Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
File:                     9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa (raw, json)
Hash identifier:          jyr8CA/tEEX/BlDVsPG3KfVLBHb0c4VO2a1s4jKo5J8=
Subject key identifier:   E0:56:EE:A7:F0:20:49:C6:4A:EB:3A:D9:23:C8:57:69:78:BA:37:7D
Certificate issuer:       /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial:       010D0C9F4328584AEE2687749B7501BCB8D1AA20
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     36289
IP address blocks:        209.209.24.0/24 maxlen: 24
                          2602:fcb8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:87:74:9b:75:01:bc:b8:d1:aa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=6a1c3905-2158-45fd-9bb2-3c04679b41e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d6:fa:fd:a4:92:04:4d:02:ec:e9:23:93:cc:
                    62:e7:43:b6:2f:4b:52:fc:1f:eb:7f:ac:b7:d4:36:
                    6d:cf:d2:b9:9c:d2:ef:d7:78:77:fc:99:64:57:4e:
                    b6:42:50:f1:ea:e8:e8:73:35:94:b5:95:75:f0:ea:
                    fe:2e:02:d4:ea:ce:e9:7d:89:b8:94:27:86:e2:4c:
                    74:ff:64:20:e1:9a:96:76:db:80:44:32:0d:92:c7:
                    12:40:34:43:14:85:03:c4:75:c5:fb:be:b2:85:a4:
                    bb:14:7a:98:ec:4d:cd:93:9c:22:64:70:31:78:4f:
                    f8:b9:f6:b1:a3:4d:3b:dd:de:2b:da:5d:70:df:a5:
                    d8:75:66:93:f4:c7:e9:98:87:8d:c4:65:92:54:16:
                    7a:d5:f5:a6:98:cc:1e:b0:9f:b3:57:7f:3b:fc:7e:
                    73:c5:99:5b:73:44:61:3a:03:36:0a:24:01:9c:4a:
                    81:97:2c:c6:46:ba:28:88:9b:6a:bb:5b:cc:8c:71:
                    48:b3:49:89:9b:b9:7c:32:b0:89:eb:c8:2c:cf:d5:
                    a3:cb:d3:38:cf:db:6f:93:e3:a5:7c:6e:21:13:e3:
                    a3:53:6c:f1:7d:9b:44:10:02:d2:23:5c:39:e4:44:
                    05:d6:db:6a:33:a1:d2:2e:a2:13:e9:f5:af:d5:21:
                    57:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:56:EE:A7:F0:20:49:C6:4A:EB:3A:D9:23:C8:57:69:78:BA:37:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl

            X509v3 Authority Key Identifier:
                keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.24.0/24
                IPv6:
                  2602:fcb8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:70:a8:0e:b2:5e:58:17:a3:5a:38:9f:d7:fa:bd:e6:39:82:
         b4:d6:23:64:12:31:47:2c:68:39:56:e2:a8:71:a1:a0:ec:e2:
         91:d9:0c:1d:47:b9:22:1c:ce:24:d1:45:8c:6e:f9:9b:ac:3b:
         60:6d:77:5c:16:de:02:dc:c8:28:a1:e4:20:8e:78:74:a3:b9:
         70:c7:79:6e:04:b3:ea:0b:e1:7c:05:de:17:01:77:2f:9a:3b:
         fc:34:a1:b6:5a:60:8a:8d:aa:8c:07:5d:87:bf:d3:b7:d6:24:
         00:b1:28:67:e3:f6:20:a4:b4:28:5a:c4:4e:d7:f6:2e:e5:ce:
         20:f3:50:86:8c:9c:75:85:79:b3:63:d5:3e:2f:56:ed:22:2f:
         ff:76:a7:95:7e:14:53:9f:d7:04:b9:b5:76:c3:10:f7:f7:8f:
         70:23:41:e1:5a:06:cd:18:a2:91:73:32:ed:e8:5d:69:93:2b:
         fa:1c:98:58:da:1f:f0:d2:2f:21:ce:54:32:1f:49:8c:d1:d1:
         00:9c:cd:de:95:90:5f:c1:17:93:0b:a9:0a:08:fa:8d:c1:7b:
         a1:74:a8:f4:6d:7c:5c:fa:f0:43:d0:86:39:11:83:e3:70:99:
         54:1e:0f:86:53:95:99:7d:0c:62:42:f1:02:ea:80:70:29:c6:
         9a:d9:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:45 2025 by rpki-client