Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5c09923-c604-3bdb-9501-1662e6734e69.roa
File:                     a5c09923-c604-3bdb-9501-1662e6734e69.roa (raw, json)
Hash identifier:          epNewiQw6x62ngauWBN4ZgQnK6qn6+9HOKs0lt/r8sY=
Subject key identifier:   3E:88:21:46:FD:3B:2A:B9:27:57:35:59:1D:50:3A:F5:F1:49:2A:F1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849E654F701B853873D564F1B00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5c09923-c604-3bdb-9501-1662e6734e69.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     17025
IP address blocks:        209.249.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f7:01:b8:53:87:3d:56:4f:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=35369bf1-634b-422e-857a-92ecef93fe5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d9:5b:ba:7e:85:f1:a3:c5:26:08:25:f3:a9:
                    a1:bc:87:b5:5a:77:5c:19:a9:d3:2d:0f:6c:fb:fb:
                    30:b0:9b:ca:89:6b:38:80:34:a4:56:c7:92:27:08:
                    f1:df:f7:90:14:8c:26:f7:77:80:d5:15:29:16:b5:
                    ee:4d:59:7c:66:7c:e4:25:66:44:7d:08:ba:48:5c:
                    12:e4:a8:3d:a5:33:24:8d:1d:b1:b4:f6:28:c8:64:
                    dd:25:c5:1f:a0:6a:be:fa:a6:af:a5:ef:be:d7:a2:
                    79:a7:bf:e7:b2:bd:06:2b:40:7d:26:78:53:74:a8:
                    14:25:0e:ea:b2:21:ae:0f:e7:c2:c1:5c:49:55:4b:
                    a4:e1:af:e0:f6:57:0d:c9:13:56:0d:1f:ac:a2:83:
                    9c:d4:a5:c1:3c:90:22:39:54:44:14:9e:02:9d:4b:
                    59:f3:8e:7d:37:07:12:4b:5c:c9:53:e2:09:1b:94:
                    4e:1e:bd:d0:11:0e:6a:d7:37:fb:43:e8:97:13:62:
                    af:72:c5:b0:68:9f:ac:7a:e0:b9:f4:55:fe:8f:44:
                    e3:e6:85:67:0a:33:1f:e1:68:1c:46:e6:13:b6:e9:
                    a0:11:92:91:14:09:36:9f:60:36:85:4f:d9:5a:c8:
                    a6:5e:24:c3:b2:a3:cc:90:34:91:4d:82:c7:0a:14:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:21:46:FD:3B:2A:B9:27:57:35:59:1D:50:3A:F5:F1:49:2A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5c09923-c604-3bdb-9501-1662e6734e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:62:58:00:86:69:39:25:d8:57:07:56:2b:1f:47:2a:97:25:
         ea:f9:6d:dc:8f:09:d0:a4:60:51:13:84:59:1c:e9:d3:b9:70:
         d8:ae:15:5b:87:ca:da:a3:c2:a1:b4:88:c3:cb:e0:b7:48:55:
         07:e8:d7:e4:2d:a7:ce:f1:8d:31:c1:7c:ad:d6:92:ed:39:e2:
         ec:ff:ba:6e:f9:b6:b4:b6:11:37:5b:10:00:6c:0c:74:fc:ab:
         2d:5d:66:f7:3e:69:68:a4:bd:3c:c0:7e:57:fd:17:62:82:4d:
         d5:9a:74:11:39:32:d1:97:c1:d8:33:59:c5:38:bc:23:67:f9:
         c4:fb:7c:c1:33:15:76:c0:ef:cb:91:b7:74:12:0a:26:9f:26:
         65:c3:7b:e6:f2:c7:61:1c:5a:a7:b2:45:03:d0:6b:04:f9:cc:
         99:76:65:4d:d0:14:b3:fa:28:c5:81:93:a1:68:47:61:10:7f:
         89:a2:aa:1a:3d:9b:02:ba:11:af:b2:32:5a:01:2b:d6:6a:f6:
         87:b6:a2:90:67:19:c7:b6:41:e6:36:86:f5:2b:e9:42:25:c5:
         6d:3b:07:5e:04:50:a7:eb:5b:cd:8b:ea:a2:2f:72:58:98:80:
         63:b0:e8:35:75:88:bc:9b:b5:49:71:30:45:bb:5d:29:bd:0e:
         c8:83:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:37:59 2025 by rpki-client