Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/eb3ee609-9884-326a-a034-8a5cbd3e3880.roa
File:                     eb3ee609-9884-326a-a034-8a5cbd3e3880.roa (raw, json)
Hash identifier:          7wL87Nc+0bZtlrBN4deti8DVCXEa11UhqoWiv3onOuI=
Subject key identifier:   69:79:EE:63:F6:A0:AF:91:00:F9:59:76:79:30:53:AB:91:89:81:FA
Certificate issuer:       /CN=0a609de0-040f-42a5-990f-417b65a086a6
Certificate serial:       010D0C9F4328584B4BAC71CE88C98C1A71E67EC0
Authority key identifier: F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/eb3ee609-9884-326a-a034-8a5cbd3e3880.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     11414
IP address blocks:        24.51.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:71:ce:88:c9:8c:1a:71:e6:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a609de0-040f-42a5-990f-417b65a086a6
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=47ffed54-de1e-4448-9796-27d49378144c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:92:6e:92:20:db:62:7d:b0:cc:a1:c7:d2:
                    6e:c7:ba:a5:ef:00:5f:ff:9a:61:23:b3:58:a7:28:
                    cc:d1:48:c1:bc:1f:91:60:1c:3f:73:93:fd:e6:8f:
                    bd:2e:1d:b7:5a:0f:a8:13:c6:bc:d0:e0:eb:b2:11:
                    72:0d:ae:8c:cd:ff:3a:62:25:6b:f9:19:f5:d7:b4:
                    8d:03:7e:af:61:de:a8:ac:ff:6a:5a:6a:3b:38:32:
                    aa:45:1e:e3:d9:10:87:25:c5:82:96:3d:9a:5a:58:
                    ec:90:a3:8d:ca:42:87:af:24:70:fe:3c:01:fc:b6:
                    de:a6:91:43:67:8d:0c:90:b3:a7:83:4a:91:a8:46:
                    d4:7a:e5:86:cd:f1:9d:82:67:ed:c7:74:c3:02:94:
                    c3:dc:9e:9a:f4:b6:40:e1:0b:74:68:8e:f0:fe:1f:
                    85:b7:06:22:0d:b1:63:0f:c5:00:ee:32:56:4f:2b:
                    be:99:ec:5c:cb:95:bd:fa:45:1a:84:3c:53:2c:c2:
                    9b:3a:7a:00:ac:be:90:6c:d5:4b:eb:ff:e0:f8:72:
                    ff:20:80:8f:3f:03:19:bb:56:5a:31:23:7b:72:8d:
                    87:cc:7f:58:6f:96:3a:d1:54:ad:74:19:f4:29:49:
                    03:5c:32:b6:7a:38:60:6a:a9:41:4e:16:2b:da:93:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:79:EE:63:F6:A0:AF:91:00:F9:59:76:79:30:53:AB:91:89:81:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/eb3ee609-9884-326a-a034-8a5cbd3e3880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl

            X509v3 Authority Key Identifier:
                keyid:F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:ce:61:bf:18:14:a7:6f:13:c4:15:2f:d9:31:a8:af:0f:
         83:14:ed:4c:9f:ae:1e:d0:db:6d:a9:c2:1b:5c:17:d7:5a:d2:
         15:d9:fb:ce:24:a0:be:be:08:7d:ee:ae:86:88:1e:16:57:7e:
         d5:67:21:41:a7:6b:e3:65:62:ca:d4:3c:94:3d:06:7a:27:9e:
         82:72:53:bb:f3:29:e5:c1:a1:b9:3e:7c:9b:d0:39:79:7b:a3:
         0b:b7:91:28:11:83:ee:7a:a5:73:6a:fa:36:11:55:55:d8:63:
         02:d9:08:e9:db:7f:1c:9b:39:5f:94:4e:24:d3:c9:fa:5a:f3:
         63:7c:fd:a4:17:08:53:a1:d0:b0:08:80:ca:af:48:df:12:58:
         1d:85:29:d3:2f:c1:62:f3:4b:5a:bd:83:95:8c:fa:9f:a2:a4:
         54:58:19:0f:cc:cc:3e:66:00:c7:f7:c5:e5:a9:7e:0f:f6:7d:
         34:9d:8d:8a:8a:1f:f3:63:8d:a3:6a:5e:e9:09:68:63:66:c2:
         e8:e8:76:10:59:4d:ce:06:59:a0:e5:34:b2:13:01:39:33:26:
         d1:62:ff:37:da:c5:22:2b:9f:ec:e3:09:fb:05:1a:a7:a6:76:
         42:9e:a3:a9:f4:34:b4:05:4b:b4:69:a1:bc:d1:9f:4e:9e:93:
         10:c7:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:20:54 2025 by rpki-client