Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb8d36e9-7100-333a-ad6d-487a68661d9e.roa
File:                     bb8d36e9-7100-333a-ad6d-487a68661d9e.roa (raw, json)
Hash identifier:          UvFtwR2plnXaXcqnfli7c2Liznc9BPpPiLcmUI0WnUY=
Subject key identifier:   6D:D4:0B:63:34:6B:86:F8:62:6E:B3:3B:94:EA:C9:5B:DA:E0:CD:91
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584AC710EE2CED8F7F2498B47EC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb8d36e9-7100-333a-ad6d-487a68661d9e.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     271
IP address blocks:        142.231.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:ee:2c:ed:8f:7f:24:98:b4:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=1d3ed7bb-f980-4669-b3e5-eb12da6a8613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:41:bc:22:84:b6:8c:2a:c8:b7:3f:01:25:
                    ea:40:b5:98:0e:4d:92:84:c0:53:65:f6:8d:38:a3:
                    0c:58:3a:b5:a2:f8:ac:2b:74:fe:c0:1f:89:7c:39:
                    29:99:e0:89:dc:56:8f:f2:b9:53:79:eb:17:2f:10:
                    79:f3:71:7c:99:1e:b3:af:24:d1:d1:98:e7:86:ce:
                    ee:a5:5b:7d:94:17:55:21:94:e3:ea:bf:14:ff:92:
                    3c:2c:0a:10:72:81:51:e3:fd:2e:f3:58:bd:e7:e3:
                    16:df:e3:c6:d8:45:3d:7b:27:08:44:06:c1:c4:1b:
                    3f:49:8c:a5:ea:db:f5:0f:c7:a6:86:4a:dc:b0:53:
                    47:00:24:54:07:72:e4:d9:01:17:25:71:e5:29:88:
                    17:09:08:3b:58:1f:f8:0d:bd:82:02:84:78:1a:96:
                    0c:1a:cd:ef:7e:2e:be:60:e9:ce:66:54:e4:8a:42:
                    ce:78:97:60:0e:42:25:33:1c:a7:35:66:c0:82:22:
                    d0:af:6e:9f:fc:4f:0f:72:21:01:0e:1f:8a:17:f2:
                    62:7d:35:31:af:a7:2f:12:2a:8a:92:66:c8:4e:e6:
                    86:35:8f:67:85:df:50:d8:f3:e5:e4:0d:de:9d:45:
                    c9:81:61:1b:ef:8b:d7:42:28:79:4d:fd:c2:03:af:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D4:0B:63:34:6B:86:F8:62:6E:B3:3B:94:EA:C9:5B:DA:E0:CD:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bb8d36e9-7100-333a-ad6d-487a68661d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:30:31:30:02:a2:83:c2:3f:ac:14:f3:78:c2:02:99:b0:
         17:53:39:b8:1b:59:6e:ce:bc:d0:ed:01:dd:e1:7f:fd:cf:1c:
         d5:96:3e:49:9e:7d:ed:09:67:93:28:6e:32:97:5c:f2:97:8e:
         b6:83:0e:65:85:16:85:c4:5a:b8:87:3a:d9:45:0f:aa:c6:78:
         3c:b6:41:57:01:79:08:36:b8:5d:e3:ed:fe:cf:f1:38:dd:c7:
         49:7c:e0:fe:fa:56:54:08:0e:e2:4f:a2:40:f6:a6:88:6e:6d:
         66:f0:de:4f:65:85:de:4a:f7:7e:7b:1b:95:c8:c4:ee:e1:75:
         b1:ff:41:e7:a9:30:33:2b:e8:3c:68:9d:a1:13:65:a3:26:35:
         ab:ee:66:be:c9:11:b2:fa:94:26:03:99:34:f4:28:24:84:99:
         33:47:7b:d1:66:b5:c7:10:53:c7:55:e2:5a:5d:13:60:a8:37:
         f0:d7:b8:d1:0a:8e:78:86:23:cc:d4:03:7b:23:48:bc:d3:be:
         b2:76:38:c6:e5:a6:05:b9:42:ed:98:e9:eb:45:c8:fa:2f:94:
         5b:d6:6e:80:59:82:22:50:5c:30:5a:5c:30:5c:de:0f:16:f1:
         51:f6:7b:bc:24:75:a1:aa:4b:a2:6a:94:74:d0:57:bf:8d:3b:
         af:c9:1f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:58 2025 by rpki-client