Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
File:                     79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa (raw, json)
Hash identifier:          //ZMYxha6zsMKsuugsC4loIF0KyeibDy1vrUWfCjr80=
Subject key identifier:   59:4F:6C:F8:6C:E4:7D:03:42:6D:61:CC:F1:19:62:02:89:DA:34:59
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F4328584B5B074877446EE108FB802280
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     7922
IP address blocks:        209.250.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:48:77:44:6e:e1:08:fb:80:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=cb08cc0a-1f8d-4908-9d1d-d16642f9ab2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:d7:41:68:98:36:3b:a9:9d:41:68:e9:45:
                    a0:85:cc:a8:37:ba:47:c7:a2:87:9c:5b:fe:f3:d9:
                    38:44:e3:43:ca:56:f6:ad:17:ba:c2:88:28:3d:a4:
                    90:b6:33:a6:dc:53:7f:f9:bf:72:ac:9a:75:b0:46:
                    b1:3f:d3:69:4b:db:c2:3e:c1:22:00:a4:fd:fe:cd:
                    2c:e4:cb:98:4e:39:26:dc:98:6b:95:ba:c8:ef:ae:
                    d0:48:37:52:0c:f8:28:72:28:18:82:99:cf:da:ac:
                    cd:c8:02:a2:ab:15:bc:c6:49:1f:33:46:11:1d:99:
                    97:af:be:ba:48:cd:f7:ca:d5:e9:6a:39:84:9e:2b:
                    84:8b:25:ce:09:6c:dc:f9:a3:01:88:1c:34:ae:3a:
                    30:a2:0a:bd:24:23:8d:cf:ce:28:cf:55:cb:21:a1:
                    97:81:0e:64:64:4e:13:04:18:6c:dd:9a:2a:4a:ae:
                    3c:d5:5e:54:a5:a6:e3:f2:86:51:d0:1c:5e:49:de:
                    80:6f:78:41:39:5d:6b:32:49:50:a8:aa:1e:e5:4d:
                    85:e7:73:49:a4:fb:70:c1:97:46:b5:d6:2b:29:a2:
                    36:cc:8c:21:ab:bc:95:dc:5e:29:c0:fb:90:28:9d:
                    fa:4a:ac:bb:b2:a1:ee:7e:3d:64:bd:0b:3c:d2:59:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4F:6C:F8:6C:E4:7D:03:42:6D:61:CC:F1:19:62:02:89:DA:34:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:fc:0f:7e:54:1c:83:14:bf:40:09:e4:9d:c7:65:6e:a3:
         ae:df:52:35:8d:78:0e:55:c6:cb:bb:70:d3:cb:4e:52:96:56:
         d0:f2:d3:1f:83:a8:22:39:ef:13:f3:db:06:51:f0:84:1f:ff:
         89:4b:f8:74:2e:9b:bb:1c:d7:26:af:e6:75:8a:5d:eb:03:0d:
         0d:89:2d:f3:cf:81:21:0c:6f:65:ff:08:b9:34:e2:88:a9:e6:
         cd:6e:4a:b5:7e:b9:c4:2b:4b:66:54:52:a0:09:8a:d0:01:72:
         63:d8:f9:82:d2:24:f2:28:03:75:05:3b:cc:2a:b6:af:7e:ff:
         5a:ea:af:ff:f7:2e:6b:0f:6e:c0:23:13:06:31:6e:07:1c:11:
         e6:98:ab:08:bd:17:91:09:ae:ff:80:13:09:6e:61:0f:84:bf:
         a3:ef:9d:82:e1:29:b6:13:2b:03:9e:e3:5a:db:d7:f0:b1:5d:
         9e:82:d3:fe:df:a8:d9:c9:a1:61:ab:49:32:55:fa:63:e6:03:
         93:d7:ce:e1:dd:4d:17:9a:74:17:c7:4b:87:97:d4:bb:1e:71:
         cd:23:2f:90:72:98:4b:79:58:6f:08:ac:84:46:bb:30:21:07:
         a0:69:ea:1a:f4:0e:7a:2e:51:1f:97:5a:a1:d6:58:12:7a:c0:
         af:fb:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:49 2025 by rpki-client