Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa
File:                     6326754f-fb2e-3c8f-b430-f0e8b4107969.roa (raw, json)
Hash identifier:          YNdqHLFdvOp27QMRts1SAf6FyfVbunL9Jk1QRnvRvaI=
Subject key identifier:   7D:BA:27:5D:DF:1B:7E:9F:F3:53:0E:8F:43:EC:E3:80:55:53:E7:9C
Certificate issuer:       /CN=5b640257-7947-43c1-997a-0af58a465bdc
Certificate serial:       010D0C9F4328584B92DCDE99B74316110A6F3D40
Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        209.209.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:de:99:b7:43:16:11:0a:6f:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=326d065d-4df3-49ed-9131-a1fe3858c78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:56:cb:11:ab:f2:23:2c:37:76:87:be:9d:
                    66:ee:bf:90:97:f1:cb:2f:5f:e8:6b:0c:5c:cb:a7:
                    a2:15:3c:e4:71:7b:09:d9:3d:84:c6:89:0a:20:9f:
                    35:43:53:f4:7f:fc:47:71:db:b4:09:d8:25:b3:e9:
                    d9:57:13:41:4a:90:63:e3:56:c4:18:7d:8f:14:35:
                    9d:5a:98:61:c5:68:55:1f:e3:dd:68:c0:73:3b:c7:
                    c3:ba:09:14:e2:13:a8:0b:d6:33:fe:78:d1:d4:90:
                    93:9e:5d:a3:c2:6e:1a:fa:5a:f6:ad:69:b7:fd:6a:
                    9b:92:bf:2b:a9:e3:f5:a6:33:37:10:17:ac:9a:a2:
                    61:35:b2:75:b0:a1:70:84:be:e5:92:85:8e:3a:c1:
                    02:e3:be:21:c7:76:d9:8b:59:3a:80:5e:38:ae:bf:
                    5d:2d:5c:58:ae:75:67:ad:76:c3:52:2b:cd:fc:dc:
                    9f:7a:8f:04:92:f6:87:22:30:d0:f3:46:0d:3a:08:
                    1f:22:1c:cd:cd:f6:c6:5c:10:d1:78:ba:c9:fa:6f:
                    29:3e:6a:54:98:72:d9:2e:aa:8f:de:3c:2e:d0:5e:
                    d3:9a:93:f0:f4:44:da:33:42:a2:29:90:00:d7:e9:
                    b3:ae:25:c5:88:72:f3:c5:68:9f:3a:1b:7f:c0:4d:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BA:27:5D:DF:1B:7E:9F:F3:53:0E:8F:43:EC:E3:80:55:53:E7:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/6326754f-fb2e-3c8f-b430-f0e8b4107969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl

            X509v3 Authority Key Identifier:
                keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:96:2f:6c:eb:d9:9e:fd:a3:53:20:7e:97:75:1d:83:0f:
         09:c2:d2:c5:af:ec:58:e1:64:63:7c:4a:6d:63:7b:28:91:8d:
         8c:cf:24:1e:86:c9:30:04:c2:f7:0b:a0:16:b9:8c:dd:d4:8a:
         60:75:7f:c8:42:19:3f:89:ce:d8:de:f0:0c:bf:d6:f2:67:87:
         5c:a8:4e:3a:c8:86:68:07:18:e2:b2:f0:88:a0:ed:45:b9:96:
         a1:51:f0:31:91:a1:da:c4:6c:5b:3d:a3:b7:dc:79:dc:8f:f5:
         13:53:50:63:dd:3d:87:1f:43:72:5b:a0:12:ae:15:c3:9c:1f:
         1b:ad:13:fa:05:9a:13:f4:fc:d2:12:dd:83:0f:fa:29:fd:04:
         56:16:ac:9a:19:96:b9:97:04:b8:42:43:e7:d8:27:df:a7:bc:
         18:ae:3b:c9:9f:8e:b6:4f:e3:4b:4b:bc:2c:94:09:5d:fc:09:
         1c:cd:1e:62:4a:08:c0:69:ce:0d:b7:f7:24:bb:73:97:2f:ed:
         be:3d:d1:32:0b:2d:62:e8:0f:9a:e6:7b:d6:ab:d0:50:d5:57:
         2d:f8:85:e5:dd:88:9f:95:92:fd:8f:16:2c:88:f7:6e:4e:93:
         4e:f7:51:63:df:eb:88:a9:86:fe:cc:02:ed:e4:20:9a:6d:f5:
         da:25:88:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:44 2025 by rpki-client