Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa
File:                     ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa (raw, json)
Hash identifier:          9TEOTnq9281aBSVyc20i4gEJWJRTF6MAqtECxP4hCi8=
Subject key identifier:   4E:FD:58:32:13:02:21:B2:9F:5C:44:AC:39:F7:E7:24:59:5D:34:7D
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584B64CE1A458820636C7911ADC0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        209.107.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1a:45:88:20:63:6c:79:11:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=125c7248-37cb-4176-8add-c0abe72a3902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:d4:0d:1b:9a:49:ad:e9:ee:f9:17:31:29:
                    c8:db:45:1a:f4:6b:84:20:45:14:ca:59:40:0c:4a:
                    48:cd:52:90:61:8a:1c:27:ef:fd:46:f3:b1:e4:29:
                    5f:78:45:e7:3b:72:6e:06:2d:fb:2d:94:bb:dc:78:
                    30:9b:76:91:8a:70:13:51:ca:97:6d:ad:df:7b:28:
                    3e:35:60:16:a1:c3:e7:ac:93:a9:53:79:6d:cb:87:
                    d3:06:ec:af:64:da:aa:ed:fa:8b:97:a6:81:9e:6a:
                    99:de:de:01:7d:9e:a8:a4:cb:df:e6:de:be:f3:63:
                    0b:b3:17:66:0e:18:e6:c2:9d:85:fe:b3:1c:d6:cc:
                    70:3e:89:9b:9c:11:b1:ee:3d:3f:4d:a9:80:4b:34:
                    5d:8f:de:f1:72:9f:14:a1:df:c8:c8:3a:38:69:26:
                    95:d9:0b:3f:d0:45:d2:b1:ac:25:77:d1:13:96:41:
                    7b:ea:a1:28:b2:0c:81:91:85:99:58:63:bf:01:55:
                    1c:f5:06:6c:ac:09:8b:10:d9:0f:62:9e:83:37:89:
                    85:e8:80:b0:d8:d4:45:7b:61:f8:36:90:45:db:4b:
                    d8:e7:01:54:dd:db:4b:41:0f:4f:b2:f3:4f:43:04:
                    8b:e1:f1:43:7b:52:33:e7:7f:7f:e2:a3:f3:0d:f8:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FD:58:32:13:02:21:B2:9F:5C:44:AC:39:F7:E7:24:59:5D:34:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed1e1542-18a5-3490-9ff4-59f63b39eb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:56:e9:76:3d:e7:21:90:be:28:af:6b:49:48:8b:89:5d:c3:
         55:31:4c:34:90:b6:9c:44:d9:36:fc:ea:10:17:7d:1d:3c:80:
         4b:34:7e:c3:b9:3e:66:ea:04:bd:6b:c3:67:63:6b:ed:23:ea:
         e8:a5:f4:1a:fa:d9:04:92:b2:2d:60:ae:d3:87:78:ed:8b:16:
         44:33:89:4e:85:0d:ca:9a:b5:ca:c6:4d:01:1c:74:4e:0c:26:
         50:a2:0b:a2:15:95:f3:41:fe:f4:53:47:69:c7:1d:b6:15:33:
         31:dd:c8:1b:f2:c7:22:d3:8a:d6:da:78:9d:2b:41:79:35:86:
         a4:1f:e7:fd:81:87:20:6e:0c:a7:c7:1f:f0:07:94:a4:25:1d:
         3c:05:88:14:54:eb:35:6b:c1:0f:f0:c5:85:f9:9a:f1:a8:0b:
         6b:84:22:c1:e7:57:e5:44:6a:ed:f8:f4:b4:77:99:eb:a6:90:
         a2:10:7f:31:72:06:1f:50:8f:c6:bf:ab:3b:66:03:f9:ca:d3:
         5c:d6:ab:91:60:53:17:91:82:bc:15:42:4e:48:52:ba:0c:4c:
         3d:b5:72:5c:4d:e3:1e:0e:05:78:d6:56:73:cf:e5:ee:8a:7a:
         fa:dd:a4:2b:0f:4f:df:0f:bb:07:3c:b2:66:a9:84:04:51:0c:
         e3:25:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:55 2025 by rpki-client