Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/02494130-00b8-32e4-98d4-c3f694195769.roa
File:                     02494130-00b8-32e4-98d4-c3f694195769.roa (raw, json)
Hash identifier:          +dmmN/lZGJuNvq8prgR48Aqs3Z+lfd45pHDfJlcbxdY=
Subject key identifier:   13:1E:8E:9F:09:D2:F6:51:4C:C1:56:B2:18:C2:FB:0D:F5:54:23:4F
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B21CC2863B61A020044012600
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/02494130-00b8-32e4-98d4-c3f694195769.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     11105
IP address blocks:        209.87.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:28:63:b6:1a:02:00:44:01:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=f825dff0-2208-45c5-95fe-e23c7ea691ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:76:b6:c0:4f:a0:9d:c2:ad:17:b6:10:83:
                    1e:03:f4:10:bb:89:a1:27:36:17:6b:f9:20:8e:42:
                    b6:f2:9e:68:94:38:57:2c:f0:c4:1f:f9:89:06:5d:
                    7d:f9:0f:bc:08:95:85:b0:c4:2f:ad:5a:ff:22:e7:
                    16:e4:7e:1f:5f:1d:1f:45:6a:d4:ba:66:7e:80:5b:
                    32:79:de:3d:56:29:8f:a0:6f:ae:31:b8:66:65:f1:
                    26:30:f6:54:d1:16:17:4f:82:f9:84:b8:8f:1d:8f:
                    ca:c5:65:02:6b:45:1b:13:09:0f:77:fc:ec:1e:82:
                    27:e3:2e:e3:a0:85:47:f0:aa:a5:2c:c4:dd:28:db:
                    2c:ad:a1:39:91:86:32:5b:2d:46:87:55:65:26:d6:
                    08:b0:9f:33:9c:cd:df:93:cb:c7:95:bc:d9:41:20:
                    8f:7a:e0:6a:76:e4:e4:f3:55:77:95:83:c3:38:d0:
                    14:31:30:ed:a8:a6:5e:9c:c9:a8:37:b2:41:8e:2a:
                    84:b1:38:98:ba:c7:99:42:aa:1e:91:fa:06:21:d3:
                    3b:d8:31:a9:8d:42:95:03:23:50:8a:a0:69:b0:fd:
                    bc:94:cf:75:ef:5c:fd:eb:91:cd:73:5f:e2:38:0c:
                    6e:b2:0b:49:84:02:87:33:1a:fd:2e:ce:93:f5:5a:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1E:8E:9F:09:D2:F6:51:4C:C1:56:B2:18:C2:FB:0D:F5:54:23:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/02494130-00b8-32e4-98d4-c3f694195769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:71:29:df:21:28:10:f1:e6:84:9c:30:45:bf:cb:74:1f:
         db:11:1d:e4:94:60:18:71:2e:0c:2b:6b:de:5a:66:8d:c0:cf:
         54:96:92:97:06:4f:01:db:6a:ef:a9:b6:73:01:80:44:6a:38:
         85:0d:bf:79:b7:8f:ca:c2:c9:bd:7c:28:17:60:b8:72:6b:d1:
         e9:6f:11:ba:8a:ea:0c:1a:9b:2f:a8:ea:39:8e:c6:ae:51:71:
         21:17:c5:6e:db:b5:e1:bb:68:b7:cd:01:c8:ac:3c:e5:88:cf:
         a1:af:4d:3d:cf:9a:d6:e3:15:a3:5c:b1:d0:2c:ec:9a:98:48:
         a1:14:d5:2c:45:ca:a7:6d:76:54:35:f3:36:2c:65:70:b3:57:
         11:3d:2e:91:33:eb:3c:34:69:73:39:7b:f6:43:27:6b:53:61:
         76:43:11:e4:1c:0d:c3:2e:86:e0:82:7f:73:ee:31:85:88:eb:
         dd:8e:5b:70:4a:92:90:41:1a:db:da:e5:46:51:57:8b:c7:f0:
         ee:6b:da:34:e2:a9:59:3b:00:99:67:a1:fa:d9:dd:96:de:5e:
         a3:2e:ae:96:2b:9d:e0:e2:37:7c:d5:02:55:df:fd:2f:2c:e9:
         49:ec:e5:ac:4d:63:db:fb:f6:7c:05:1a:2f:02:f5:43:17:d9:
         fd:1e:c2:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzChjthoCAEQBJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
ZjgyNWRmZjAtMjIwOC00NWM1LTk1ZmUtZTIzYzdlYTY5MWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLd2tsBPoJ3CrRe2EIMeA/QQu4mhJzYXa/kg
jkK28p5olDhXLPDEH/mJBl19+Q+8CJWFsMQvrVr/IucW5H4fXx0fRWrUumZ+gFsy
ed49VimPoG+uMbhmZfEmMPZU0RYXT4L5hLiPHY/KxWUCa0UbEwkPd/zsHoIn4y7j
oIVH8KqlLMTdKNssraE5kYYyWy1Gh1VlJtYIsJ8znM3fk8vHlbzZQSCPeuBqduTk
81V3lYPDONAUMTDtqKZenMmoN7JBjiqEsTiYuseZQqoekfoGIdM72DGpjUKVAyNQ
iqBpsP28lM9171z965HNc1/iOAxusgtJhAKHMxr9Ls6T9VqSyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMejp8J0vZRTMFWshjC+w31VCNPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMDI0OTQxMzAtMDBiOC0z
MmU0LTk4ZDQtYzNmNjk0MTk1NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Vc4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwIcSnfISgQ8eaEnDBFv8t0H9sRHeSUYBhxLgwra95aZo3Az1SWkpcG
TwHbau+ptnMBgERqOIUNv3m3j8rCyb18KBdguHJr0elvEbqK6gwamy+o6jmOxq5R
cSEXxW7bteG7aLfNAcisPOWIz6GvTT3PmtbjFaNcsdAs7JqYSKEU1SxFyqdtdlQ1
8zYsZXCzVxE9LpEz6zw0aXM5e/ZDJ2tTYXZDEeQcDcMuhuCCf3PuMYWI692OW3BK
kpBBGtva5UZRV4vH8O5r2jTiqVk7AJlnofrZ3ZbeXqMurpYrneDiN3zVAlXf/S8s
6Uns5axNY9v79nwFGi8C9UMX2f0ewg0=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:03:53 2025 by rpki-client