Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/9ae705bb-52dc-3e61-928a-3a167af88115.roa
File:                     9ae705bb-52dc-3e61-928a-3a167af88115.roa (raw, json)
Hash identifier:          SmdiFBU5Vv66lPh+Os8VdWAyKdz/OaFmpIDMUKLnyAs=
Subject key identifier:   9B:7E:B5:15:DA:BE:3D:A7:B7:E3:C0:20:A2:1E:5C:44:83:67:63:2E
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584B1AD186A4A0FAE05D9EEA1500
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/9ae705bb-52dc-3e61-928a-3a167af88115.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     40788
IP address blocks:        184.171.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:86:a4:a0:fa:e0:5d:9e:ea:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=d2e29755-244b-40d1-a561-9dda1ab722ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:97:3c:52:02:92:81:b4:db:64:f5:6a:1c:
                    35:10:a6:cd:8b:2a:77:d5:90:97:d0:06:8e:c9:d4:
                    68:ac:2a:ef:1d:f3:5f:7c:0e:47:8d:3b:34:19:05:
                    87:01:4b:e4:5d:39:c3:87:a2:c5:87:f5:23:38:56:
                    b1:f2:3e:a9:c2:13:bb:40:26:70:5c:cc:82:c9:8d:
                    55:21:9e:9a:1d:62:8b:6f:ae:80:5d:5c:c0:c8:c9:
                    e1:c4:9d:53:0f:33:6c:02:aa:a3:ad:a7:44:a8:0c:
                    06:98:ba:e2:b3:98:5d:85:90:2a:42:17:d1:2d:94:
                    b8:7a:29:f0:2c:8b:2e:a5:1e:a7:a9:6c:e7:f9:ff:
                    a6:16:57:e6:c2:e4:26:31:5d:2f:bc:2b:c3:77:e5:
                    54:5c:fa:54:74:b0:68:89:4d:03:3e:33:5e:bd:1b:
                    ec:83:53:12:6d:ab:02:b7:b9:01:e9:bf:a0:27:f1:
                    7c:79:f9:aa:1b:9f:e9:b1:39:60:1f:52:c1:a1:2c:
                    05:28:0a:e5:24:bf:c1:24:5b:f3:57:c6:de:03:e8:
                    57:62:ce:f7:6a:eb:72:76:83:29:27:10:a3:12:9f:
                    af:9a:e7:7b:a7:af:90:09:3d:d6:f4:46:0e:44:c8:
                    9a:1b:ad:84:ca:68:fd:16:c5:0a:3c:a2:7f:49:bd:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7E:B5:15:DA:BE:3D:A7:B7:E3:C0:20:A2:1E:5C:44:83:67:63:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/9ae705bb-52dc-3e61-928a-3a167af88115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.171.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:38:df:db:d1:87:eb:72:5a:d0:0d:bc:4b:9a:3f:f5:94:88:
         f0:f0:97:3d:2a:54:2f:72:97:14:28:9e:3d:c1:75:5a:b7:40:
         6a:8e:df:33:b3:2f:ab:60:65:bc:10:9b:53:7e:99:ed:7b:2c:
         41:2c:7a:33:73:88:e5:17:9a:17:ca:0b:3f:a2:c3:23:87:93:
         c7:40:97:86:ba:c0:cb:4f:27:92:30:bf:16:c8:07:a4:9c:a8:
         f6:36:32:50:af:b0:50:d9:2a:70:a5:d5:b3:0f:9a:67:fd:58:
         18:ac:fa:b6:5a:02:bb:37:53:9a:3b:f8:ac:cd:da:5d:de:d3:
         19:13:18:7c:5b:19:09:bc:2b:0b:bd:a5:99:8a:5a:e5:5e:ce:
         07:8f:16:41:f6:02:cc:63:d5:60:6b:90:7c:4f:d2:89:44:97:
         4d:18:37:35:02:4f:6e:e8:f3:42:cf:87:f1:a1:a4:da:0f:0a:
         8d:db:98:22:a7:aa:b8:89:97:d8:b3:af:10:d1:39:bd:93:d7:
         3c:bc:24:3f:b0:4a:0b:8d:0e:93:04:65:26:94:28:c7:0d:85:
         88:a1:21:7c:3c:79:69:4d:fd:ac:68:3d:d3:f0:fa:2b:72:38:
         2e:9b:ea:ae:fe:cd:8d:27:6e:8c:97:75:d3:6d:30:63:1a:fd:
         bc:dd:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:35:10 2025 by rpki-client