Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa
File:                     17a26018-a488-3d5d-9caa-dc7921400898.roa (raw, json)
Hash identifier:          5SN/N56pB3oEUhyO0AVZtzRjSiDPViJA64qRqQf9dXo=
Subject key identifier:   67:46:F9:94:53:85:9D:A2:03:93:D7:FD:2F:0E:8E:14:84:E3:9C:CC
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584A5335AB2C7E8C058D97B0AEBC
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     36184
IP address blocks:        209.191.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:ab:2c:7e:8c:05:8d:97:b0:ae:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=047239c4-6fc7-40c5-9af8-5233886db445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:a1:14:3e:6e:1d:6f:9b:9d:db:f9:5d:aa:
                    b7:9f:f3:a4:81:9e:e5:39:b4:6e:98:e9:71:3c:09:
                    87:f0:e1:fc:c8:0f:30:8d:80:d5:29:3a:7a:98:dd:
                    06:93:db:da:67:4a:11:7e:81:a6:68:7a:ff:28:c7:
                    1a:29:96:14:56:1e:31:59:48:d7:ee:1b:11:d2:96:
                    46:fd:18:44:39:e7:f6:19:21:20:99:e7:e2:65:a0:
                    a2:71:55:65:f7:49:36:14:e7:3a:09:31:88:9c:a0:
                    28:9d:85:4b:ed:b1:dd:28:99:5a:0f:64:2c:df:18:
                    84:b7:55:f9:4d:87:e2:0f:3c:d6:66:70:b0:3f:9e:
                    17:3e:2c:f8:3c:14:7e:fc:d2:8c:ad:7a:b0:a1:ed:
                    e8:0c:2c:aa:d1:37:65:99:6b:d3:1e:3c:42:87:84:
                    9c:87:51:3c:3a:9f:14:af:d6:cd:8e:e9:74:2d:10:
                    aa:99:f1:60:66:39:f2:51:2b:c3:fe:f7:3f:ca:9a:
                    91:fd:c3:e7:38:15:33:3c:55:39:e8:99:7b:4f:eb:
                    d5:f3:81:21:a4:e4:61:03:99:99:d6:44:05:86:03:
                    ec:7d:87:d3:c6:dd:be:72:2e:6d:aa:2c:27:b7:80:
                    60:93:d4:09:cc:9e:73:3f:06:8c:ab:75:cb:11:89:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:46:F9:94:53:85:9D:A2:03:93:D7:FD:2F:0E:8E:14:84:E3:9C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.191.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ce:b9:8a:bc:05:37:5a:dd:d5:7e:0d:0e:35:af:83:02:3b:
         8b:73:27:4d:a2:57:fb:e3:64:8a:1e:c0:ba:ea:1a:c7:de:a1:
         d8:f9:d9:c3:39:92:d2:f1:37:ca:dc:06:47:06:73:9f:42:d3:
         b2:f8:ad:90:a1:96:87:9a:43:2d:f2:95:30:12:71:05:c2:25:
         eb:3f:f3:7d:f1:3c:03:d8:0a:18:b5:a8:b4:92:1d:e1:92:31:
         13:03:2a:09:d1:0a:2a:5a:d1:11:b7:c9:f4:4d:08:fa:4c:f5:
         3c:b9:46:0c:03:2b:17:3f:ff:bd:59:8e:18:f2:b9:c5:ce:89:
         11:12:31:0c:d7:e7:2b:cc:81:6e:f7:25:39:b8:87:39:93:cc:
         08:d6:86:2c:24:91:a3:83:7b:a3:9a:25:71:dc:40:03:df:cf:
         a5:eb:cd:9e:e1:a2:da:4e:4d:56:1b:25:7c:1d:7e:21:c6:12:
         bf:11:30:10:9e:c1:40:72:fe:44:f5:a2:da:61:b3:64:6c:fb:
         d9:55:83:e4:10:03:85:96:cb:d3:13:47:fd:27:8e:b4:83:27:
         2c:db:86:a6:b4:a8:2c:3c:f1:b9:2e:bf:ee:d7:52:90:b7:28:
         12:a0:29:d0:05:6f:d0:4d:7c:7f:d5:6d:95:27:5b:f2:75:da:
         55:3d:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:09:07 2025 by rpki-client