Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/e0ad02ad-c7e8-32b7-9d0e-27331210f939.roa
File:                     e0ad02ad-c7e8-32b7-9d0e-27331210f939.roa (raw, json)
Hash identifier:          9RjJOYpdP/Vm+awZUHhWmKNVp2vpP8LXgF900VFEETk=
Subject key identifier:   16:0F:AD:E5:11:6F:1D:A1:A4:9C:EE:8B:40:25:53:8A:ED:37:4B:DD
Certificate issuer:       /CN=69182550-6727-45f4-8b5c-c13c70b39cf9
Certificate serial:       010D0C9F4328584ACE0BA257C74FB4BE512FFE80
Authority key identifier: 7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/e0ad02ad-c7e8-32b7-9d0e-27331210f939.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        207.207.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a2:57:c7:4f:b4:be:51:2f:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69182550-6727-45f4-8b5c-c13c70b39cf9
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=df5690f6-6dc8-400b-9aff-67cd01c54c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:2a:18:e4:c2:f7:be:18:d8:04:17:47:fe:
                    46:12:9f:fe:e5:67:bf:52:2c:fd:a0:24:a5:98:7e:
                    ee:b3:60:7e:d3:ba:15:a1:56:b2:3d:cb:8f:54:b8:
                    c9:a6:3a:81:d9:6a:a3:c1:62:16:d7:3d:e0:f3:c7:
                    df:a7:17:5c:4b:dc:1f:00:b5:29:67:57:b2:04:7f:
                    0d:80:9d:25:4f:05:00:18:1a:2b:ed:f6:f9:46:8c:
                    90:d1:91:c6:36:e3:8d:17:01:15:5a:9a:00:ad:4a:
                    b8:c2:2e:8d:86:71:40:d1:ad:e6:28:82:db:46:21:
                    3e:ae:03:45:11:5d:7a:1e:ea:ec:25:3c:96:d8:ee:
                    05:45:ef:8a:b4:3e:05:ef:18:94:e2:5d:ff:7c:73:
                    1d:4a:02:3a:42:d9:b7:19:db:a7:fc:66:41:41:4e:
                    58:fc:cd:62:d3:1f:da:ab:d9:7b:57:0e:fe:39:f8:
                    b1:f1:c3:ad:8a:ff:83:b2:0b:f6:95:88:d2:3b:5c:
                    87:ec:84:cc:86:eb:01:f5:d9:7c:c1:e2:fd:ab:1e:
                    12:9f:39:7a:d4:41:11:07:06:e9:9b:06:d7:1f:8e:
                    ea:8a:99:28:0a:3b:65:41:a8:fd:5a:dc:a0:3d:c1:
                    e1:c5:cb:3a:32:7a:22:bd:51:22:29:d5:a8:42:3e:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0F:AD:E5:11:6F:1D:A1:A4:9C:EE:8B:40:25:53:8A:ED:37:4B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/e0ad02ad-c7e8-32b7-9d0e-27331210f939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:55:47:92:dc:4a:bd:16:5e:96:c1:48:70:c3:14:b2:05:
         6b:e6:3b:07:b5:c6:94:98:86:ad:e7:05:ea:08:c8:e4:3d:7a:
         22:43:18:c4:18:3f:7e:98:7a:d9:ff:7f:1e:f6:61:20:c6:58:
         e7:1b:16:3a:ea:f8:3f:90:34:26:df:9c:ba:09:f9:7a:d7:cf:
         75:09:3c:b9:f0:a2:94:c4:7a:6a:c2:58:37:ee:15:a4:26:a0:
         a6:51:9c:03:e5:03:7a:78:41:3a:f4:49:5b:d3:90:0d:13:53:
         78:1b:e7:9e:fd:48:8e:98:ae:ea:2f:5b:ce:b5:f9:c3:15:24:
         80:bd:8b:03:a0:71:6c:80:48:06:0b:07:95:4f:4a:74:12:5c:
         37:c6:44:2a:84:f8:47:a7:56:58:26:6b:cd:92:bd:16:c3:8f:
         e0:85:9f:45:8b:f7:46:04:a3:fd:e4:b5:6d:52:90:98:d0:18:
         e7:13:e7:e5:18:5e:e3:94:16:e2:65:63:7f:16:45:6c:91:3b:
         ea:05:f6:13:a0:53:e9:dd:7e:54:57:02:66:f0:f6:a8:b6:7f:
         f5:2a:c5:f6:56:bb:52:51:e6:34:7e:e2:b0:67:8a:f7:16:4f:
         3e:6d:5e:3b:62:03:1d:19:a2:bb:8c:90:46:36:51:8a:09:9b:
         c5:46:e1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:17 2025 by rpki-client