Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa
File:                     fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa (raw, json)
Hash identifier:          PJLkM32TIhrl33sXkmEAiQ61IPxVuWDnayVbUGjfICw=
Subject key identifier:   60:EB:CD:C8:6B:8E:7D:DD:5C:13:B9:6D:04:9C:A7:D8:0C:94:D6:44
Certificate issuer:       /CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
Certificate serial:       010D0C9F4328584B6BC74E65FDBEDDE6A4D3F0A0
Authority key identifier: 52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     22611
IP address blocks:        209.163.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:4e:65:fd:be:dd:e6:a4:d3:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=4ae5c8c0-cfb9-4ddd-b320-bb883641952a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:97:30:ce:76:c1:ce:13:8c:ba:f5:9c:ac:1b:
                    36:d9:e5:dc:1c:33:1c:e7:28:37:90:02:d0:d2:5f:
                    e6:5b:71:df:ca:20:79:73:0d:47:be:80:8c:f1:2d:
                    8a:13:b8:96:df:4b:5c:ce:bd:a9:27:5e:e8:27:0b:
                    47:43:f7:eb:96:ef:9a:6c:ee:73:28:e7:ad:cd:03:
                    45:d3:03:f7:6a:03:18:f9:fa:66:90:79:fa:49:5b:
                    91:16:ea:e7:5e:2a:20:d9:dc:a4:a4:8d:09:37:c5:
                    ff:ff:dc:47:15:7d:db:c0:f0:eb:f5:44:20:d7:df:
                    60:68:0b:c0:13:11:a1:a5:e6:ec:27:4c:a2:9e:19:
                    c3:85:be:c1:2c:c5:4f:be:58:7b:5d:14:f1:8f:5a:
                    15:78:80:73:7a:9a:00:09:4a:41:63:82:fb:20:9f:
                    42:0a:1c:5d:6c:cd:5c:7c:04:3a:b9:79:71:d5:2a:
                    d1:18:df:9c:29:d8:69:e4:f2:f1:14:97:9d:a8:d8:
                    35:d0:47:89:7f:c0:7a:7a:e0:3d:2f:13:f1:60:59:
                    1f:3d:b0:9c:fb:72:86:31:3a:69:79:8a:50:69:f9:
                    99:41:dd:f0:17:da:50:fc:19:d5:d3:01:17:93:bf:
                    23:e2:42:33:cd:a8:bc:a6:43:b4:df:45:f4:11:95:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EB:CD:C8:6B:8E:7D:DD:5C:13:B9:6D:04:9C:A7:D8:0C:94:D6:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:70:73:22:dc:3f:e0:7f:5e:80:b4:b0:6d:cf:15:19:5f:68:
         45:ff:41:8e:98:5b:3a:cf:7d:b9:56:6e:54:33:90:fb:9a:e3:
         69:05:6a:a3:35:42:51:aa:41:20:b3:23:21:3a:49:62:7f:42:
         22:02:9c:34:e7:a5:e7:b4:76:58:32:47:9b:92:56:40:99:98:
         e9:ba:d4:52:90:9d:04:76:06:65:96:d8:e6:08:32:fc:aa:00:
         9a:01:d6:cd:ad:b0:15:e9:ee:00:66:6d:3b:37:d1:c3:49:d8:
         95:9f:d9:07:ed:b1:9e:6a:c1:8a:d1:74:3c:26:ce:e2:b1:0c:
         b3:06:6c:15:47:f3:d2:7e:48:67:f3:31:00:9a:f1:96:65:4e:
         b3:34:65:84:22:cb:76:e5:d9:1d:c7:eb:1d:f6:72:4e:0a:c3:
         94:13:1f:13:3c:45:71:35:9b:8a:94:57:83:2b:4b:27:d5:17:
         34:a5:60:fd:96:2f:5e:b9:f9:4a:e0:4c:82:8d:dc:86:fc:d8:
         70:c7:9d:39:da:f9:c6:e8:46:76:ed:dd:fe:90:f2:66:ce:53:
         c8:55:9d:94:35:a8:ab:0a:df:32:81:bf:e1:b0:12:57:b9:1b:
         a4:2b:ea:d6:df:fb:1d:59:e9:9c:f6:65:03:be:c1:bb:f2:67:
         81:3f:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:36:44 2025 by rpki-client