Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/d24a875b-6508-38d5-bc33-a0aed9e67e9a.roa
File:                     d24a875b-6508-38d5-bc33-a0aed9e67e9a.roa (raw, json)
Hash identifier:          e1cn1XVEWp4w+IyEfdAk8OiyDZvZNmAYTV2WKvJ1CEg=
Subject key identifier:   1C:77:19:BD:BE:86:1C:1B:8E:61:69:46:3E:8B:AD:75:DA:41:63:47
Certificate issuer:       /CN=8eadffea-7ae3-46a5-afb6-3aee3190a76d
Certificate serial:       010D0C9F4328584B434C5128D1379033E3B796C0
Authority key identifier: 0E:FB:0A:1B:F9:6F:6F:F5:DD:7A:77:98:29:40:51:63:C1:E9:09:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/d24a875b-6508-38d5-bc33-a0aed9e67e9a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     63046
IP address blocks:        209.135.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:51:28:d1:37:90:33:e3:b7:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eadffea-7ae3-46a5-afb6-3aee3190a76d
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=3f36db01-1185-4000-9331-1431a674a7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:1e:74:e3:84:90:67:91:fc:0f:4b:45:09:
                    92:5d:2f:a9:a6:5d:e7:1a:fa:21:21:31:f2:cb:fc:
                    0b:ed:dc:7e:1f:2f:d7:0e:6f:bc:a4:af:b2:4d:60:
                    b1:26:5c:3d:37:b5:ab:e8:8f:0a:12:05:91:e2:8b:
                    e9:ae:5f:93:4c:6c:b0:54:5b:15:5b:3f:f8:c0:66:
                    0e:57:df:bd:04:e3:d8:65:e3:e6:6c:a2:d5:f9:c3:
                    14:05:3e:57:55:26:48:32:67:df:a0:2f:4a:43:94:
                    26:34:b9:f3:f9:32:94:cc:ee:b2:08:97:49:ff:33:
                    36:dd:fd:13:7e:9f:13:58:93:23:38:a4:1f:4f:4c:
                    9d:a5:34:ce:96:94:d7:70:45:94:d8:c1:2f:6c:b6:
                    e4:9b:44:22:81:9b:ab:ae:e8:f3:5e:bc:6c:67:ec:
                    17:cb:e0:cd:39:8e:61:d6:2d:bc:94:81:b4:42:d0:
                    86:22:fa:ce:fa:12:e3:6c:c9:35:c7:33:bb:9b:0b:
                    ff:4b:a0:6e:38:12:0a:b9:4a:5c:7d:6e:81:fe:40:
                    0f:85:46:2d:a3:7b:8c:33:20:55:00:19:e9:55:5e:
                    47:cb:3a:25:b4:f6:21:0f:cb:a7:45:77:73:41:5f:
                    9f:6d:52:53:0a:8f:82:d0:0a:79:d3:97:76:7b:f0:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:19:BD:BE:86:1C:1B:8E:61:69:46:3E:8B:AD:75:DA:41:63:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/d24a875b-6508-38d5-bc33-a0aed9e67e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.crl

            X509v3 Authority Key Identifier:
                keyid:0E:FB:0A:1B:F9:6F:6F:F5:DD:7A:77:98:29:40:51:63:C1:E9:09:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:7d:f0:68:b2:6e:4f:36:55:80:63:3d:a7:8a:a4:17:a8:
         21:f7:2b:fa:05:44:f4:38:5b:87:0b:26:09:48:cd:40:98:09:
         8b:39:47:a2:6a:18:03:41:5d:b2:3d:05:50:2a:cc:07:b8:3d:
         03:0a:b4:86:8d:25:44:09:2e:24:e4:f7:a0:80:f0:e1:dc:2b:
         4e:5d:6a:18:da:ee:c6:3f:80:0e:8d:96:11:a6:b1:f1:97:70:
         57:33:fc:00:68:1d:cd:76:5b:13:a2:7e:74:d2:4f:ba:66:fb:
         2d:fe:6c:d2:fd:c2:14:b4:20:21:e0:ea:fd:cb:77:a7:7c:ff:
         d1:90:0a:50:63:98:f9:7f:8b:ad:ef:85:97:bb:92:bd:a0:ae:
         6e:b5:36:45:03:ea:9b:6b:dd:2c:c5:4d:1e:fd:7d:8b:68:5a:
         ad:88:91:ba:99:04:18:f0:71:1c:db:29:1e:dc:03:46:6b:c4:
         c5:f1:ff:c7:7c:03:7c:5b:e6:a2:ff:eb:85:77:20:d3:16:b8:
         44:89:5f:f8:97:c5:73:ce:60:8a:ed:ef:a3:03:ca:c7:dc:31:
         92:c3:65:be:47:76:6e:4a:96:6e:b8:9c:2b:c3:1f:90:08:a2:
         af:0e:ee:4d:b0:ee:83:d8:4b:0d:d6:0b:b7:d8:55:00:9c:db:
         e7:8b:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:42 2025 by rpki-client