Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa
File:                     4f616f41-a307-318d-bfe2-bea18e4babef.roa (raw, json)
Hash identifier:          46ZLuz5+Rl6boU6bM9yxjnP5SJ9aa6Bk2s063btOVt4=
Subject key identifier:   AF:53:DE:A6:BA:EE:0E:10:66:A1:89:1C:98:9B:A3:F0:02:A5:9C:DB
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F4328584B64CE656382AB6C499536AB80
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     26037
IP address blocks:        204.209.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:65:63:82:ab:6c:49:95:36:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=31e9806e-981c-4606-b2eb-4c01cd7a5bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:7b:e6:5d:f7:09:ca:13:fd:49:6a:73:17:
                    b2:89:91:f8:4a:6b:e7:3d:f4:bd:c2:a8:a3:d2:87:
                    ad:d6:6e:49:14:ab:83:53:ff:41:6d:02:ef:e9:03:
                    35:24:5f:c7:35:24:9f:d8:26:c0:9e:e8:14:d5:e7:
                    c6:47:ec:e0:63:ed:ee:b6:6e:00:58:08:2b:f0:d8:
                    be:2b:c3:ca:cd:25:3b:1d:30:95:2f:d5:ea:e3:be:
                    31:b4:f2:be:c6:ac:c3:13:2f:ab:e7:8a:f1:d7:3e:
                    d9:be:95:55:68:f5:f3:39:f3:2a:d6:70:a2:63:93:
                    36:e9:bc:3c:80:92:97:09:ae:ad:58:98:1c:30:db:
                    f7:4e:ad:6e:3b:d1:ec:27:8a:16:70:25:91:f3:ff:
                    b2:24:7f:1e:03:6c:80:8a:0b:b8:b8:4b:b0:a2:f5:
                    57:77:26:67:bc:ad:0f:c5:19:00:53:4a:28:25:ed:
                    15:ba:c2:7d:69:64:e4:15:cd:d3:5d:97:ce:6f:cf:
                    bb:83:aa:a3:dc:39:01:d4:2b:7f:da:a6:1e:40:29:
                    f0:4e:4d:15:50:36:52:73:22:62:bd:c9:30:3e:49:
                    6b:68:46:83:02:d2:85:42:c2:a9:50:24:a1:99:ae:
                    a2:40:19:de:3a:c4:3d:60:31:4c:77:c9:06:7d:85:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:53:DE:A6:BA:EE:0E:10:66:A1:89:1C:98:9B:A3:F0:02:A5:9C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:73:37:e3:5b:3e:f7:06:a9:36:64:cf:f0:ad:5c:6b:cb:
         b2:34:dc:ea:12:af:de:39:27:95:ee:74:73:b8:8e:39:66:e1:
         e8:f3:08:df:d3:6b:77:a3:2d:0a:22:ea:c1:b3:93:84:b7:45:
         10:2c:55:7d:56:94:81:eb:43:f3:4e:9a:09:a7:da:9c:40:4a:
         d9:6b:06:25:d9:a9:88:52:cd:c6:f7:6d:61:53:a5:ba:59:23:
         2c:54:11:ca:53:5e:9d:83:72:d4:54:ea:56:b0:f5:8e:11:58:
         4b:84:d7:76:43:e7:31:bc:10:2e:32:c6:27:03:eb:ce:bc:09:
         8b:d9:10:55:cf:7f:d4:d2:92:9f:e8:43:4a:ee:94:68:37:62:
         6c:bb:82:2b:4b:32:13:a7:6e:f5:11:84:15:e0:13:59:ba:71:
         b4:a0:17:92:41:4a:2c:43:96:43:bb:a3:ca:d7:b5:e0:74:c8:
         b1:7e:4c:83:32:63:55:a6:f8:5f:bf:f1:c0:bf:cf:f5:84:1f:
         a4:a6:2f:c7:fc:a4:50:42:e3:ce:7c:18:34:19:cd:b8:76:45:
         89:40:30:f5:ec:87:91:9e:a2:80:c0:84:83:11:74:e7:07:c2:
         c7:d7:25:b1:30:58:48:15:72:4e:45:01:41:2f:a0:2e:ff:1e:
         c2:5f:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:12 2025 by rpki-client