Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/0edd2c60-b659-3419-ba5d-056512745418.roa
File:                     0edd2c60-b659-3419-ba5d-056512745418.roa (raw, json)
Hash identifier:          gl0vxVdTLqejK+1fyjZNqoMJ4UxazU4xX4Y3ub4UfcU=
Subject key identifier:   BC:8B:64:CC:AD:52:49:6B:64:DF:EE:55:50:58:D9:C9:1C:73:9E:B9
Certificate issuer:       /CN=a278da28-82b3-48fe-bc76-7859a82f5651
Certificate serial:       010D0C9F4328584B22948FC790628ED007383900
Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/0edd2c60-b659-3419-ba5d-056512745418.roa
Signing time:             Tue 09 Sep 2025 07:44:31 +0000
ROA not before:           Tue 09 Sep 2025 07:44:31 +0000
ROA not after:            Mon 08 Dec 2025 08:44:31 +0000
asID:                     153526
IP address blocks:        209.209.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:22:94:8f:c7:90:62:8e:d0:07:38:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651
        Validity
            Not Before: Sep  9 07:44:31 2025 GMT
            Not After : Dec  8 08:44:31 2025 GMT
        Subject: CN=f666a69f-cff9-4609-b48a-14a4bb4b9e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:9f:eb:f4:14:9c:7c:1e:a1:17:88:6e:dd:
                    50:0c:6a:4f:67:43:fd:30:22:04:84:1f:f6:be:30:
                    5b:c4:74:85:5c:b3:43:54:dc:5f:ed:7b:47:a5:17:
                    53:7f:df:7e:c1:ac:c6:0d:9f:14:60:74:10:cf:a1:
                    ae:09:96:c4:34:98:f5:4f:0d:a8:9e:7c:ea:96:70:
                    55:9a:60:bb:f9:18:a1:0e:96:e3:60:0a:15:e6:c9:
                    0a:3c:99:9f:5d:8b:13:a5:5f:62:b3:b2:18:ed:a9:
                    c5:ba:bd:f3:b8:2c:03:f1:10:9d:25:29:75:17:39:
                    bd:46:02:da:2e:df:ab:e7:79:a6:df:a1:98:ab:24:
                    ec:43:0e:88:25:c5:73:b8:8d:ec:c6:ed:6e:6d:30:
                    70:32:82:89:66:c5:2c:d4:1c:56:18:e4:0c:b1:5c:
                    fd:7a:70:b6:98:45:9d:f2:a9:44:1b:02:15:7f:78:
                    b7:fc:99:72:1d:45:b1:40:3f:fa:c3:57:9d:2b:af:
                    e4:f5:3d:38:f3:a6:47:46:c7:bf:50:8a:dd:bc:54:
                    fc:00:fd:f3:ba:cc:bf:88:37:04:41:a3:6d:e6:e4:
                    a8:4b:29:c6:c5:18:67:01:f4:e8:4c:46:48:4f:f4:
                    13:0a:a3:b8:a2:66:fd:bf:26:36:e1:6a:ba:b4:cd:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8B:64:CC:AD:52:49:6B:64:DF:EE:55:50:58:D9:C9:1C:73:9E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/0edd2c60-b659-3419-ba5d-056512745418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl

            X509v3 Authority Key Identifier:
                keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:30:fd:48:0f:56:dd:0d:ae:68:c6:3c:0b:98:74:22:90:08:
         27:5c:36:bd:99:1e:55:9b:c8:d9:9d:38:7a:05:0b:4e:c8:62:
         be:29:45:d6:2a:1d:57:12:5a:6a:35:0e:dc:03:4b:ad:74:34:
         bc:c0:5e:f2:c8:b9:96:05:b2:a3:07:47:87:eb:ce:ad:a1:11:
         a0:48:dd:96:2c:dd:fc:2a:43:a5:d5:ab:c7:1a:42:6e:3e:a3:
         98:ac:3a:68:c3:cc:17:7a:58:97:80:24:1d:ff:9c:df:5b:68:
         0a:66:91:a6:60:41:cd:7c:e2:37:5a:46:df:99:c6:df:4c:09:
         ac:ac:ae:61:4b:c6:3b:ec:42:cc:76:6a:33:ea:77:49:9c:5c:
         aa:ea:5b:36:bf:22:cb:55:11:e8:c7:f7:48:43:8f:b2:e8:82:
         de:cf:92:71:01:f0:47:1e:e2:da:9e:ec:31:61:62:9d:db:3c:
         fe:06:d4:35:74:1f:79:90:ea:18:34:44:fe:68:e4:fc:6e:0b:
         3f:56:c7:9a:08:04:24:18:8e:a9:61:05:37:f3:2c:22:d9:c6:
         c7:bd:d1:a9:7d:28:5b:42:81:9a:03:11:87:95:7f:2d:f1:29:
         be:95:68:9c:7a:8d:65:ea:a6:a3:df:4d:fb:16:82:c0:06:55:
         39:03:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:29:54 2025 by rpki-client