Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/49dadb17-2073-36fc-a832-bbefb8050374.roa
File:                     49dadb17-2073-36fc-a832-bbefb8050374.roa (raw, json)
Hash identifier:          EGey1PZp3BD/722tz/53XQz9kcLM9dC28ujoeb0Xq00=
Subject key identifier:   99:D9:E1:CF:E2:8B:9C:B6:69:21:CE:76:15:47:07:1A:EC:0B:3E:D2
Certificate issuer:       /CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
Certificate serial:       010D0C9F4328584B3556E11B2D11791714950821
Authority key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/49dadb17-2073-36fc-a832-bbefb8050374.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     10930
IP address blocks:        209.251.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e1:1b:2d:11:79:17:14:95:08:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=c7ff5a55-34dc-45a7-a655-cd2884a23886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:42:9a:59:69:33:bc:c1:26:95:c4:82:85:
                    6c:07:11:61:ce:64:72:b8:a8:5b:0b:a5:eb:42:56:
                    63:24:4b:3d:98:3a:79:f1:75:69:32:6f:e7:8a:ce:
                    37:f0:e7:40:7d:37:d7:2a:c1:b8:a3:3b:84:64:7e:
                    3f:cc:05:12:98:88:7c:14:f5:3d:1f:c4:06:af:10:
                    13:1b:eb:dc:d1:ed:2f:e1:c5:6d:cf:40:58:df:f8:
                    e1:33:06:30:5a:16:93:78:e6:4f:c7:29:15:9e:8a:
                    32:09:c7:ee:8c:38:e6:31:57:b1:8d:61:f5:7a:78:
                    0d:6c:a5:5c:b8:33:cf:81:6e:71:e1:af:77:80:3b:
                    3b:11:85:6f:1a:50:62:5b:9b:4e:2f:4a:de:29:08:
                    16:a3:42:63:18:e1:37:c7:64:ad:b9:34:9b:22:a1:
                    0e:a0:6e:e4:bc:37:4e:36:b0:30:13:6a:2b:fb:7e:
                    1a:e3:17:e5:b4:d9:98:97:76:fc:0c:ff:8b:ce:99:
                    23:eb:23:18:4b:4e:23:75:84:56:5f:3d:8e:54:9c:
                    61:74:22:51:5a:a5:cf:bd:10:d0:8d:26:7b:87:e6:
                    25:84:48:d0:3d:6e:48:dc:5a:6a:cc:81:be:0d:7a:
                    de:f4:f9:9b:fe:5d:91:c1:74:36:94:99:f0:b4:97:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:E1:CF:E2:8B:9C:B6:69:21:CE:76:15:47:07:1A:EC:0B:3E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/49dadb17-2073-36fc-a832-bbefb8050374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl

            X509v3 Authority Key Identifier:
                keyid:23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:7b:73:ec:02:d2:eb:e2:7a:0b:01:16:f2:12:3f:63:2f:
         f4:85:9d:66:cf:58:01:d5:3f:c0:ad:24:07:cd:4e:90:f3:e1:
         d2:ba:bd:19:85:0a:93:8a:47:80:1d:c1:8b:ec:3c:5f:fe:58:
         eb:3d:96:39:0e:90:1b:a6:03:f6:c2:bb:54:d2:de:21:7a:ad:
         58:f2:2a:11:07:6a:ae:18:f8:28:1e:c6:b4:f6:b4:05:ea:d7:
         98:ac:e4:62:01:61:a5:64:2d:16:e4:fa:f0:5c:d3:e7:7e:dd:
         04:7c:5e:ea:33:dd:4c:3c:e9:2c:35:14:fe:29:85:43:ce:50:
         c2:a7:c1:2f:38:fb:97:9d:25:50:16:ac:bd:43:fa:4b:0a:5b:
         6d:91:ed:f9:a4:f6:c8:f0:2a:0f:96:53:d6:fc:b5:64:d0:4a:
         6f:e3:8d:a7:a4:f6:c8:6f:10:0b:66:96:40:84:6c:44:14:38:
         0e:76:6e:6d:5e:89:e0:e2:04:cf:40:2a:4f:27:d5:dd:bd:b5:
         a9:55:9c:59:23:2b:c9:7b:82:6a:b2:78:d7:dc:31:65:8f:5e:
         3c:f2:65:d2:8f:b5:fe:e2:ab:fb:22:d0:ce:ae:b1:c7:c5:87:
         a3:50:6b:fb:7c:a6:5e:46:52:3b:28:8b:eb:01:08:88:5d:ac:
         88:27:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:00:24 2025 by rpki-client