Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa
File:                     9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa (raw, json)
Hash identifier:          kQbXI01VTNpwsk8J45sCrtPM/MzpWS2e/Hxuf/cRny4=
Subject key identifier:   CE:56:27:B6:4A:17:FA:08:3D:C5:A9:10:14:84:9F:02:0A:6E:C6:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584902EC20BE925FCF01B0929380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        96.7.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:20:be:92:5f:cf:01:b0:92:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=6ea1f075-13f8-4941-a691-a25504599e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:07:86:bf:e1:bf:bd:0c:05:78:24:54:ee:
                    aa:e9:87:10:b9:30:29:cc:23:76:e7:85:49:18:ed:
                    8e:08:88:1b:6d:f2:50:87:29:5b:4c:e3:c5:01:fc:
                    cb:bc:1a:13:20:aa:83:d7:2f:84:2f:6c:93:b4:aa:
                    ef:c6:69:ad:71:a9:13:1a:df:f1:fa:dd:9a:d7:b2:
                    b1:6e:ce:4e:a3:2c:d8:58:33:a8:10:3a:01:27:e4:
                    19:53:bc:73:34:7c:f4:bc:20:a6:0d:7c:e8:5b:63:
                    8b:86:5c:3a:aa:54:c6:43:c1:4d:20:e1:3a:e5:50:
                    17:df:d1:24:2b:7b:26:0c:e2:3b:65:50:84:5a:a9:
                    f1:ee:a5:26:b2:32:34:de:87:25:b4:bb:90:3b:44:
                    df:76:60:66:dd:00:6b:29:a6:6c:76:83:50:43:3e:
                    9a:ec:9c:08:87:03:20:a8:35:66:8f:98:f4:85:ab:
                    99:ba:44:18:5c:e1:22:10:7c:3c:39:5e:8d:61:e2:
                    8f:ad:f0:39:88:db:74:03:8b:3c:49:b7:64:de:fe:
                    8e:3b:cb:19:5f:07:f6:4f:d6:18:6a:d2:62:16:11:
                    64:ee:bf:7a:1a:ce:3a:3e:42:56:8e:26:0b:24:bd:
                    fc:6b:a1:3a:fc:90:59:d8:c5:d4:19:e8:d0:f8:bd:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:56:27:B6:4A:17:FA:08:3D:C5:A9:10:14:84:9F:02:0A:6E:C6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:02:f8:4f:ca:9b:ed:55:6c:c8:7b:7c:87:ac:aa:52:90:cc:
         cc:a1:9d:6c:b7:bd:8c:80:21:2b:3e:c0:1c:9b:e2:f1:ee:0d:
         59:96:a7:b6:c5:9a:2b:e1:50:4f:39:46:7f:e5:7e:60:71:d9:
         21:ab:40:0b:5a:ca:e4:37:79:e7:1d:b5:fd:24:a0:be:5c:6f:
         40:70:cf:28:7b:24:09:da:0d:4d:2d:86:0e:3c:0e:7c:f3:92:
         fa:eb:e7:7d:90:0d:14:ff:f6:14:ee:c3:6e:57:e0:68:23:fe:
         c8:09:6e:a1:93:98:cf:47:c3:fd:32:3d:84:d4:bc:61:7d:0d:
         dd:ee:34:a5:96:f2:81:69:06:8b:f7:4b:b1:55:1f:ff:34:86:
         e1:08:6f:8c:77:03:3f:c2:c0:17:b2:a7:6d:08:b1:c6:a0:25:
         99:2c:76:11:1e:a4:b2:51:3d:62:7b:8a:fb:56:8e:66:8b:b4:
         76:89:7f:46:de:67:d4:87:19:c0:4e:8c:80:6e:db:1e:2e:77:
         f0:9e:cc:7e:10:8d:29:54:ea:e3:09:60:90:4f:fe:4a:98:a8:
         39:75:33:a5:12:31:f9:75:1c:00:72:22:11:89:c8:e0:d3:4e:
         d6:20:be:cc:33:94:d1:95:99:8b:b9:de:1c:af:d5:59:56:90:
         38:3d:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:58:36 2025 by rpki-client