Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa
File:                     74295fbe-6636-37e1-8ba4-1835f48000f7.roa (raw, json)
Hash identifier:          NERwvi/xZ7Nnl95Co7zaa+esITByhYKgjeshcFXvllQ=
Subject key identifier:   19:8A:73:B7:68:B9:3B:E9:6E:52:D3:1D:12:5D:84:F8:7A:89:08:0C
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584B2CF6DC1D55C37AFD21FD0380
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     4760
IP address blocks:        209.9.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:dc:1d:55:c3:7a:fd:21:fd:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=504f497f-13ae-48b0-a6b2-db67a1fcebc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ba:1a:48:dc:84:32:6f:ed:b4:ac:70:93:2f:
                    b3:d6:12:2b:c9:1b:85:e4:24:43:94:c8:f5:57:4e:
                    a8:3c:9e:ce:bb:ca:7b:fa:39:d1:f6:54:75:ab:53:
                    be:0c:22:f8:46:90:2c:87:8c:29:4a:eb:80:73:25:
                    65:91:0c:16:0a:57:1a:2c:c5:da:95:4b:f2:a9:82:
                    dc:3a:6a:f4:7f:f0:56:6e:35:ad:47:6d:6f:55:f8:
                    3c:64:95:97:6f:4e:3c:8b:a2:78:7a:7b:f6:b0:9a:
                    ca:a5:5b:74:a6:59:16:1b:df:59:64:ac:cb:98:ae:
                    7b:b8:86:0c:b1:86:69:d7:54:da:8b:a9:73:b6:57:
                    93:ce:be:5b:42:a8:10:08:a9:85:0c:c0:96:7d:60:
                    00:97:f7:a1:75:7a:f8:51:90:5a:a5:42:17:4d:32:
                    0b:0c:59:3b:f6:dc:34:46:87:68:43:a8:57:ac:c2:
                    96:49:3f:67:92:a2:08:e9:b7:3b:e1:b3:f2:88:68:
                    01:e0:70:68:2a:54:76:f3:8c:a0:04:00:ee:cd:9e:
                    b0:78:3a:3f:35:1e:cb:9f:2a:3d:fc:e2:51:d6:76:
                    c4:78:b4:d3:7f:d2:7a:a8:e0:15:5c:da:80:20:71:
                    5e:e3:bf:34:3d:94:24:de:44:9f:6d:46:8c:b0:92:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8A:73:B7:68:B9:3B:E9:6E:52:D3:1D:12:5D:84:F8:7A:89:08:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.9.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ce:b2:dd:07:0c:fe:1c:0a:75:62:a1:79:34:db:65:cf:d4:
         dd:a7:83:03:79:a8:db:78:ca:f6:3e:28:24:66:db:93:80:7a:
         f9:b9:b6:1c:f1:e8:c4:d1:73:09:3f:a5:14:b0:1b:19:bf:c5:
         87:45:d9:5e:52:39:90:78:1e:67:87:00:b2:21:31:2a:38:10:
         32:86:52:46:18:b3:e4:49:ae:9d:2e:2b:02:7e:58:eb:38:f7:
         21:62:79:92:c1:df:fd:53:96:b8:6c:9f:f9:d2:6b:27:92:60:
         ba:f6:e8:ab:a4:ee:a6:36:f2:6e:22:c2:0c:37:23:41:3a:76:
         d6:83:48:da:9a:1a:36:14:ce:ce:93:8a:89:8e:63:5a:4b:65:
         d7:13:f9:8c:49:2b:74:c6:dd:a1:0c:89:24:41:d1:b0:9a:a7:
         b3:5f:12:67:ac:fa:d2:97:41:24:a8:5f:a4:d7:71:30:a6:6d:
         ce:1f:47:6c:e7:df:d7:72:5d:4b:29:60:ea:7f:f1:69:21:33:
         0c:a8:f0:19:82:1d:e6:28:46:c9:79:57:a2:c0:14:c9:e6:f9:
         53:bf:a2:4e:4e:50:a6:4d:3b:53:72:f3:85:8c:46:17:06:f4:
         a3:53:41:90:b8:a5:e9:f8:5c:ac:27:89:f6:38:47:7d:9b:bb:
         07:79:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:33:24 2025 by rpki-client