-b9ee-764c567d1c70.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     19830
IP address blocks:        208.99.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:70:e9:88:96:1f:ef:ee:26:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=02c83461-e85d-4019-86b0-180b63d6c550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:3b:eb:e8:ff:ec:6f:4a:7c:6a:8d:b7:4e:
                    45:63:9d:b6:10:96:53:55:43:22:dd:b8:c8:06:33:
                    ad:2d:b4:9f:2f:f5:9d:64:ef:6f:70:b9:f8:de:ab:
                    c5:cb:e6:5b:61:78:a1:0f:16:29:0b:30:67:f2:54:
                    0e:ad:43:94:f3:36:45:e5:9c:fc:3e:b6:13:17:19:
                    c2:8d:ee:63:74:08:72:fe:12:fe:2f:de:82:49:82:
                    52:e5:b8:eb:b4:08:b1:da:9c:0d:18:fc:42:83:a4:
                    b1:68:6b:e6:03:96:7e:0e:61:09:55:1c:03:79:c7:
                    51:34:a0:dc:ec:36:71:65:64:19:7d:05:3a:bb:b1:
                    9c:bf:6c:cf:94:48:95:94:bd:29:71:b5:25:75:7e:
                    65:62:02:de:43:88:a9:8c:c0:25:23:3e:48:c1:de:
                    d9:54:11:eb:4c:e6:c0:64:b7:d5:f3:cf:df:54:d6:
                    44:eb:78:13:1c:b2:b5:74:7f:43:88:b7:71:d8:64:
                    89:70:df:4a:df:ba:4a:41:23:2d:3f:e0:d6:51:0a:
                    98:4b:80:c1:25:40:f7:1d:c3:1a:d3:1e:1c:f3:de:
                    69:76:fc:45:df:a6:c5:15:a9:3f:06:3f:76:98:e7:
                    c3:94:99:25:be:82:25:51:29:c0:03:de:de:51:a6:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:2A:C5:FC:E3:9C:0B:9C:2C:4C:A7:19:2C:54:C9:50:EE:16:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0954e518-9726-3730-b9ee-764c567d1c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:17:f7:f5:a4:57:4d:e9:d7:64:77:5c:e3:4a:77:20:77:e6:
         0a:bb:4f:fc:52:d1:3a:12:74:22:37:bd:14:48:03:ea:3c:11:
         4a:26:c2:33:e3:7a:37:5a:c9:a6:d2:be:c8:72:7b:5c:da:02:
         b6:a9:46:49:7d:d5:7f:60:69:53:b7:18:32:3b:96:88:c0:f5:
         0a:86:54:70:e8:36:f7:8d:fc:20:43:aa:a2:12:57:8c:e2:6c:
         cc:a2:28:dd:dd:d4:35:eb:cc:0c:1a:a6:4a:6d:7a:a2:fa:14:
         ad:3c:49:25:2d:18:84:1e:81:fb:fd:a5:a1:03:96:ee:5d:02:
         70:c4:96:6d:c9:2b:08:d5:b4:4e:2c:34:71:d3:18:87:9e:fd:
         4b:22:2e:b9:35:af:31:43:4c:82:da:f1:24:20:c2:3f:ec:a1:
         b8:cf:cf:65:30:35:a4:73:ab:b2:4b:61:b7:50:7d:37:18:f8:
         29:86:dc:71:2a:49:75:fc:73:ed:68:c2:f6:9b:44:0e:3f:08:
         d2:04:f1:ab:57:20:83:28:a6:6f:bd:11:a4:ee:b6:55:a0:cd:
         a7:0a:51:37:b3:85:6e:04:80:02:5e:d8:1a:56:d0:a6:8e:26:
         d7:9d:ac:cb:1a:75:55:47:0f:95:ce:54:e2:7d:94:df:6a:82:
         38:49:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 19:46:07 2025 by rpki-client