Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cc8612bf-93f2-3816-b381-ffe171586d50.roa
File:                     cc8612bf-93f2-3816-b381-ffe171586d50.roa (raw, json)
Hash identifier:          2ocOYryr3MS7nCBFl+XdfWeeLeOGpb+HT4mMn2oI3PQ=
Subject key identifier:   0B:09:1C:5F:0E:AA:86:CC:A6:75:E5:32:CB:82:5F:8A:26:E9:F3:B8
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584B477C7E2E8B98288C88F32400
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cc8612bf-93f2-3816-b381-ffe171586d50.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     397515
IP address blocks:        208.109.144.0/24 maxlen: 24
                          208.109.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:7e:2e:8b:98:28:8c:88:f3:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=de5f6be9-b7ed-4d25-98fd-15d86a3296cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:fe:72:73:0f:1e:b2:c9:ec:6e:ca:07:19:
                    4e:4d:ee:c0:34:a0:cd:83:e6:3a:ca:ef:1d:71:31:
                    fa:56:aa:e8:9f:20:06:72:e3:96:48:29:d4:2a:77:
                    ef:b9:11:01:04:eb:bf:0c:a8:74:ab:9e:89:19:da:
                    5d:96:cb:d8:be:c1:e7:7f:79:ab:f7:24:d7:d3:29:
                    0d:91:06:53:cf:40:52:1d:ba:75:f5:ec:0d:7a:c3:
                    02:a8:e3:98:ad:17:b1:5f:d7:e8:56:06:a1:2e:2c:
                    63:73:0d:b9:d8:e9:46:56:9f:8e:bf:af:23:fb:8a:
                    b0:03:fe:bd:62:e1:53:a2:f0:6e:5c:4f:31:65:33:
                    db:97:00:0f:11:c7:3f:64:ac:17:c2:4c:bd:f3:7b:
                    0e:22:ce:28:ec:3d:6d:af:f6:39:b5:52:b3:77:fe:
                    11:2d:33:01:b4:64:84:ed:ff:d2:db:d1:7b:38:74:
                    18:42:51:7d:f7:b3:e6:03:31:72:7c:cd:0d:70:90:
                    7f:49:eb:b9:d3:f4:8c:d5:cc:9e:48:46:52:05:10:
                    31:6b:9d:ad:f9:15:cf:a1:2b:52:a8:18:7c:64:2a:
                    e7:bb:33:c8:92:89:2e:ec:ba:a4:e4:3d:bb:ae:93:
                    35:0a:b5:8b:ba:c1:b5:95:d2:7d:70:66:d2:91:39:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:09:1C:5F:0E:AA:86:CC:A6:75:E5:32:CB:82:5F:8A:26:E9:F3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cc8612bf-93f2-3816-b381-ffe171586d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.144.0/24
                  208.109.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:65:7b:db:66:b8:55:61:25:0f:d7:53:4f:d7:e3:ee:6d:0e:
         b4:7b:de:f3:6b:ee:be:a0:30:ed:31:18:85:5b:3a:d4:82:d8:
         b7:a1:2d:cc:48:67:90:71:6d:bb:0f:64:88:01:d2:75:95:12:
         63:c3:05:31:f9:27:d6:a3:6d:70:4f:ae:04:4c:c3:b9:37:2c:
         23:c5:0a:42:14:48:06:a5:de:24:bf:a8:4c:10:ee:a3:09:64:
         d0:13:0d:10:f6:4c:16:04:d7:05:b0:54:3f:21:fc:52:e4:21:
         49:88:15:90:01:95:5d:e6:0d:c4:2e:8a:1c:1b:e7:c0:aa:a2:
         03:b3:a6:a0:20:b1:31:7e:de:d7:06:54:26:bd:e6:53:fb:23:
         a2:2c:f6:ea:c5:90:a4:13:27:52:5b:e1:83:05:a6:50:3e:73:
         41:07:af:46:ce:ea:be:4d:96:92:45:86:70:2f:73:8f:9c:56:
         44:ac:d3:38:5a:b8:e7:9f:26:81:e0:29:a2:b1:83:be:f5:0b:
         49:f9:64:46:cb:69:ec:f6:e1:25:dc:3e:3d:e5:97:9b:e9:95:
         d9:4d:d4:4e:02:c3:18:cd:26:a2:a2:c8:8a:d8:69:56:04:22:
         d9:df:94:88:33:50:6f:b5:18:85:22:12:cd:71:18:ad:04:30:
         f3:1a:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:08 2025 by rpki-client