Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f4dfad-72fc-33d6-9d36-7379648d9fc5.roa
File:                     09f4dfad-72fc-33d6-9d36-7379648d9fc5.roa (raw, json)
Hash identifier:          fvlgSk3Ue2RKryPuOIZ15x7AAi5CQMAVOGiyhE5+/9c=
Subject key identifier:   CE:CD:0C:9A:58:AB:E9:65:A1:D4:1E:F8:33:51:21:A7:42:64:EB:26
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE03122D42D90C035A5D85980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f4dfad-72fc-33d6-9d36-7379648d9fc5.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     16625
IP address blocks:        184.26.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:22:d4:2d:90:c0:35:a5:d8:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=178820a2-bb69-4562-8c58-60d14e5ce773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:84:99:67:44:53:27:0f:5a:f9:2c:b7:6f:
                    3a:2a:53:73:62:4f:02:c8:34:f0:ab:99:6f:3c:60:
                    a7:ce:46:91:74:04:7f:c6:8c:7b:35:f9:85:aa:c7:
                    18:3b:6e:0b:f5:72:46:f2:d2:0a:32:62:0a:6c:fb:
                    3a:b5:c6:3f:bb:75:23:ab:86:bf:ee:28:f6:6a:c2:
                    52:fd:c9:ee:fa:c0:4a:a3:1c:78:85:bd:d6:6d:b8:
                    7a:fe:79:5e:70:36:85:ae:a0:bc:e3:c9:f5:a5:79:
                    8b:48:ef:cd:f7:ae:50:d1:a2:2f:51:14:64:12:39:
                    dc:66:46:0f:cf:61:11:b4:64:33:6b:0e:b0:f3:f3:
                    0d:a7:f7:cc:04:93:0a:60:90:8d:05:8c:23:03:66:
                    74:fc:a9:99:be:87:29:c8:de:04:a7:cb:58:e3:68:
                    f9:ee:fc:85:43:13:1e:71:90:ca:f8:4b:b3:45:cf:
                    62:77:51:12:fc:21:15:5a:02:4f:37:5f:4e:14:f4:
                    ab:d5:8c:11:70:33:c7:a0:d3:94:69:90:4b:1d:c7:
                    ed:ef:49:4b:d6:ac:3b:9d:87:ac:37:1a:6f:e8:3f:
                    7d:6b:18:f3:9d:0b:38:38:0e:39:4e:1c:e7:bc:62:
                    e5:7b:66:05:bd:89:23:95:a1:3e:d5:09:db:84:7f:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CD:0C:9A:58:AB:E9:65:A1:D4:1E:F8:33:51:21:A7:42:64:EB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f4dfad-72fc-33d6-9d36-7379648d9fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:e1:90:6d:f2:ca:aa:e3:09:1f:2c:60:a0:0b:64:5f:71:
         0a:59:da:bc:7e:8d:da:b8:ea:46:0e:1a:74:56:67:9f:b6:87:
         75:d9:59:82:33:7b:b1:ef:7d:98:e9:9b:77:55:a9:56:42:e6:
         a6:59:82:3d:28:3a:10:c5:67:58:e3:a6:95:cf:ea:ed:c7:7e:
         63:e3:41:e9:e5:d1:6a:08:da:38:08:30:6b:ff:1d:1e:20:60:
         c6:77:5c:53:6c:4a:29:c5:6b:6f:72:cf:74:1a:f3:b9:0c:b9:
         03:43:4a:4f:42:11:f8:6e:31:82:85:e8:b2:84:ab:5f:7c:90:
         1c:42:59:ba:91:16:54:8d:97:72:62:ed:14:ea:a8:87:d8:d5:
         a7:c0:87:e3:90:89:61:ab:d1:b0:dc:8f:9e:18:fe:30:c7:0e:
         c5:c5:ed:fe:7c:ee:cc:9b:cd:79:17:cd:64:71:04:a5:1e:2e:
         ec:d0:a7:c0:18:c8:e7:d3:99:3c:10:00:88:cf:d6:ad:12:54:
         62:43:33:a4:8a:db:2e:2a:f3:4d:ed:59:e1:5a:99:12:2e:06:
         9c:3f:e5:af:be:80:e1:44:13:ea:8b:8d:71:33:4d:4b:e8:54:
         c4:2d:14:3e:73:f5:b9:dc:ec:95:c5:a6:a8:9c:6a:45:3a:ef:
         d9:51:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:46 2025 by rpki-client