Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa
File:                     087ef766-cc4c-38c4-b7c8-d3427883cbec.roa (raw, json)
Hash identifier:          sis+//EgL33ITq/w8TpQ6GwtZNVKs9JyXu508kO9m7A=
Subject key identifier:   78:D8:2F:39:9D:F4:DE:7E:6A:C9:81:12:9A:AF:6B:8B:CB:F7:76:02
Certificate issuer:       /CN=4e568c12-34e8-4ad5-b930-2a8c5573a764
Certificate serial:       010D0C9F4328584B25FC35F7B631AA88B8EF5020
Authority key identifier: 11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     53347
IP address blocks:        96.31.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:35:f7:b6:31:aa:88:b8:ef:50:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e568c12-34e8-4ad5-b930-2a8c5573a764
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=e8e07470-a41a-4dfe-8a7f-f6e068834108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:fd:1b:df:87:e8:af:66:e0:2b:c3:14:90:
                    2c:6b:c5:56:88:bc:5e:8b:f7:26:13:67:b3:65:63:
                    14:56:9d:35:64:86:d8:73:d8:4f:4c:9c:02:ee:2b:
                    a2:12:3e:85:63:48:a9:89:ca:fe:df:29:c9:80:b2:
                    da:c6:12:cf:f9:66:ff:d5:d1:b5:6d:e7:7a:47:aa:
                    1c:53:d9:c5:1f:dd:b6:50:a9:58:94:5b:b5:ea:4a:
                    bf:48:75:3e:3e:dc:6b:f4:fc:25:37:84:1b:b4:62:
                    db:f9:92:62:14:b4:80:87:c9:88:e8:e6:c5:c2:93:
                    0a:83:50:96:fb:7f:69:f4:ad:61:5b:35:e5:76:3d:
                    6c:af:bc:40:9c:4e:e6:bb:94:bf:98:5f:4a:af:d9:
                    19:43:82:40:95:ae:a0:1b:27:da:76:50:f9:aa:f6:
                    77:88:bd:24:9d:e5:70:b1:70:03:db:b3:33:69:c9:
                    78:48:90:af:aa:10:f5:f2:d8:b0:28:d2:03:f4:f7:
                    ec:16:4a:a9:ee:61:28:24:e3:68:69:da:b9:7e:e2:
                    cb:51:77:12:22:0a:12:70:a7:61:96:8a:20:f4:bb:
                    de:00:61:43:c9:85:67:23:61:4c:74:39:a7:46:52:
                    01:9c:26:53:ab:d3:27:6e:43:d6:2f:29:21:f6:99:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D8:2F:39:9D:F4:DE:7E:6A:C9:81:12:9A:AF:6B:8B:CB:F7:76:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl

            X509v3 Authority Key Identifier:
                keyid:11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.31.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:f8:2a:13:82:51:4a:af:d4:11:2d:a1:b1:68:e2:bb:89:
         a4:28:75:06:75:d1:c6:d9:ac:63:71:04:c6:a9:40:91:aa:8b:
         cf:06:c8:3b:01:db:70:e1:7a:03:46:24:bd:3e:9a:3e:e2:4b:
         1a:0a:95:cb:16:d7:c6:50:df:69:56:90:f6:57:69:e2:d7:13:
         4c:91:48:71:61:37:a7:65:dc:ca:50:4e:87:3e:4e:8f:ea:f6:
         31:2d:14:31:ed:0a:0a:e8:7c:46:32:46:f0:d0:d7:c4:39:cc:
         01:ce:7e:fa:42:f8:3d:c2:bf:66:2b:38:ef:31:06:5c:6c:76:
         e6:9a:13:91:73:7b:8b:28:c6:c1:3c:0e:01:0b:1a:36:96:f8:
         9b:1e:56:e0:0c:60:a1:e9:bb:df:27:26:a4:54:82:ba:bb:49:
         39:ef:55:1b:7c:21:06:f4:38:09:d8:06:e6:9c:f0:9c:c9:b3:
         af:91:7a:a0:99:5a:45:82:6c:89:dc:ba:58:80:40:6b:65:4e:
         ba:0d:86:4e:58:5b:41:9e:73:ea:96:9c:30:0a:d3:9b:21:32:
         be:80:55:40:12:9e:8f:e7:20:62:b7:17:e1:93:b4:a8:df:0a:
         32:d3:64:29:f3:d5:57:ad:15:2f:44:d3:0d:14:b5:e9:80:71:
         51:b9:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:53:24 2025 by rpki-client