Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
File:                     a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa (raw, json)
Hash identifier:          dVSmFAM+jskt1muzOuZXK0/bR3Gq8WkoqbGDdg5qpRg=
Subject key identifier:   70:90:A8:00:83:93:9E:66:62:A1:97:F8:B6:DE:C3:FB:B2:DD:CB:80
Certificate issuer:       /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial:       010D0C9F4328584B4081A49E2F1516349538B200
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        198.204.9.0/24 maxlen: 24
                          198.204.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a4:9e:2f:15:16:34:95:38:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=6d4496af-3c85-4f16-8592-818ca9029d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:3d:72:ea:9a:df:f2:d8:4b:ee:65:94:15:
                    75:03:1d:ce:b8:fa:8f:eb:bc:a9:80:63:48:68:c7:
                    16:39:f6:44:04:fe:9e:c7:6f:9e:a1:00:c2:c4:27:
                    2d:b3:25:b1:01:c4:ba:fd:01:b0:83:97:d3:63:8d:
                    1e:f9:4c:62:10:80:3a:8c:47:19:4b:fb:2a:89:d3:
                    e1:ca:d3:f8:82:8e:0e:3d:67:9e:19:d0:0f:35:9d:
                    69:fa:c6:21:4e:6f:33:dd:8b:d0:17:d1:5d:ac:56:
                    0b:2c:e5:c0:cc:d0:25:e6:03:e0:5b:8b:e2:4a:6d:
                    0f:84:6c:04:bf:66:f9:3c:f5:f9:33:b8:b1:4b:f4:
                    a6:ed:a6:d8:0e:60:36:13:04:79:32:fe:23:47:b4:
                    ab:d0:66:c4:af:90:aa:b8:ff:70:f4:22:ae:c5:4c:
                    72:3d:d3:1b:0f:bf:c4:be:34:70:d5:6e:21:07:0e:
                    98:18:d9:a7:e4:12:92:9b:68:67:0f:d4:51:f2:a1:
                    e6:99:d2:b7:8e:cb:56:0a:05:df:e4:6f:8f:f8:5f:
                    ca:8c:92:4f:a6:f3:fb:94:0c:4d:72:4e:ac:31:64:
                    c1:fa:b0:4f:6b:b8:1c:66:c5:79:80:11:dd:12:f3:
                    2a:4d:25:fd:f9:e7:06:27:e2:0f:e7:8c:67:1c:80:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:90:A8:00:83:93:9E:66:62:A1:97:F8:B6:DE:C3:FB:B2:DD:CB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl

            X509v3 Authority Key Identifier:
                keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.9.0/24
                  198.204.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0b:fe:82:c8:d3:0a:d3:e6:71:bb:95:9f:a2:14:8a:3e:be:
         32:e8:42:be:c5:35:87:70:1c:ce:a7:e1:70:06:1e:8d:b9:98:
         4b:2b:fd:85:3c:f2:69:8d:13:f0:5f:71:93:07:6b:b6:15:02:
         35:de:f9:11:92:6c:14:80:54:5b:ed:66:90:90:5f:fa:0a:d5:
         82:08:28:d7:5f:b3:b5:6e:6f:c6:78:d6:98:1d:e3:1e:5f:d4:
         71:04:53:48:63:5a:1e:1c:6b:0d:bd:85:0c:94:4a:cf:57:55:
         27:d0:39:04:7f:01:13:aa:e1:9d:20:6a:69:29:5b:6a:37:3a:
         c8:98:a4:3d:60:29:c8:66:74:df:4d:31:53:66:ff:fc:06:82:
         e9:d3:ac:e8:d7:bc:f1:6f:34:d3:ce:85:db:60:66:63:89:06:
         b5:11:bf:4d:6f:a8:1c:5f:57:f6:1b:09:a1:f6:e3:41:8d:16:
         e6:95:0a:cb:d5:e5:b5:5b:4a:d5:84:17:61:39:65:5c:5c:a0:
         01:5a:ab:da:ce:71:d0:45:bf:24:4b:af:c0:e9:a3:78:96:91:
         ab:9c:16:c9:09:9f:6b:24:80:ca:13:a0:cb:80:8b:e3:5b:85:
         96:e1:89:04:68:59:1a:d5:b3:f5:08:70:89:05:e0:d2:bd:99:
         0f:ee:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:56 2025 by rpki-client