Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa
File:                     2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa (raw, json)
Hash identifier:          qmwyIiNlm3y1A9mdsvUulJZT5JQ+ZWJQxO5us09X5mc=
Subject key identifier:   81:2B:15:50:C0:3C:A3:FB:B7:1E:77:97:5A:90:E6:5D:9F:04:08:DF
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584A63D07AF71E44C7E11CFFC980
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa
Signing time:             Wed 02 Jul 2025 23:45:51 +0000
ROA not before:           Wed 02 Jul 2025 23:45:51 +0000
ROA not after:            Tue 30 Sep 2025 23:45:51 +0000
asID:                     18606
IP address blocks:        176.108.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:d0:7a:f7:1e:44:c7:e1:1c:ff:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Jul  2 23:45:51 2025 GMT
            Not After : Sep 30 23:45:51 2025 GMT
        Subject: CN=c23a1fcd-793e-412d-a708-640544186729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8c:b6:55:e2:fc:57:fd:4e:62:fc:c0:5f:68:
                    95:db:fe:03:41:d3:31:b3:4d:e4:30:ee:6a:06:4e:
                    01:37:52:a1:1f:63:d0:a9:2e:a4:50:81:15:6d:49:
                    43:94:f0:35:12:54:46:81:09:34:a4:d4:e4:c8:d2:
                    e4:3d:a7:fe:6c:ee:e0:b1:f8:aa:32:cb:ed:4d:7a:
                    ad:d2:55:ae:c2:a4:94:65:ed:1b:4b:b3:f4:19:3f:
                    7a:11:88:19:5c:fa:d7:3d:1b:34:ad:95:f4:03:46:
                    86:8e:83:6e:bf:56:ff:b2:0f:8c:90:90:2d:3d:63:
                    bc:de:59:1f:85:62:dd:61:54:d6:76:4f:2c:8a:cb:
                    29:28:1a:82:83:c0:6d:e9:06:22:42:17:71:bb:60:
                    9d:76:5e:06:b4:74:9b:69:0e:a7:47:6c:b5:db:f5:
                    3c:ca:50:17:9f:c4:c4:8b:44:a6:51:e8:74:7b:5c:
                    d0:18:da:56:ae:42:f1:e0:4b:62:fe:33:fa:00:e5:
                    67:ba:79:b4:c3:9d:be:99:9d:9d:76:34:ae:d5:58:
                    88:03:56:b0:7f:35:f7:01:72:0b:53:3a:1d:31:b0:
                    65:5b:1c:fc:c4:10:03:51:a2:ae:99:8a:0a:bb:9d:
                    1f:c2:53:8f:a8:db:ed:3c:8a:8c:11:22:d3:7e:69:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:15:50:C0:3C:A3:FB:B7:1E:77:97:5A:90:E6:5D:9F:04:08:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.108.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:fc:9d:4b:8d:8c:e0:3b:1e:1b:14:47:78:ea:3a:1f:76:76:
         3a:72:2f:35:42:70:24:ce:a8:7b:45:c5:f9:56:18:3d:a9:4f:
         c5:e8:bb:22:2a:b9:8c:1d:4c:45:97:dc:bd:80:af:9d:fb:b2:
         06:e3:e7:9d:44:c8:4f:42:f3:5c:b1:dc:ae:a4:73:01:92:4a:
         6c:c6:3f:24:8c:a9:5f:e2:aa:f4:24:4a:df:6b:8b:29:c9:c3:
         88:68:67:fb:f6:65:af:ab:37:d9:2a:11:8c:78:e1:75:c5:dd:
         07:4c:66:18:e1:7a:be:e0:1b:14:b2:d4:f0:06:8c:7e:8d:2d:
         e6:fb:66:c8:2a:d0:3f:19:fb:f8:a2:d3:cd:f4:53:04:0e:df:
         eb:85:ce:6d:44:45:07:87:d1:5b:a8:53:05:11:6e:61:2d:04:
         e8:fa:73:b5:56:85:d6:9b:1b:22:59:38:fa:94:05:46:ff:d6:
         fc:9a:5c:fb:ea:09:4e:32:f7:4a:27:74:0e:d7:fd:bf:c7:b8:
         9b:a0:dd:3d:92:ae:64:dd:bd:52:61:e1:09:71:8b:59:7b:8d:
         35:8c:89:0c:9a:01:df:d2:33:22:bf:6e:e6:de:b4:35:da:f2:
         b0:08:5b:f8:d5:c7:31:d5:b9:4d:6a:82:92:46:ff:87:2c:e5:
         21:cd:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:24:00 2025 by rpki-client