Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa
File:                     4f616f41-a307-318d-bfe2-bea18e4babef.roa (raw, json)
Hash identifier:          0koYgQVgx70Qi1gk1o0V9pQ++gJWQhkm0EnVqsOS59Y=
Subject key identifier:   7C:BA:83:EB:6E:75:D1:12:D8:3B:6F:0A:D3:23:D1:32:7C:77:D4:DA
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F4328584A8466F4A346D5451659177BC0
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa
Signing time:             Mon 14 Jul 2025 15:54:54 +0000
ROA not before:           Mon 14 Jul 2025 15:54:54 +0000
ROA not after:            Sun 12 Oct 2025 15:54:54 +0000
asID:                     26037
IP address blocks:        204.209.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:66:f4:a3:46:d5:45:16:59:17:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Jul 14 15:54:54 2025 GMT
            Not After : Oct 12 15:54:54 2025 GMT
        Subject: CN=9e4dcabc-0170-431b-8e70-cf8709f263a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:4b:c4:f9:43:01:28:05:54:13:14:74:a0:
                    95:bf:9d:45:33:6e:76:9c:ef:18:65:f1:03:b0:6a:
                    5b:a6:23:cb:6e:81:56:43:42:cb:ab:4e:a1:dd:bf:
                    25:69:9e:4c:e5:af:a6:b5:e0:f3:d4:2c:46:0c:6c:
                    eb:3a:51:7f:06:a4:5c:62:3c:5f:80:f0:3c:9b:e3:
                    ed:04:dc:46:f9:26:6a:50:b3:ec:e4:a3:1f:ce:6b:
                    b9:56:f4:57:c7:09:0b:7c:f2:ba:a7:d6:eb:16:82:
                    fb:d2:1b:c0:de:22:1f:38:b8:a2:bd:eb:2b:3f:4a:
                    bf:84:b3:32:7d:40:86:12:52:13:86:c3:5e:86:7b:
                    11:0f:94:05:4c:a5:fb:99:c8:6e:fa:c3:11:bd:10:
                    c1:14:b1:54:4e:8b:4b:14:20:64:89:d6:40:26:cf:
                    30:cb:5e:45:ff:5f:cf:e8:63:97:6a:fc:3e:39:4b:
                    e4:3f:f6:ed:e1:01:4a:8b:0a:71:e2:4c:2c:c8:ce:
                    55:5f:e1:ce:6f:a0:fe:82:e9:e4:5d:1c:b2:df:28:
                    af:58:30:76:e1:74:85:11:6c:dd:2f:2f:5e:9b:5d:
                    44:86:38:c4:9f:69:23:32:36:8d:7c:9c:85:81:40:
                    2a:8c:9f:9b:8e:ae:72:b2:cc:cc:da:fa:75:20:fc:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:83:EB:6E:75:D1:12:D8:3B:6F:0A:D3:23:D1:32:7C:77:D4:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:c3:c6:92:06:07:b3:0d:f1:01:ec:3b:73:42:fb:85:98:
         04:2c:b2:36:6c:8c:11:17:77:34:dd:5d:45:0a:85:a8:f4:f6:
         2e:cb:8b:48:e4:58:13:84:3f:eb:e7:1d:27:91:ae:72:3f:f7:
         46:61:ec:6d:3c:fd:b3:8d:73:d5:18:ce:c4:f2:3a:77:cc:c4:
         a7:40:dd:7f:5d:b4:60:e3:df:5a:b4:33:d1:7a:2d:95:9f:48:
         6d:f4:0e:a5:5a:59:d8:40:35:cd:fb:56:ba:dd:95:e7:06:f0:
         42:91:bd:ab:a9:2b:ab:1e:3c:bc:6b:b0:f5:40:eb:4e:d1:4b:
         09:33:d0:8e:fb:1e:74:0e:00:ec:f5:3f:ba:ad:b4:52:eb:2c:
         67:9d:15:16:c9:af:4f:d9:e1:28:6c:8b:16:5f:87:fd:fe:e8:
         2a:93:f0:d2:36:ea:e2:d2:5e:6d:e6:46:88:98:87:24:70:bd:
         ae:55:55:15:cd:b0:3e:91:d5:d5:79:b2:c0:31:9e:b8:c3:98:
         75:9e:1b:85:18:0a:31:1f:7a:7a:90:6d:4c:eb:f5:25:c1:68:
         98:37:72:a2:92:d1:ce:8d:03:20:6a:c7:33:8f:30:9f:2e:7c:
         15:a0:82:8d:8d:9b:6f:93:b9:f7:51:26:c2:51:70:20:fe:ec:
         b5:92:ec:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:43 2025 by rpki-client