Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/77bff48a-9eea-3b6a-a1d5-dce2b1ad73ec.roa
File:                     77bff48a-9eea-3b6a-a1d5-dce2b1ad73ec.roa (raw, json)
Hash identifier:          mHFP+qJfdA2BR0ac7bu40m1/WkM832JcZwzgHpi8oRU=
Subject key identifier:   35:0C:2C:13:B1:77:CD:FB:F1:9D:02:46:EB:BE:95:44:86:78:4D:3C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F7841FC3F2F4625642C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/77bff48a-9eea-3b6a-a1d5-dce2b1ad73ec.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     23514
IP address blocks:        209.249.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f7:84:1f:c3:f2:f4:62:56:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=26549981-c61c-44ba-9352-074651049c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:11:66:ae:51:c7:e8:55:ee:98:a1:99:9e:
                    14:96:2c:98:38:c3:b1:ba:3a:71:b1:73:78:da:3b:
                    e0:2f:1a:21:4b:12:5b:f8:7a:02:b4:3e:a0:90:0c:
                    d4:c0:9c:da:bc:f7:82:48:40:b8:8a:95:70:7c:da:
                    bd:43:7c:55:6e:dc:12:48:fa:2f:64:25:1a:0e:3f:
                    f3:0c:5e:76:49:a5:f5:a0:55:80:f3:c7:94:a1:f8:
                    fd:30:3c:1d:28:6e:6a:7c:75:a2:81:95:9d:ab:fc:
                    82:3a:12:42:19:a2:7a:7f:ee:5d:ac:82:a3:bf:54:
                    8c:c3:4a:36:4f:03:52:6e:2c:dc:41:60:6e:4f:d9:
                    5f:d8:de:6e:f2:c7:47:c3:c9:9e:7b:08:60:08:e8:
                    0c:98:43:95:cf:19:78:41:61:38:4b:d4:0e:f2:3a:
                    37:62:0b:2c:66:93:de:9a:3b:2a:b9:bf:f6:cc:93:
                    c1:89:88:c7:7c:fb:c5:d1:69:68:c2:b2:99:50:73:
                    3d:96:11:55:bc:bf:5a:e6:71:c4:85:83:ba:66:95:
                    da:a4:45:6f:10:50:59:df:80:9b:2b:d0:7c:f5:2f:
                    0e:e1:e5:52:0f:a6:8a:6a:e2:5d:1e:42:46:bf:21:
                    aa:35:4c:74:96:61:d6:63:bd:9f:19:95:29:d0:31:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0C:2C:13:B1:77:CD:FB:F1:9D:02:46:EB:BE:95:44:86:78:4D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/77bff48a-9eea-3b6a-a1d5-dce2b1ad73ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:ed:a2:c7:4e:6c:9e:2b:ca:17:eb:3a:59:6e:ae:71:5f:
         79:70:b0:78:6d:84:5e:c6:40:da:33:64:0d:6b:68:ae:04:ef:
         2f:b7:39:22:d5:e5:f9:ee:69:60:d6:4a:59:06:97:6e:0e:0c:
         57:fd:9e:ac:34:62:52:b0:2c:cc:7f:8a:28:ad:91:a6:94:a7:
         07:2c:f2:25:8d:8e:9b:db:13:f7:d1:f3:06:52:b5:ef:1c:92:
         77:cf:4b:36:f6:2f:f7:9f:e3:4e:7e:9d:1f:97:f6:c0:8d:58:
         01:73:70:90:5b:52:0e:61:5b:80:f2:12:1c:c5:e1:eb:70:40:
         10:ed:4f:ab:ab:48:c4:0e:06:0f:e7:0b:66:d8:71:8a:de:20:
         55:02:b9:f7:c3:7f:bf:7f:87:56:ba:f5:81:35:6d:45:b4:ed:
         3c:13:d1:c4:ca:1e:c9:4e:3e:9e:02:ed:d3:25:9a:9e:ec:8e:
         3c:58:cc:1c:8e:6d:de:69:22:71:b6:10:2e:ec:03:b8:ee:0d:
         4f:80:8b:7e:8b:ff:aa:b2:4f:a0:da:0f:14:02:a4:a0:e8:b8:
         d3:f7:62:45:1b:52:4a:95:f5:d7:ce:d0:73:ed:67:dc:97:10:
         1e:4e:e7:91:7d:15:4f:52:ee:8b:24:ce:ce:60:a3:6b:3e:a0:
         0d:ec:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:40 2025 by rpki-client