Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa
File:                     402d1434-f06e-3831-9fd6-20002d1cb7ab.roa (raw, json)
Hash identifier:          +PHpxaRiw8OcSrNMhv6esQA6RRsTyW3bboLXW63bq9I=
Subject key identifier:   E4:A7:BE:A8:BA:FD:53:BC:9E:F1:F0:C3:39:E5:96:E9:53:83:ED:0E
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B1C36D0AB7BACCA4460E5C37A
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     393249
IP address blocks:        206.87.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d0:ab:7b:ac:ca:44:60:e5:c3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=74cef75f-8e05-43f9-9edb-dd2f24edd62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:83:f8:a3:60:c5:e1:c9:a6:fa:36:0d:80:
                    f9:9a:ba:4e:12:e2:6c:40:02:3a:bc:07:21:63:81:
                    46:f5:20:43:79:27:e3:b1:b7:65:9a:3e:0e:bc:0d:
                    15:51:c2:5b:07:cd:68:ed:30:68:a8:e8:60:0e:99:
                    de:b0:0d:9b:bf:1c:99:02:b3:6b:22:30:f3:a8:61:
                    95:ca:2f:a0:73:1c:20:9c:00:bb:a2:e2:a1:da:0c:
                    43:81:72:85:2a:49:e8:49:af:2c:4f:a3:91:df:77:
                    39:4c:12:cd:09:24:8f:4b:c9:8f:70:b4:71:e0:e2:
                    b2:01:c4:da:78:6f:f0:11:87:fb:aa:d5:d2:41:55:
                    86:cd:1c:23:68:d3:9d:e2:d9:45:d0:67:da:6d:aa:
                    32:d4:87:b1:3f:b4:ff:7b:b7:29:af:28:50:b4:fa:
                    18:b5:fa:19:86:e2:88:8a:5b:27:10:5f:44:e0:85:
                    99:03:1b:c3:c6:c1:66:6a:90:7c:79:f1:34:a3:83:
                    e9:2e:cc:95:23:c5:cb:05:9c:85:db:e1:f2:c1:5f:
                    c7:62:81:de:49:ce:19:24:97:b0:af:83:f1:e5:b7:
                    69:b4:a3:47:5e:c0:c3:6d:84:b7:ed:41:a5:9c:4a:
                    77:b0:f8:af:d4:64:32:d1:a8:dc:de:ee:1c:3f:30:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:BE:A8:BA:FD:53:BC:9E:F1:F0:C3:39:E5:96:E9:53:83:ED:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/402d1434-f06e-3831-9fd6-20002d1cb7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:13:94:89:c2:46:2f:87:0f:d5:59:a9:05:fb:d7:05:72:52:
         b3:90:5c:72:07:6c:f5:52:b9:ac:72:e6:00:f7:86:79:fc:70:
         9e:7e:76:bf:dc:ad:91:ee:d8:d0:b8:ea:84:f5:6b:aa:f5:e6:
         2c:84:5c:fe:85:67:2f:fb:81:f7:b2:1d:22:c9:a3:5c:24:b6:
         de:9a:03:95:7e:b6:e9:17:fe:46:fe:02:9f:c5:70:f7:fd:3c:
         2f:25:a9:96:4b:0e:93:6d:86:27:f3:a6:53:a8:69:a4:07:bb:
         5c:5c:1a:5d:58:a4:8d:de:1f:0c:89:e8:a1:76:71:5b:44:d6:
         d5:5e:b0:ec:28:11:8a:0c:b2:54:f0:e3:35:9f:17:e3:8e:15:
         e2:32:98:49:7c:c8:e3:bf:a8:d5:28:f5:ae:7e:7a:52:23:07:
         9d:cf:92:e5:6e:68:9e:db:be:1d:09:79:55:c4:8f:b4:79:e8:
         3a:74:d6:e4:36:15:9a:7e:59:39:7e:7e:59:04:bd:96:57:25:
         a3:ce:ee:c9:77:63:69:a8:c9:2f:c8:2a:14:e9:d7:4a:88:eb:
         67:d8:66:78:8e:7c:02:40:cb:e4:62:fc:2d:ea:90:45:82:e6:
         fa:69:4c:cc:7f:a4:d9:f7:b1:d2:e1:bf:41:0f:21:a6:c1:90:
         56:3c:1c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:01:29 2025 by rpki-client