Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
File:                     059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa (raw, json)
Hash identifier:          UfeoG2xDAsCcNLRAdk44cqjVHwxQ4ZKS+d7Ci2y8A6Q=
Subject key identifier:   DF:F1:15:8A:F0:D7:E5:25:84:64:F1:70:58:0A:18:2A:EB:70:98:F9
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F4328584B4BAC5B6013DCBC6FAB10F1C0
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     26831
IP address blocks:        209.124.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5b:60:13:dc:bc:6f:ab:10:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=77620098-3eb1-4f95-ad66-3592f8523cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:af:14:dd:20:f2:9b:22:09:a5:d0:78:60:
                    2f:95:0a:7a:e2:6c:02:4a:d4:eb:72:f9:6d:e5:b9:
                    ee:92:e5:c1:f9:21:6b:23:f9:1f:88:c2:8b:81:0d:
                    27:64:20:2c:ec:0f:b8:91:88:17:17:5a:2c:5e:96:
                    26:92:55:e4:35:31:18:b1:95:76:03:50:b0:34:c6:
                    63:fd:11:33:b8:e8:82:78:73:33:1e:a9:94:b0:70:
                    6a:26:47:5c:3f:27:8f:d6:99:c8:e0:ea:62:9a:d3:
                    46:44:87:e3:01:52:0b:0b:fb:b3:bd:8d:95:ac:46:
                    71:87:61:bc:99:8d:96:99:46:e6:d0:39:41:c1:a9:
                    0e:6a:d7:e6:1d:cc:a2:5e:96:7d:55:1f:57:a1:3e:
                    47:96:a4:23:12:1a:68:4a:10:02:fd:fd:af:d9:2a:
                    0e:92:74:18:82:2c:e8:b8:e2:91:0a:ff:b7:e9:f5:
                    ed:3f:64:82:5c:2b:cb:0d:00:cb:cc:95:1c:31:16:
                    23:70:4e:87:a0:1e:f5:a4:fc:cd:35:17:3e:fe:39:
                    91:d4:cc:32:bd:94:36:dc:b0:ea:b0:0b:dd:13:05:
                    87:00:08:6d:8b:f7:58:53:4b:28:93:80:ea:32:4c:
                    b5:d9:fa:19:93:95:27:53:4b:43:5a:d3:64:ba:30:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F1:15:8A:F0:D7:E5:25:84:64:F1:70:58:0A:18:2A:EB:70:98:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:64:49:28:9c:b6:3e:0d:38:56:92:08:57:61:79:09:69:
         e1:2a:26:b1:b5:4e:fb:88:b2:1c:6d:76:16:a0:20:c6:fb:78:
         47:94:d4:a1:aa:f2:7b:a7:a4:da:cb:ec:83:e3:67:29:67:ca:
         5e:cc:e9:07:e5:30:21:37:a0:e6:7c:ec:8c:3a:7b:88:29:0e:
         38:b2:85:d6:42:b0:39:f8:46:99:83:44:d9:ce:d9:52:8d:3a:
         39:62:b6:b8:a1:14:3c:e9:cd:4c:24:fb:2b:4f:86:aa:b8:cb:
         f7:07:c4:1d:19:fd:de:60:eb:7d:f3:af:41:21:81:40:dd:ec:
         51:09:38:7d:b5:0b:e6:c1:14:92:16:c6:7e:3e:8c:69:46:36:
         32:62:c0:f1:2e:8a:85:50:23:b1:f3:ad:3f:cf:d0:1f:3d:36:
         1a:0e:e7:7e:8c:1e:4b:59:d3:bc:1a:da:3d:f9:70:cd:b2:0a:
         d5:40:0b:23:c5:5b:3f:0c:11:bb:cf:a0:cc:5f:e5:83:8c:14:
         5c:18:c9:bc:31:10:a0:5e:79:b9:44:11:e6:b5:b6:15:66:1d:
         1d:24:b6:de:cb:23:c5:11:85:86:15:b9:2f:31:1d:1b:d1:47:
         cc:68:b8:13:b5:f4:29:e1:59:9f:cb:2c:82:b7:c4:4c:98:bb:
         f9:9a:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:32:49 2025 by rpki-client