Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
File:                     fd7f83c1-f827-3297-a189-95647b2df8c5.roa (raw, json)
Hash identifier:          tWJjr0kM7MZ6wnCjxohAvJtL3G3lrY9S2T+tkBN9SCI=
Subject key identifier:   36:A7:A6:0C:2C:62:78:2E:91:47:E2:B8:91:AC:25:08:DF:4C:40:C0
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584AEE2694B6B56CE2A8CC60C860
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     213035
IP address blocks:        209.182.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:94:b6:b5:6c:e2:a8:cc:60:c8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=9773bcf1-bede-41a9-bd34-07b17c28aae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:d7:5a:b6:c6:62:2e:96:32:28:8f:ec:d3:
                    07:eb:81:1e:a1:22:6c:88:43:ff:93:ff:02:92:e7:
                    c9:06:f6:65:47:d3:00:18:ee:f7:bc:55:fe:ef:43:
                    b6:08:47:b7:0f:14:cc:55:7f:ac:b1:ad:77:90:10:
                    48:00:2c:33:04:65:15:02:d2:32:62:5f:87:8d:ab:
                    e3:a9:75:09:a7:e2:37:e3:aa:10:fe:b9:4a:d5:67:
                    09:9a:a2:a4:37:3b:8f:cd:eb:95:cf:74:32:0a:96:
                    aa:af:ee:6e:67:c4:d1:b4:c7:01:04:e3:36:5f:14:
                    86:5c:e9:dc:6a:2a:17:60:f6:c4:3d:eb:2c:cf:39:
                    d5:20:69:a9:90:42:0e:5c:2f:e2:1a:29:b3:28:bc:
                    ea:86:d0:b1:85:e5:c4:66:bf:25:ec:62:dd:ed:e2:
                    95:fa:c6:96:8a:8c:ba:22:6c:5e:2e:82:81:8f:fc:
                    42:b9:e4:3c:f4:54:20:82:1f:84:e9:44:03:30:94:
                    be:3b:31:6c:74:db:1d:42:55:12:f3:cd:db:c0:c5:
                    ce:1b:67:89:8e:32:e5:a9:52:ba:4a:4f:1a:b6:50:
                    0c:d9:36:9a:20:75:27:0a:d1:47:69:b5:7c:79:e9:
                    45:e3:d7:44:c4:26:57:50:41:33:27:fb:c7:c0:d8:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A7:A6:0C:2C:62:78:2E:91:47:E2:B8:91:AC:25:08:DF:4C:40:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:58:6b:32:b2:7d:c6:a8:cb:b2:6a:2e:59:34:77:2c:70:bc:
         13:c2:9b:94:ce:02:0a:ca:d4:7d:58:fc:fd:e4:0b:2a:c3:97:
         39:6c:fb:1e:19:72:72:4c:13:8a:2d:bb:80:25:05:d6:b8:65:
         df:70:86:79:77:62:9a:91:fe:d3:5c:c2:15:cd:9a:19:12:4c:
         4f:6f:ee:ee:c2:82:1e:7b:a0:10:73:0e:d7:a7:ec:6e:a9:80:
         28:c4:05:71:fe:ab:81:80:cf:8b:3e:ed:d3:79:8e:62:63:0c:
         2a:78:13:74:a5:5d:8d:07:8f:3c:94:d1:d6:9f:6b:f6:d6:f3:
         18:8a:3e:35:ab:a6:c0:ee:ef:93:c6:da:bd:58:c0:3c:06:a6:
         3e:3b:eb:a9:d1:f9:0d:99:11:dd:e8:19:9a:16:a1:49:ba:26:
         c4:f4:cc:30:3f:eb:52:49:76:78:17:38:03:22:ea:b3:22:cd:
         07:56:c5:d7:28:6a:0f:bb:00:41:15:89:b6:50:c3:a0:b8:8f:
         48:0d:23:5c:b8:0e:6f:12:9a:b9:0c:94:7c:38:68:85:8b:2a:
         06:18:18:dc:ab:da:d6:36:aa:ba:12:75:de:a1:4c:02:65:10:
         f8:d2:e1:4c:bd:96:c3:fe:47:f5:1a:2b:87:c5:5f:3d:ee:df:
         19:a2:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:43 2025 by rpki-client