Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa
File:                     d97c6262-79f0-356e-8ec4-b007e9292f02.roa (raw, json)
Hash identifier:          k8ufwb0JIgfhDLGAAZkhCD7VrORn4CKNQ2yymWwWwqM=
Subject key identifier:   C1:9B:17:A3:FA:E2:60:7B:75:61:6F:D0:F6:2D:30:B2:BA:01:2B:2E
Certificate issuer:       /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
Certificate serial:       010D0C9F4328584ADD6670EF9ADE579B21BBC898
Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        142.9.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:70:ef:9a:de:57:9b:21:bb:c8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=6f9f5718-74ea-459a-8d53-1a496d3f16f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:52:45:6e:6f:d8:b2:ca:fe:3c:21:17:c8:
                    27:0e:3d:5d:8c:8f:78:7f:2e:3a:f9:c2:b8:7c:db:
                    96:de:12:b9:68:9e:e3:96:3d:bc:df:88:00:30:92:
                    19:15:34:97:bf:3a:a5:02:e8:f9:d7:97:cd:33:bf:
                    6d:37:a0:70:19:13:fa:f9:52:4a:8a:fa:7b:5c:47:
                    1f:c7:ef:57:eb:1e:71:e1:76:72:47:16:8e:c8:e8:
                    ff:79:03:50:02:9c:69:38:b6:c5:e5:fe:fa:a8:d5:
                    bd:11:63:a8:77:4e:5a:db:b4:7a:69:24:8e:1b:67:
                    70:0a:1c:4f:09:1a:89:08:15:b3:7a:00:bd:21:92:
                    dc:28:96:79:d8:81:98:3d:ff:00:79:24:fd:22:66:
                    fa:ee:73:89:0b:28:08:a5:5e:6f:f2:7f:c3:4f:3d:
                    0d:d9:d7:88:d8:57:38:5a:97:e7:36:dd:63:cf:33:
                    23:d9:21:cd:d2:38:7a:ff:b5:6f:e3:b4:40:81:07:
                    d5:47:30:4c:4f:a0:cb:eb:4f:a4:7b:07:e8:5b:7a:
                    d3:47:40:ab:aa:65:32:c2:e3:17:45:56:fb:ea:80:
                    a3:b5:95:a0:28:19:97:6a:a3:de:33:27:63:41:cc:
                    24:cc:db:eb:ff:37:4e:30:ef:5b:14:ed:00:cc:98:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9B:17:A3:FA:E2:60:7B:75:61:6F:D0:F6:2D:30:B2:BA:01:2B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl

            X509v3 Authority Key Identifier:
                keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.9.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:09:7a:f8:82:16:40:1d:bd:b8:11:91:2d:04:4c:c7:50:66:
         53:d0:ad:ab:1d:ab:b3:ec:91:34:bc:ae:1e:fd:77:07:54:0b:
         83:9f:ac:5e:86:18:28:fc:07:41:26:58:93:09:83:5f:21:09:
         a8:f6:e9:c4:11:e1:0f:44:4c:9e:55:ec:c4:51:e2:31:b5:b2:
         35:1a:4f:bb:5e:21:51:9c:ac:95:b6:8d:a6:88:93:8e:a5:0f:
         55:6d:d4:72:12:a2:d6:36:a3:18:f6:30:ab:d8:c3:39:c6:1a:
         7d:c7:73:bc:4f:ff:25:70:7e:01:34:f3:1c:a2:76:b1:2a:4c:
         11:c0:68:ac:f4:45:ad:ae:7d:b5:8f:db:41:36:ad:d4:8d:d9:
         f0:63:77:81:e7:11:07:d2:4a:8d:1e:2d:64:9c:f2:12:6f:e9:
         fc:66:dc:fb:74:e2:ad:86:1f:89:a4:f8:ca:10:a1:7e:7b:0a:
         09:79:08:86:5a:8b:9a:f0:88:c1:0b:d4:c5:0d:75:e1:a9:18:
         ec:96:f4:9b:b5:2a:ae:6d:97:a2:77:c6:6d:55:8a:12:ef:a3:
         4c:68:ae:d5:56:22:26:92:c0:a7:8d:ce:db:ba:aa:85:48:31:
         9b:d1:11:b1:33:8f:d8:8f:a7:4a:ce:6f:6b:c5:af:77:ca:ed:
         b1:a5:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:07:35 2025 by rpki-client