Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa
File:                     f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa (raw, json)
Hash identifier:          9digTB60fRd7FbcPm/SidvzLOpvE3sgKXymEFbn5vso=
Subject key identifier:   11:4D:8B:ED:AA:48:06:B7:63:52:1D:52:D5:4E:38:28:DF:B9:17:2A
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584B2E5C4BC18B096E235FB8ED60
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     237
IP address blocks:        198.108.5.0/24 maxlen: 24
                          207.75.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:4b:c1:8b:09:6e:23:5f:b8:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=b788b311-627d-4745-855f-3334ad27fe5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:76:1b:60:ad:66:e8:00:b0:f6:10:74:54:
                    da:e4:8a:f4:65:66:59:f6:e6:07:da:77:cd:d8:1b:
                    27:73:5b:8c:6a:96:dd:20:1a:63:d5:c1:b8:56:40:
                    f2:5f:72:80:79:6f:0b:76:73:2e:ca:24:93:8b:28:
                    76:f4:fa:42:c6:c9:9c:fa:09:60:46:7d:be:ca:7e:
                    5e:78:2f:ba:11:9b:13:a1:e5:fa:f9:9d:c8:70:ea:
                    92:b5:ad:fd:7c:ab:5b:42:bc:71:94:be:43:b8:40:
                    7f:f1:4f:79:4f:53:b4:af:f5:28:4a:f7:b9:7e:54:
                    ab:49:70:74:f8:d3:0b:d9:7c:1b:e5:ae:36:5d:df:
                    55:3c:ce:84:e4:c1:7a:12:61:50:7b:5f:8f:3b:20:
                    b0:c3:42:40:ff:ed:6b:e0:e8:41:aa:b7:99:7d:62:
                    2f:1e:10:79:90:9e:b7:89:1e:37:a0:f9:25:47:c2:
                    d6:91:7b:77:a7:60:73:44:0b:88:ef:08:6d:12:08:
                    5f:18:eb:49:e0:4e:92:71:e2:94:ee:70:4e:d2:4f:
                    d8:42:d0:73:b8:b7:e6:4b:e8:c4:77:1b:0b:76:e6:
                    7b:d3:2a:cb:8f:a4:bf:97:49:5e:f4:7e:42:c8:0d:
                    17:30:1b:7a:68:45:94:37:9d:28:b9:35:d4:95:59:
                    b4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4D:8B:ED:AA:48:06:B7:63:52:1D:52:D5:4E:38:28:DF:B9:17:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.108.5.0/24
                  207.75.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:02:19:91:d6:f0:f2:16:6f:a7:2a:dd:6d:4a:5b:50:ec:4b:
         15:b7:23:19:2e:96:ed:6b:15:a0:45:f7:77:e6:f4:17:1c:13:
         b5:e3:f3:8b:95:cf:7d:53:f0:3a:0b:ba:76:51:f5:67:38:ab:
         74:c2:ec:84:0b:65:8b:96:1a:ee:a7:49:74:c3:a9:37:56:15:
         ed:57:56:99:46:5e:af:db:95:63:cb:82:da:07:ea:3a:e7:99:
         32:05:c4:e9:e1:36:ff:03:91:db:eb:18:bb:aa:57:79:c9:ac:
         ab:ca:15:06:35:98:9e:3d:4c:02:10:53:5e:8a:c6:ed:06:23:
         c3:e3:fd:bd:5f:23:64:50:7b:4c:ca:e5:d6:e1:4c:56:42:7b:
         8f:c8:3d:88:29:8c:a3:64:8d:00:40:0e:a8:c3:58:8e:78:b2:
         6d:b3:77:0e:85:7c:a1:3e:0b:6c:2b:6a:0e:85:bf:16:1b:35:
         93:43:b7:72:30:a2:a2:bd:b0:f0:9d:d8:53:67:bd:b1:4f:f7:
         53:68:74:c6:c4:55:91:84:ff:1e:5c:91:d9:71:7c:5a:a7:bd:
         0e:68:30:8d:dd:a6:c8:f9:3c:41:c5:94:a0:d4:6e:79:be:d6:
         c0:6a:c5:3b:e4:63:b4:20:bd:fd:c8:26:3e:56:d3:21:bf:f3:
         97:44:03:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:15:42 2025 by rpki-client