Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa
File:                     f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa (raw, json)
Hash identifier:          xFTvkk1uG2uri9nNjSMMO3NJQdtQbPlFqZjvR3Ra9Bo=
Subject key identifier:   2C:F7:58:4D:3D:34:3A:8F:6D:A5:84:4C:2C:0B:5B:64:07:72:D9:5C
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584AE03112FFF98FCAB1795FAF80
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     400238
IP address blocks:        109.73.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:12:ff:f9:8f:ca:b1:79:5f:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=98301bb3-5766-42d5-a5c2-f773f7281f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:e6:02:15:05:0e:bf:e3:57:90:12:53:62:
                    c0:37:9c:b8:34:98:af:aa:b7:2a:7a:3c:5f:17:be:
                    b7:44:ea:11:1c:5b:b4:a8:ee:9f:7a:99:61:1c:ed:
                    b4:51:a0:a6:1f:9c:8c:2a:66:47:4f:6e:ec:79:93:
                    33:db:dd:0d:8b:fc:44:c0:73:a3:c9:0b:5c:17:c5:
                    08:be:26:65:9e:e2:5d:b9:aa:c9:a7:32:9c:1b:eb:
                    e5:fd:47:89:43:8f:9a:cc:c3:1b:f2:4c:73:52:c2:
                    9f:1f:d2:fa:e9:ea:96:9e:f0:0f:d2:fa:3e:d8:7f:
                    fc:89:8a:4b:e3:9d:3a:d4:9f:13:df:21:3c:5f:82:
                    bf:41:f9:3e:0d:85:4a:de:ff:ef:e1:9f:d6:c3:81:
                    ad:01:9d:a6:1c:10:eb:7b:b0:ac:c3:5f:7d:87:01:
                    9d:c3:30:2b:40:6e:eb:d2:e9:2d:bf:ac:bb:50:3a:
                    20:60:66:43:7d:be:13:9c:af:01:d0:11:cc:71:2d:
                    c3:72:53:54:12:8d:47:25:f8:f3:ca:6f:b3:61:7c:
                    c4:5e:df:b9:71:05:80:8a:da:75:3a:1f:4c:dc:e2:
                    83:64:6c:d0:ec:86:3f:cb:32:e8:1f:da:23:52:95:
                    cd:6c:d7:1e:1d:9d:9f:c0:71:36:a7:7b:6d:f2:e8:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F7:58:4D:3D:34:3A:8F:6D:A5:84:4C:2C:0B:5B:64:07:72:D9:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f9b7eb33-b9b9-3d28-8064-2e14559854b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.73.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:43:62:7f:07:cd:00:66:71:88:d3:5a:88:da:9a:a4:43:47:
         4d:cf:67:df:cd:62:07:32:40:85:c2:29:41:86:2b:ba:d1:3a:
         bf:ef:4a:82:98:8d:63:9c:01:57:c8:e2:5f:ff:1c:c9:01:a9:
         70:25:05:e0:0d:2e:d3:b4:0d:00:d5:be:b3:9f:23:b7:41:e2:
         99:91:cf:1e:e6:69:3f:3a:d8:69:cf:16:c7:96:1a:ce:e0:69:
         6b:fe:89:ca:e2:9e:ac:a1:c6:92:35:fd:1f:04:3a:3a:53:e9:
         b5:43:78:06:83:cd:90:72:56:07:2a:9e:ce:e1:9e:3d:39:71:
         66:64:1d:30:3c:ee:a2:0b:c6:9b:c3:4a:27:1c:ad:b8:41:03:
         65:62:6c:17:97:e8:32:03:07:bc:72:a1:0a:f9:b6:93:04:b2:
         24:2b:12:de:79:4b:ff:0f:ea:78:6d:53:2c:78:24:7e:41:24:
         14:a7:0b:78:fd:0a:12:f3:b9:a7:ec:13:8e:23:d0:97:1d:1a:
         55:82:45:db:b4:b1:86:59:69:88:bd:47:ca:65:b1:ff:43:47:
         cc:08:00:d7:a2:99:b7:2e:93:8f:eb:78:7f:e8:38:df:b3:d3:
         39:78:69:2c:b6:f1:ee:0e:4e:88:a5:4f:1c:4a:cb:76:be:ff:
         bd:c9:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:01:08 2025 by rpki-client