Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa
File:                     9996e972-6eae-3d44-ad69-6a057d20eca9.roa (raw, json)
Hash identifier:          AO4JezkTUto/hoVC+kNfrH0Rgy1X0jhXflXAUs4jzeo=
Subject key identifier:   AF:82:63:AD:96:9D:71:0D:2E:6F:0C:CE:55:D7:CD:F2:3F:76:F0:C8
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584A10353DD95E910E9875FD7F00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     18258
IP address blocks:        209.8.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3d:d9:5e:91:0e:98:75:fd:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=cd656702-4b96-4f8f-b0d6-3ae2c4fed3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:01:9d:86:8e:4a:cf:18:da:62:5d:72:88:
                    43:71:3a:11:21:d8:58:54:2e:65:be:14:a5:a9:8a:
                    70:ba:03:cf:cc:41:2b:23:ae:bc:d9:33:69:52:41:
                    df:65:d6:07:19:7c:3f:20:72:4e:06:05:5d:54:a2:
                    8f:ba:20:06:36:4a:74:41:c0:e3:e7:57:4f:fc:a2:
                    f3:7f:04:27:45:2f:39:7d:cf:0f:26:f7:1e:80:a1:
                    23:92:5d:70:82:7e:63:29:bd:2e:13:ac:30:b7:73:
                    ee:21:ac:74:1f:63:13:cf:91:79:55:53:53:f6:12:
                    43:8e:8a:54:59:89:e6:aa:5d:0c:05:00:58:a2:38:
                    93:84:5a:ff:ac:61:2e:6a:a5:4b:16:c8:b2:cb:4d:
                    33:16:8b:af:10:0e:b7:d3:1d:12:24:18:52:b2:3c:
                    78:64:8e:f7:03:36:14:d2:12:f5:b9:c6:99:24:ce:
                    66:87:3f:fc:29:41:92:e9:b0:b0:1f:90:94:ca:28:
                    c0:8a:25:6e:d2:f4:e7:90:98:24:52:a5:27:bb:32:
                    ad:c8:16:ca:3a:76:98:52:1e:c6:61:ab:e1:e0:95:
                    61:cc:19:80:7e:4f:cc:51:7b:a4:bb:2d:f8:9d:66:
                    c0:ab:e0:8a:05:73:3f:84:03:29:a4:4d:c6:ee:c0:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:63:AD:96:9D:71:0D:2E:6F:0C:CE:55:D7:CD:F2:3F:76:F0:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9996e972-6eae-3d44-ad69-6a057d20eca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.8.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e9:c6:b8:ec:e1:3e:92:17:b4:be:f9:81:b6:8b:f5:93:b5:
         ec:6b:2c:b6:7d:b7:aa:5b:e7:5d:05:43:2f:6a:30:ec:27:69:
         1f:d9:9d:94:bb:bc:27:ef:60:3d:95:69:f1:e0:84:aa:39:c3:
         32:c3:b1:65:18:0d:e0:26:30:f5:75:f6:f9:e0:c3:fc:8d:65:
         89:fa:d8:4a:77:6d:fa:c4:33:b7:89:14:19:cc:cd:3e:ca:03:
         56:f0:2a:68:70:9f:83:ad:80:a5:a3:ad:d8:d0:0c:63:de:64:
         93:13:12:6a:5c:60:77:a1:fb:78:64:7e:47:7d:53:75:52:4a:
         8c:2e:88:63:a0:2c:39:9f:9b:78:e1:95:38:cc:d0:46:f4:9b:
         1d:e4:49:65:70:0f:8b:c2:9f:e6:fb:74:03:94:d3:ec:e3:16:
         99:d5:56:90:3f:8e:12:cf:c4:9f:a7:35:1b:a8:26:c3:dd:ee:
         da:bf:6e:96:75:bd:e8:6b:b1:a7:53:11:45:a3:23:b7:96:ce:
         46:42:11:56:b5:49:16:e7:21:10:59:a7:1c:86:4b:cb:a2:39:
         aa:8f:05:e1:57:56:48:64:95:48:db:72:23:7c:a0:f1:93:67:
         5b:99:76:73:54:03:50:67:fe:91:30:c8:d7:4b:9f:37:e2:90:
         b1:ec:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:30:19 2025 by rpki-client