Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/ba9bdc8e-fe6b-3f2d-85c8-ec5c11db94da.roa
File:                     ba9bdc8e-fe6b-3f2d-85c8-ec5c11db94da.roa (raw, json)
Hash identifier:          0eSbWeftuawOerXv26XpLb09XOaNQbB5/Av3JwDux5M=
Subject key identifier:   90:C9:48:E0:8E:F3:81:5B:53:8D:9E:00:71:8F:CB:CE:C0:87:03:C9
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584AF95149D2D9FB7208A3A27A00
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/ba9bdc8e-fe6b-3f2d-85c8-ec5c11db94da.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     46847
IP address blocks:        209.193.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:49:d2:d9:fb:72:08:a3:a2:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=97a42602-d2f2-46cb-96b2-7b42b93f647e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:d8:da:1d:6d:3a:09:13:25:01:2b:bd:b1:
                    77:9e:cb:10:71:5e:3e:68:25:24:52:5c:c8:d8:b4:
                    7f:d9:fd:fa:31:e2:0e:4a:59:64:6a:32:ad:41:9d:
                    4b:85:15:80:c6:b3:47:f6:da:bb:51:c5:7e:71:00:
                    d0:89:ef:63:3e:9f:df:32:fa:9b:3e:58:dd:c4:59:
                    2c:cc:9d:e8:9e:4a:39:77:61:cb:41:9d:56:b4:fe:
                    ae:2a:08:ba:42:cc:2d:ec:8c:4d:61:ad:82:fc:09:
                    8e:a8:89:23:0e:b2:23:cd:b5:fa:38:11:2f:5a:c4:
                    55:f0:28:b2:b8:24:57:72:87:47:e0:7c:3f:f0:92:
                    25:71:81:70:30:ab:85:cf:27:00:0f:13:14:a5:08:
                    4b:3b:34:eb:59:7c:58:a8:6d:81:55:bf:16:84:0e:
                    be:a9:08:09:d3:81:8a:dd:8c:2c:ca:89:53:8d:17:
                    32:1c:3d:4e:1e:d7:cb:5c:b0:d9:60:a9:f3:18:d3:
                    2b:90:70:18:e8:0e:7b:95:1e:e9:98:b6:0e:32:11:
                    56:07:fb:a2:85:b2:01:31:06:60:31:2a:2c:39:4e:
                    c9:6c:14:00:d7:c9:b1:53:d5:8a:0e:bc:d3:9b:89:
                    fc:f4:fd:fd:a8:5d:e4:4d:e7:e0:f6:65:e2:d3:14:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C9:48:E0:8E:F3:81:5B:53:8D:9E:00:71:8F:CB:CE:C0:87:03:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/ba9bdc8e-fe6b-3f2d-85c8-ec5c11db94da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.193.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:7c:ff:6a:2f:b4:e1:97:97:a0:2e:43:f0:06:d7:46:46:1f:
         e0:2a:cb:14:8a:08:43:ef:10:3a:fb:78:9d:ec:68:f9:db:4c:
         95:08:90:c9:4e:ae:2a:2f:eb:dd:6c:70:41:7c:24:5d:5d:7d:
         b5:c6:b9:04:38:1a:2b:4f:d0:ae:b5:fc:0e:0a:1b:0a:d5:d2:
         f7:dc:bc:aa:19:0f:1c:ac:7c:c1:27:52:9d:64:79:c6:1d:91:
         62:27:05:8f:ce:48:4d:41:cb:a2:c2:d0:9d:d5:98:28:fd:51:
         8e:d6:b1:70:6f:29:96:ab:60:19:63:bb:a3:69:61:96:39:fa:
         23:31:73:da:e5:2b:6b:3f:84:9a:b2:25:5d:10:d2:b9:22:19:
         2b:87:71:42:e5:6a:37:0f:11:fb:90:1b:a0:97:15:7e:95:e7:
         67:38:a2:7e:20:ed:18:91:54:1c:55:a7:3d:24:e7:ca:d9:2f:
         b6:18:9b:cd:86:f6:71:22:56:eb:5b:ec:97:68:b7:df:ea:1e:
         fb:b2:31:88:c2:08:59:b1:dd:24:f1:cd:b1:f8:45:9e:f0:cd:
         28:52:43:59:0b:e4:eb:41:aa:e9:a7:fb:f7:f2:5f:e0:2c:80:
         dd:9a:03:66:7c:0c:9f:bb:c2:51:89:78:83:f7:ad:84:33:b8:
         37:9b:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:12 2025 by rpki-client