Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/444991fd-cae5-3f39-a5b6-05da59ccf602.roa
File:                     444991fd-cae5-3f39-a5b6-05da59ccf602.roa (raw, json)
Hash identifier:          ZtjD0UVyXLMrSc5RPkG8XtQX09v+PVQo5/Pt3SbHgOM=
Subject key identifier:   CF:55:CE:68:D1:71:B2:61:91:85:93:BB:E8:35:18:01:65:48:24:F6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E22510C702483510C7E69080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/444991fd-cae5-3f39-a5b6-05da59ccf602.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     200005
IP address blocks:        96.7.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:10:c7:02:48:35:10:c7:e6:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=c02f165c-b250-4685-b7c3-17d320b32f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:c2:d5:cc:07:9a:95:b8:6f:93:96:db:c0:
                    58:f7:79:c5:b3:a1:46:9c:02:00:f1:86:bb:82:62:
                    6e:c2:7f:96:50:28:bc:bc:4f:de:bf:05:37:48:d4:
                    d4:f2:06:52:5b:df:c4:0b:e0:62:78:09:89:57:eb:
                    09:8d:43:8e:98:cd:e1:63:54:e0:f5:f8:09:36:27:
                    6b:15:e9:cb:22:96:62:1d:d1:9f:6f:6e:82:4f:81:
                    2a:bb:78:50:34:f1:2c:ab:4e:de:08:73:6e:0b:5c:
                    53:aa:7e:29:59:db:3c:95:9f:64:ec:b3:80:36:45:
                    7a:34:fa:01:ec:c8:38:1d:05:61:91:d2:d6:62:a0:
                    42:7e:f5:c8:36:cf:aa:97:bf:c8:34:2b:1e:da:17:
                    35:85:12:2b:f7:cf:be:a8:9d:b1:75:a8:3d:78:fb:
                    ac:3d:4f:32:c8:2f:2e:24:ff:af:cc:b9:fd:22:f7:
                    64:51:fa:4e:cf:77:9a:20:59:47:9f:1d:dc:ca:20:
                    f9:06:01:9d:23:8f:dc:7a:10:55:44:10:9a:f3:90:
                    06:e2:17:f5:f3:6f:3c:ef:f0:6f:d7:89:f5:32:d8:
                    23:b4:19:2a:2f:92:a1:90:8f:53:50:67:de:62:ec:
                    e3:d1:6d:98:10:17:b6:8e:01:8f:e4:21:0e:03:95:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:55:CE:68:D1:71:B2:61:91:85:93:BB:E8:35:18:01:65:48:24:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/444991fd-cae5-3f39-a5b6-05da59ccf602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:ca:9c:61:e2:db:b5:11:0c:fc:e1:60:89:3d:9a:39:3d:
         6a:43:f3:8d:9e:35:0c:11:c1:73:2b:3d:ae:d6:48:1e:80:d7:
         80:ee:25:21:26:e2:fe:72:21:11:8a:3c:60:e1:97:1c:d0:5b:
         2a:ec:57:a3:2f:c1:62:1f:0f:c5:50:26:90:e5:8f:e3:ce:c7:
         91:67:69:dc:8b:2c:6c:8f:3e:5d:46:c4:a1:1f:43:75:05:25:
         07:e0:58:2c:ab:a9:6f:3f:94:90:79:dc:be:11:f0:0f:91:c3:
         d5:85:66:0e:71:79:4d:8d:bd:15:36:b6:71:4c:08:85:a5:3e:
         b4:59:53:51:fd:b1:cd:12:b9:78:22:00:5e:46:7b:c2:18:d0:
         b5:2e:70:e6:a8:5d:ef:49:c0:3c:17:31:e0:06:bf:bc:d5:7f:
         b4:33:50:f9:91:59:9e:04:58:56:50:7f:2f:ea:9a:a7:94:f9:
         0d:7d:e4:88:70:60:3c:a2:53:12:9b:e6:b1:5a:ec:4b:49:1b:
         6d:bc:3c:76:2c:ad:ed:d7:c6:0c:c1:42:df:a8:2a:3f:fc:d3:
         b8:dc:45:63:94:fc:85:eb:f1:ff:6c:da:eb:ee:cc:e2:0d:d5:
         2f:41:72:cd:03:bb:45:7f:13:43:03:03:7c:5b:32:c7:86:e9:
         67:67:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:05:24 2025 by rpki-client