Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/a9a01585-551d-360e-98ce-07ff9d46d7a1.roa
File:                     a9a01585-551d-360e-98ce-07ff9d46d7a1.roa (raw, json)
Hash identifier:          ndYYIU/wpdFTiPFeSHYD0N/BfZKGoHpMsESJGR6vhHg=
Subject key identifier:   08:94:D0:FC:F8:45:C8:91:75:0C:DD:63:F6:8C:B0:CE:01:FC:76:60
Certificate issuer:       /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
Certificate serial:       010D0C9F4328584A35E58B2B37434B0166645AC0
Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/a9a01585-551d-360e-98ce-07ff9d46d7a1.roa
Signing time:             Mon 16 Jun 2025 13:01:03 +0000
ROA not before:           Mon 16 Jun 2025 13:01:03 +0000
ROA not after:            Sun 14 Sep 2025 13:01:03 +0000
asID:                     36131
IP address blocks:        199.30.240.0/24 maxlen: 24
                          199.30.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:e5:8b:2b:37:43:4b:01:66:64:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
        Validity
            Not Before: Jun 16 13:01:03 2025 GMT
            Not After : Sep 14 13:01:03 2025 GMT
        Subject: CN=66998756-0747-4763-9c5c-368c304e1326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:86:ca:e5:7b:87:29:8b:68:f6:ff:63:88:
                    38:5d:e1:50:d6:fd:ab:c4:48:1d:eb:61:d8:c0:06:
                    75:92:7b:10:df:de:85:59:0e:74:e0:a6:5d:99:6d:
                    44:65:97:d8:c6:71:83:8f:78:e3:40:81:0d:ac:8a:
                    55:fc:10:5d:97:a1:fe:8b:b1:a6:c3:7c:c6:dc:e3:
                    3a:5a:54:49:9b:0a:10:77:5d:b0:6a:fd:8b:1f:94:
                    fd:7b:bb:c3:a0:c6:3e:6c:4f:27:f1:d9:8d:90:e7:
                    d6:07:fc:65:9e:18:07:54:83:3e:68:54:14:53:9b:
                    23:a0:a8:5d:2f:ce:6c:e8:73:bd:41:e6:a7:67:1e:
                    4a:eb:9b:80:8b:03:ab:d5:df:22:12:5a:30:44:12:
                    6a:15:5c:2e:fb:f4:42:17:3b:4f:6c:2f:3e:4e:45:
                    67:0f:81:54:66:62:e8:fe:47:66:ba:50:05:d3:4b:
                    c2:07:83:cf:da:2a:54:e0:7d:26:e5:52:0b:3f:fb:
                    3d:ab:33:0a:9b:a4:81:4a:22:4e:98:6b:e0:82:cc:
                    7e:a5:65:46:f8:df:37:e3:98:5d:44:53:4e:fd:b1:
                    74:b8:e3:6f:cf:2e:dc:f6:40:22:ce:52:52:f7:dd:
                    24:9e:26:02:c4:7c:7b:13:62:cb:55:c6:44:7d:5c:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:94:D0:FC:F8:45:C8:91:75:0C:DD:63:F6:8C:B0:CE:01:FC:76:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/a9a01585-551d-360e-98ce-07ff9d46d7a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl

            X509v3 Authority Key Identifier:
                keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.240.0/24
                  199.30.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:08:e5:76:3b:bd:fa:77:9e:3a:cb:b6:f9:36:cc:81:4d:a4:
         23:da:d4:2b:e7:3a:08:90:e2:c3:c3:03:79:4f:80:11:c2:19:
         32:9e:10:34:66:5b:b4:a6:80:0f:8a:e0:16:1c:45:dc:e4:f6:
         53:79:4e:05:17:9a:1d:f3:f9:9c:70:4d:4b:a9:47:77:89:4d:
         0d:45:2f:ce:15:64:f2:35:75:5d:e5:8b:0c:55:c7:d2:b8:9c:
         31:73:04:a4:36:8a:1f:18:39:e4:fe:3d:d1:d7:d0:8b:2c:c9:
         2a:33:32:be:00:2f:c6:99:7d:a6:59:4a:b3:10:c6:58:85:c5:
         7d:8c:cb:bb:0d:56:99:57:a2:5f:d8:c1:42:c5:4c:c5:37:1c:
         49:33:9e:74:0c:d3:fd:29:51:55:26:e4:3e:5d:d5:62:b8:5e:
         f9:28:5c:07:40:d2:4f:09:6d:9f:69:c6:77:90:7c:f5:b5:c1:
         6a:f2:f6:a2:dc:07:b2:44:d7:40:5a:19:d5:5f:97:3e:82:1d:
         d6:1b:f4:1f:4c:a9:db:08:9c:04:04:d8:c2:f3:bb:37:1a:99:
         51:2a:66:09:36:ad:a7:2f:3f:c3:6f:ef:7b:75:3f:6b:94:d1:
         b3:c2:63:b4:c0:eb:cf:77:37:4d:da:e4:7a:89:2a:28:74:c2:
         17:ed:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:57:32 2025 by rpki-client