Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a136183e-96df-3ef3-9320-132a565cb3ee.roa
File:                     a136183e-96df-3ef3-9320-132a565cb3ee.roa (raw, json)
Hash identifier:          MLvz5qNL6fN1pAE87fWzGt/UhSrz7j+Dt8O4Z2JVPVw=
Subject key identifier:   75:CD:81:52:3B:6D:D4:8B:32:B5:FF:6F:B5:48:D5:FC:25:01:FE:E6
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584AE461166B052F9183BD964180
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a136183e-96df-3ef3-9320-132a565cb3ee.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     36231
IP address blocks:        209.237.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:16:6b:05:2f:91:83:bd:96:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=79d8ab2c-5912-4042-8136-13e1835744f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:d4:cc:3b:b7:04:f1:ff:7e:a1:67:e8:fd:
                    8a:48:3a:54:14:53:9d:cc:1c:dd:bf:67:75:2e:b9:
                    98:15:62:5b:50:63:03:71:8f:fe:6c:7d:61:2a:ec:
                    d9:97:1f:11:61:8d:51:ef:bd:8c:ce:47:e4:04:0b:
                    4e:c9:55:b6:a7:29:41:54:d6:96:c7:9f:18:14:a7:
                    81:0d:b1:0d:ac:e2:cd:57:e8:2a:17:0f:18:08:7e:
                    1f:e4:13:46:af:7f:9a:15:e6:83:86:04:fc:95:1c:
                    31:a7:08:c9:51:22:9d:f7:7a:01:f0:5f:72:e1:0d:
                    98:e8:7a:b1:51:75:50:6c:5a:95:68:6c:09:21:71:
                    e6:1d:06:5d:59:78:5b:02:e6:f4:06:9e:22:fe:39:
                    10:6f:4e:13:de:92:54:b2:4e:fc:66:2a:dc:ac:f1:
                    57:16:0c:22:45:db:a1:a0:e1:11:30:d8:0e:29:16:
                    3d:e0:9d:11:48:0b:5f:67:74:69:22:b8:74:23:cc:
                    6d:43:34:67:f5:46:85:41:18:ae:2e:e7:85:b4:d5:
                    d3:61:cd:42:b7:6b:3d:7b:b9:2f:8b:72:e3:e4:76:
                    87:56:19:d9:6d:17:25:d1:86:c2:84:f5:0c:c2:a3:
                    2f:81:f2:0b:a5:56:c2:2b:c3:87:5e:45:a3:33:81:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CD:81:52:3B:6D:D4:8B:32:B5:FF:6F:B5:48:D5:FC:25:01:FE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a136183e-96df-3ef3-9320-132a565cb3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:57:e3:1b:bb:fa:f4:d7:f7:8b:64:c8:59:6a:4b:bf:68:ac:
         de:9a:70:d1:d7:d1:28:be:33:27:f3:13:f2:1b:f4:13:f7:8f:
         04:c6:58:13:29:fd:e5:a2:e1:9c:4c:04:3c:8c:42:60:51:70:
         22:6c:a8:be:c4:a4:16:3d:9d:dd:25:3d:92:7b:e5:a4:eb:9f:
         91:f1:04:0f:a0:a1:90:17:09:75:9d:d7:bc:a6:71:8c:86:52:
         65:09:32:80:80:75:53:1a:fe:18:79:d6:50:13:55:b6:5e:05:
         19:31:fa:94:92:c2:b4:78:68:c9:24:cb:4b:b1:45:32:32:6e:
         2a:ff:5c:dd:fa:a9:c6:25:d4:a4:9b:bf:e4:4a:a4:cd:99:2a:
         b7:d1:6a:53:b2:b4:e9:37:28:20:ad:c0:27:ab:2a:4d:81:68:
         15:bb:35:da:4c:b7:6b:7f:15:ed:62:9b:10:ae:15:1e:6c:25:
         8f:ea:dd:26:d2:7f:88:15:78:18:56:17:71:0a:45:af:d7:53:
         a8:93:38:f8:0d:c5:7f:c9:5c:de:87:70:52:92:52:f9:cc:46:
         40:08:2f:b8:88:c6:de:95:48:55:0f:ed:28:e1:6b:2d:c4:26:
         47:aa:2e:fb:ca:13:7c:c2:70:7b:e6:df:1e:d7:36:de:eb:02:
         5a:cd:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:46:10 2025 by rpki-client