Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa
File:                     30f87a7d-64ce-318f-85a0-b9500c3737a3.roa (raw, json)
Hash identifier:          4Usq4u5OcWD3hVdBNUXduqAqZkXXi1Nh9XYN4dm4JPo=
Subject key identifier:   54:D8:C4:83:31:4A:08:09:A8:A8:38:03:4F:30:F0:B3:E0:B0:73:A7
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B36BC51702D397583BDF67500
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        209.15.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:51:70:2d:39:75:83:bd:f6:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=cea04267-bb7e-469d-83bb-d006edd2258e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:5e:7b:0d:d8:b3:43:3f:f5:77:3b:36:bb:
                    5f:b4:c7:6b:bf:cb:41:0e:8c:5b:aa:c7:be:23:11:
                    05:4d:b9:8d:95:92:c7:ab:ea:d4:18:14:87:5e:b0:
                    8a:6e:27:dd:58:24:82:72:31:d3:f7:2b:f4:e5:00:
                    2b:a4:df:26:d4:ab:1d:63:70:ad:ae:0d:43:7c:39:
                    d8:20:13:66:51:8e:fd:49:4d:87:a0:e6:fc:5a:e9:
                    08:38:2c:28:05:37:4e:62:70:84:aa:3b:54:ff:98:
                    8b:4c:34:26:c7:f7:89:2c:8f:65:6f:13:e4:fb:6f:
                    4c:26:30:38:b4:e8:a3:f8:27:7a:93:66:20:b6:7c:
                    b0:78:a2:01:86:2c:02:64:de:33:f6:18:9f:35:fa:
                    5d:1d:01:d6:f8:7e:d3:42:bd:3c:d0:b5:90:ef:7e:
                    ab:01:c6:36:2d:33:df:2e:f5:00:dc:80:24:7c:26:
                    0b:53:a2:14:aa:2c:a1:a8:14:fa:41:e5:48:75:b8:
                    b4:df:b2:3d:37:94:63:e9:f9:e2:0f:7a:a1:b9:ce:
                    f0:9a:39:29:20:12:61:97:3e:e6:75:f0:74:4b:86:
                    4f:88:a1:50:74:74:29:fa:a9:55:45:9c:59:ba:fe:
                    c1:7c:8a:98:e8:8d:5d:9d:a0:b2:95:a3:14:ac:bc:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D8:C4:83:31:4A:08:09:A8:A8:38:03:4F:30:F0:B3:E0:B0:73:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:88:73:85:0a:22:04:34:35:c7:eb:7b:5c:44:1f:3d:bc:
         eb:17:c0:6d:96:95:71:4f:2c:7e:7d:56:58:ba:2d:8f:4b:09:
         4a:27:4f:75:63:d9:e1:d3:69:8a:21:6e:82:b3:0d:e4:d9:14:
         7d:e2:fd:95:68:7d:fe:42:f6:26:3f:a2:86:99:ae:2c:bd:21:
         05:84:ad:af:5c:ca:2f:4b:6d:3e:2e:80:e8:02:5e:7c:57:e3:
         63:23:2e:1b:57:53:7b:43:04:08:8d:67:14:57:0e:9e:82:48:
         7d:9b:73:7b:e0:fc:9f:a6:39:46:c8:40:91:66:12:0a:84:bb:
         1e:0b:c9:f2:5d:14:11:58:64:2c:01:e9:09:c6:22:d6:29:67:
         d1:88:54:80:8d:7c:5c:55:85:19:b4:dd:37:f9:68:ce:20:ec:
         20:e3:c9:a6:d9:1f:2a:69:42:16:eb:05:93:1f:0a:1b:34:b0:
         37:bc:fb:46:ee:4c:17:39:9f:e3:04:ea:75:9a:6a:76:db:67:
         52:ef:29:11:cf:f0:b8:60:f6:87:98:cf:ba:b9:dd:2a:71:27:
         76:da:c2:64:8d:1b:66:47:62:f1:1f:4a:f2:a9:b7:5b:53:de:
         ac:d1:3e:28:27:b4:71:87:3f:43:27:28:a1:99:46:a3:2a:33:
         fb:7e:9b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:38:45 2025 by rpki-client