Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/15d0827f-42d1-3848-8268-cbc1f6eeae52.roa
File:                     15d0827f-42d1-3848-8268-cbc1f6eeae52.roa (raw, json)
Hash identifier:          D2G0cQjU8ftq+ZNnoxWMxpw73oE5kcLniizqP8FkLak=
Subject key identifier:   6C:DD:E8:4C:CE:91:A1:BD:37:44:FD:6E:83:6F:5B:AE:3A:42:ED:3D
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B64CE0FAC4FE36E45E0427260
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/15d0827f-42d1-3848-8268-cbc1f6eeae52.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        208.117.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0f:ac:4f:e3:6e:45:e0:42:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=02a42b11-8f81-4fec-b4ed-c6a6764ce782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:e5:07:ac:65:61:d8:c9:db:9d:0c:2c:77:
                    9e:ad:e1:62:3b:51:3b:99:d8:cd:38:58:89:85:fe:
                    e3:ff:7d:1f:39:f0:96:1f:f8:2b:89:1c:5a:3a:37:
                    fb:50:2b:7b:a4:64:b4:85:98:84:95:24:65:2d:d4:
                    21:19:17:bf:fb:c6:03:0a:ec:61:05:38:37:22:57:
                    ed:96:ae:60:c4:ce:5d:51:e5:5e:e8:5b:40:e9:dd:
                    7b:79:8d:58:c0:62:6c:1c:d2:54:9c:c4:82:24:bb:
                    1f:a6:9a:50:22:b1:eb:d9:f1:a2:af:97:49:3e:4a:
                    60:ce:4c:c7:ae:de:03:60:7c:ed:61:ac:96:b0:95:
                    a9:16:f9:e7:e2:53:04:5d:30:c9:f4:fe:db:75:22:
                    d9:bb:dc:12:59:75:60:23:ce:8e:3d:d9:f4:1f:bc:
                    73:80:72:da:c3:24:67:8c:18:0d:4f:c5:75:88:5c:
                    73:76:65:09:67:64:c9:64:f3:98:cc:3d:ce:81:4e:
                    17:0a:2a:1a:4e:15:28:0b:78:48:60:24:3b:25:79:
                    30:68:87:fd:76:d6:44:71:a1:68:8e:19:8b:ee:0b:
                    6c:d5:2a:3e:84:13:81:35:70:95:bf:48:ce:f6:2d:
                    27:1a:bc:85:81:67:e7:30:30:1a:1f:27:f4:0e:02:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:E8:4C:CE:91:A1:BD:37:44:FD:6E:83:6F:5B:AE:3A:42:ED:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/15d0827f-42d1-3848-8268-cbc1f6eeae52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:93:c3:be:05:de:2a:3f:49:a0:10:90:1c:ed:8e:c1:02:5b:
         67:6b:e3:80:1a:3e:61:2e:a7:c6:47:1d:6e:22:2e:bc:9c:b1:
         ae:ae:0b:8d:a5:de:6d:f7:99:76:2e:29:e4:96:31:3b:ee:a6:
         fb:76:39:b1:f9:06:27:37:69:5e:b3:92:e6:78:c8:c6:69:6c:
         f8:0c:0f:82:f2:18:02:fb:30:f7:31:ff:5f:8c:89:68:69:80:
         fa:79:21:d0:1e:9e:47:60:8a:48:7b:f6:2f:1c:5d:e2:09:d4:
         ae:8e:50:78:90:b5:fe:69:75:0c:03:fe:7a:e7:19:d6:52:f1:
         e9:7b:b3:05:eb:50:ab:bd:5c:68:c8:b8:86:6c:6f:42:1d:a5:
         17:79:29:21:f1:c8:2e:9c:d1:20:c6:52:6e:2e:2d:13:23:6a:
         34:c3:47:85:19:1a:48:45:c5:6a:50:4a:90:fc:05:e7:0a:dc:
         01:19:9e:a2:5f:f2:93:14:7e:6e:88:47:0c:bf:90:5c:54:23:
         8b:a7:28:47:87:41:53:ec:b0:a8:d0:7f:ef:d8:9b:e9:2c:d7:
         13:21:69:61:ee:11:ce:d3:8e:9b:b1:fc:1e:82:b8:38:5f:6f:
         67:6b:a1:0d:c5:3f:c7:7a:f4:20:e8:b6:58:8e:13:3b:0d:07:
         44:8d:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:13 2025 by rpki-client